last executing test programs: 6m5.417541083s ago: executing program 4 (id=5): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x114, &(0x7f0000000100)={0x0, 0x79ae, 0x3380, 0x801, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = syz_io_uring_setup(0x109, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x1a6}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x22, 0x0, r0, 0x0, &(0x7f0000000440)="5df9480cd3ed76a98f2505d0ebf3e8b71eeed3cd1a9c87ee84cff04607c4a0e8bee0c197f0118450c71ae4dbb9fc4dd605ea05d8b641a3b5a0107afbc343500ee05cd0990395ae195728c25728a9dd12333b3930f99f45d27bbecbb7e81c6a2fc328c4dc056dffde1ecf441e899f68acfcf3de04173349c27926e679ebcce47228f6bba88359bce3d90f542a32cb90999827309c", 0x94, 0x90, 0x1}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000604000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0xc85ab000) syz_io_uring_submit(r5, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40000005, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() syz_open_dev$ttys(0xc, 0x2, 0x0) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000000)={0x43a7, 0x5, 0xffffff00, 0x8, 0x10, "1039db8d79bea18fa301000000000000000866"}) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000f1ff000000280000002800000005000000030000000000000e0000000000000800"/60], 0x0, 0x45}, 0x28) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) 6m0.385577306s ago: executing program 4 (id=18): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) (async) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) r5 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000a00)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0x5, 0x1, "a4"}}) (async) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000a00)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0x5, 0x1, "a4"}}) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000001700)={0x2c, &(0x7f0000000000)={0x20, 0x8, 0xb, "d70381fa5635449564784e"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000001700)={0x2c, &(0x7f0000000000)={0x20, 0x8, 0xb, "d70381fa5635449564784e"}, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x1, 0x4e, 0x0, 0x0) (async) io_uring_enter(r2, 0x847ba, 0x1, 0x4e, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r7, 0x1, 0x4a, &(0x7f0000abaff9), 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x71f, 0x80, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x19, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @local, @local}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x71f, 0x80, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x19, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @local, @local}}}}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f00000010c0)='*', 0x1}], 0x1, 0x1) socket$alg(0x26, 0x5, 0x0) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x800) splice(r9, 0x0, r12, 0x0, 0x10000000000066, 0xa) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x9) 5m52.617281627s ago: executing program 1 (id=39): socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0xa, 0x7, 0xc, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000004c0), 0xce, r2}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000b000300010004000c", 0x33}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYRESHEX=r3], 0x24}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) fsopen(&(0x7f0000000140)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x7, 0x400}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_submit(r7, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 5m51.101247456s ago: executing program 1 (id=43): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) keyctl$update(0x2, 0x0, 0x0, 0x0) kexec_load(0x8, 0x0, 0x0, 0x160000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdir(0x0, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) clock_adjtime(0x17, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103}) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r1, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1={0xfc, 0x1, '\x00', 0x2}, 0x9}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}}, 0x118) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) sendmmsg$sock(r3, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x28080011) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r4, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0x41}]) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0xa, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2000802, 0x0) 5m47.967057979s ago: executing program 1 (id=51): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) close(0x3) syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r3) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r5 = userfaultfd(0x80801) close(0x3) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x73e9, 0x1f410, 0x0, 0x19c}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) timer_settime(r4, 0x1, &(0x7f0000000740)={{}, {0x0, 0x989680}}, 0x0) 5m44.810095643s ago: executing program 32 (id=18): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) (async) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) r5 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000a00)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0x5, 0x1, "a4"}}) (async) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000a00)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0x5, 0x1, "a4"}}) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000001700)={0x2c, &(0x7f0000000000)={0x20, 0x8, 0xb, "d70381fa5635449564784e"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000001700)={0x2c, &(0x7f0000000000)={0x20, 0x8, 0xb, "d70381fa5635449564784e"}, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x1, 0x4e, 0x0, 0x0) (async) io_uring_enter(r2, 0x847ba, 0x1, 0x4e, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r7, 0x1, 0x4a, &(0x7f0000abaff9), 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x71f, 0x80, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x19, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @local, @local}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x71f, 0x80, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x19, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @local, @local}}}}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f00000010c0)='*', 0x1}], 0x1, 0x1) socket$alg(0x26, 0x5, 0x0) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x800) splice(r9, 0x0, r12, 0x0, 0x10000000000066, 0xa) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x9) 5m42.334470956s ago: executing program 1 (id=61): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120120004106cd40cd060f011bd50000000109022400010000800009040bf50233776100090507df"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) socket$kcm(0x10, 0x2, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000040000400100e2fdca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081c0800030006010000bdad44ef9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000300) 5m40.371003234s ago: executing program 1 (id=65): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x206, 0x80000000000003}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001040)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xfffffffffffffffb}) 5m35.239106462s ago: executing program 1 (id=73): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x3) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r8, &(0x7f0000000000)=""/57, 0x39) getdents64(r8, 0xfffffffffffffffe, 0x29) r9 = io_uring_setup(0x5880, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x3, 0xfefffffd}) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000300)={0x10000008}) poll(&(0x7f0000000740)=[{r10, 0x500}], 0x1, 0x80) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) unshare(0x2040400) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r12 = accept4(r0, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000040)=0x80, 0x800) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0xfc, "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"}, &(0x7f0000000140)=0x104) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000000280)={r13, 0x1, 0x8000}, &(0x7f0000000440)=0x8) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 5m34.522577605s ago: executing program 33 (id=73): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x3) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r8, &(0x7f0000000000)=""/57, 0x39) getdents64(r8, 0xfffffffffffffffe, 0x29) r9 = io_uring_setup(0x5880, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x3, 0xfefffffd}) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000300)={0x10000008}) poll(&(0x7f0000000740)=[{r10, 0x500}], 0x1, 0x80) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) unshare(0x2040400) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r12 = accept4(r0, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000040)=0x80, 0x800) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0xfc, "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"}, &(0x7f0000000140)=0x104) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000000280)={r13, 0x1, 0x8000}, &(0x7f0000000440)=0x8) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 40.041176898s ago: executing program 5 (id=1913): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, r0, 0xf2e, 0xffffffffffffff48) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000440)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x00\x00\x00\x00\x00\x00\x00g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.h\xfc\x14\x05\x00\xfd\xa4\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k2Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\x04\x87\xe1$a\xcd\xaf\xf8O\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\'\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%u\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\xf7\xa9\xa4\x1c\x15+\x84\x04\xce#\xf6\xda\xaa\xeb|\xb9\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:l\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\xf73\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00\xb2\xc9\xe4\x14A\x92P\x83o\xdb\x1d{E\xe8\xec\x85\xd4\xd2\x19\x18\xfd\xfcc~Y\x8f\xb3\x1d<\x91O\xe7\x04\x11\x1f\xbdz\xf1J\xc2\xb2\xdfH\xa7\xa7\xb80I\xc7P\xe9\n\xc8\xd6\x82\xc0\x1d\x82\x83$ky\xea\x9c5\xf3kF\xf5\xf3\xb2\xf4\r\xe3\xfe\xe0\xef8@|\xf9UGNI\xd2\xd1\xda\xcf:\x94Y\xb0\x80\xc4N\x95\xec\x90{\x19\\\f\x8b\xe1L\x06\xf42\x0e\xd1\xa9i)?\x7f;\xee\xfe\xc2\x10)\x1dQ\xcac\x14\xe8L\x16\x12!\x8120\x8e\xc9--\x96\xe3\x82\x8dT\x9b,\xc6\x83\xcb\x9bW\xa81\x9b\x88\xce\xaa\x01\xe0\x8cfVu\xdc\xf6\'\xc10a\x11\x98\xd6\x9cGp\xfeQ0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000280)=[r2, r2, r2, r2], &(0x7f00000001c0)=[0x5], &(0x7f0000000200), &(0x7f0000000280)}) 39.905772838s ago: executing program 5 (id=1916): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) r1 = dup(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0xc6}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x40187013, 0x0) pipe2$9p(0x0, 0x84880) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080)={"5381d6dc", 0x2, 0x6, 0x1, 0x400, 0x7, "9ad7f18bee5970ebb85649ef55e24c", "1012e304", "6ef1fee9", "a88bb21f", ["5c294bd54bdbcc454ec4fe2a", "1e823e1929dad85f7c58b964", "0cefddcd3a6e078d00c07b4e", "faf2b69f1b22666ad990e013"]}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000010473e896740102000001800000000000000000080005400000000005"], 0x24}}, 0x404c040) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(r1, &(0x7f0000000040)='./file0/file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xffffffff, 0x0, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20090000}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f0000000840)="f7ebfce72169b93e7cf49363183dd2d7a878459f2123b00e42320a0ec28719421ab67dde5085391dda42afe5de1cd1c73929724bb6fd7800948ac583978549934532b2ca6b4259c02621002dd1a39f6c29a8964493853e2bb27368d8bc300f61e389b7956058a26d7319b07c263c9720a49b1dd0c92ca9c6eee9fe73773236bee5c9bfa15bf498cc049269f327ba4d5e7f9d39e9a08c367e41c28b56779ecdf197a29d6e0e41794cf2f61d7378c56464f91ab241a72bfe7ab402ba65791ee01fc55fd47cf36f9f675f1cbdbaf7bca08e37e739c3c814540aca90cb65ebbc8ed91b7c86723bb6d0fd4459ae2e055e8afa6c78a898586e2c9b198f18b7ee3532edd7f901c01d2c0df609539da12ae47a66d5354f23f96ab8fa20b248b70fa8e7d634296d9f9cf34a4288bfc872c7b0d902b2f33f5f10889470adb0cea8dd21c16f03818847b5b57ab00bd7fd4bccbdd127f1d69d5169624c10087f27c03da13738b1ed52ba1e3c19d45ca1bbc16cdf93994235bbaaf78d00000000000000", &(0x7f0000000680)=@tcp=r1, 0x2}, 0x28) 39.899895005s ago: executing program 5 (id=1917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020756500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x3ff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, 0x0, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs2/binder-control\x00', 0x800, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000480)="ccdd49e22b654c3db71395adca12706b2c7a173d024cc28f0dee2ce72e62d9ce78e8469a9451752329f71cb623bad39d", 0x30}, {0x0}], 0x4, &(0x7f0000000ac0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [r2, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70, 0x4004800}}], 0x1, 0x8080) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x0]}}, &(0x7f0000001200)=""/4096, 0x1c, 0x1000, 0x0, 0x9}, 0x28) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) memfd_secret(0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0xe, 0x200cc, 0xa, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r6}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) 39.784684327s ago: executing program 5 (id=1920): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/9, 0x9}], 0x1}, 0x4}], 0x1, 0x400101a0, 0x0) 39.677972298s ago: executing program 5 (id=1922): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54dd}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 5.067422898s ago: executing program 3 (id=2160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028004000300040000000800020000b6"], 0x44}}, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0x44, 0x10}, 0x18) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x2b06, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f0000ffd000), &(0x7f0000ffe000)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) accept4(r1, &(0x7f0000000100)=@ax25={{}, [@default, @netrom, @netrom, @remote, @remote, @default, @null, @netrom]}, &(0x7f0000000200)=0x80, 0x100800) io_uring_register$IORING_REGISTER_FILES(r2, 0x14, &(0x7f00000003c0), 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028004000300040000000800020000b6"], 0x44}}, 0x0) (async) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0x44, 0x10}, 0x18) (async) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000080)) (async) syz_io_uring_setup(0x2b06, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f0000ffd000), &(0x7f0000ffe000)) (async) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) accept4(r1, &(0x7f0000000100)=@ax25={{}, [@default, @netrom, @netrom, @remote, @remote, @default, @null, @netrom]}, &(0x7f0000000200)=0x80, 0x100800) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x14, &(0x7f00000003c0), 0x2) (async) 5.001559018s ago: executing program 6 (id=2162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, 0x0, 0x0) 4.80627826s ago: executing program 6 (id=2164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) (fail_nth: 3) 4.673550742s ago: executing program 3 (id=2165): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='\xe4\xadMy\x05G\xbaf\xe4\x06\x8cX%', &(0x7f0000000180)='\xb7BD,\xe2Hq\x9c_:\x93\xf2\xfd\xc7\x18\x0fP#\xc78Q1\xaf\x9b\xd0\x11T\xb3G\xbe+\xd9\xf9#\xa3\xc1\xd6\x98\v\\\x95\xb9\x06J[\xbf\xd0v&\xf7]', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) 4.23693715s ago: executing program 3 (id=2170): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000140)={'tunl0\x00', {0x2, 0x4e21, @empty}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (fail_nth: 3) 4.133314607s ago: executing program 6 (id=2173): connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002210"], 0x0}, 0x0) socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r5, 0x7, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ftruncate(r3, 0xee08) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r7, &(0x7f0000003340)={0x2020}, 0x2020) syz_io_uring_setup(0x33cf, &(0x7f0000000240)={0x0, 0x3, 0x20, 0x3, 0x0, 0x0, r7}, 0x0, 0x0) 3.605981437s ago: executing program 3 (id=2174): connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002210"], 0x0}, 0x0) socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r5, 0x7, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ftruncate(r3, 0xee08) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20995a7d7b000d0b000800012002000004001793000000000000000000000000995cc39cad2661bc766947857f056ca28949fef7a74a884ea2a6d560267c8f9ef291dc4d041eb1fa56f2912a18b089f290a19a46049db75dc328620504874cc219f56ac519da009282eb7828e4e1f52635e5dd9e499a22ac0fe0c008ba47979b7f80805cd97cf37b43122f8955a8ecbe637946ad5568a1a672b10c4c48fc26"], 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r8, &(0x7f0000003340)={0x2020}, 0x2020) syz_io_uring_setup(0x33cf, &(0x7f0000000240)={0x0, 0x3, 0x20, 0x3, 0x0, 0x0, r8}, 0x0, 0x0) 3.548952381s ago: executing program 6 (id=2176): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x54) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0x0, 0xcd41}}}, 0x90) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r4, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000024c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7, 0x89, 0x3, 0x6, 0x7ffffffe, 0x3, 0x800, 0x9, 0x2, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0xc, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x9}) syz_usb_connect(0x5, 0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001d4f86540d804830047da0102030109023800010208400f090400b20102020194052406000105240002000d240f0110000000d51078e004"], 0x0) memfd_secret(0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x54) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x106, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0x0, 0xcd41}}}, 0x90) (async) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) renameat2(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000180)='./file1\x00', 0x4) (async) renameat2(r4, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000024c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7, 0x89, 0x3, 0x6, 0x7ffffffe, 0x3, 0x800, 0x9, 0x2, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0xc, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x9}) (async) syz_usb_connect(0x5, 0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001d4f86540d804830047da0102030109023800010208400f090400b20102020194052406000105240002000d240f0110000000d51078e004"], 0x0) (async) 2.915287295s ago: executing program 0 (id=2181): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = io_uring_setup(0x24e7, &(0x7f0000000080)={0x0, 0xa980, 0x40, 0x2, 0x17e}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000019080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f00"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) (async) socket(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) io_uring_setup(0x24e7, &(0x7f0000000080)={0x0, 0xa980, 0x40, 0x2, 0x17e}) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000019080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) 2.593474458s ago: executing program 0 (id=2183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.022998371s ago: executing program 0 (id=2192): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4", 0x20) 930.831404ms ago: executing program 0 (id=2193): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0, r2}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400c010}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000140)={'tunl0\x00', {0x2, 0x4e21, @empty}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r8, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r10}, &(0x7f0000000840), &(0x7f0000000340)=r9}, 0x20) 849.456738ms ago: executing program 2 (id=2195): connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002210"], 0x0}, 0x0) socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r5, 0x7, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ftruncate(r3, 0xee08) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r7, &(0x7f0000003340)={0x2020}, 0x2020) syz_io_uring_setup(0x33cf, &(0x7f0000000240)={0x0, 0x3, 0x20, 0x3, 0x0, 0x0, r7}, 0x0, 0x0) 823.324015ms ago: executing program 2 (id=2196): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/197, 0xc5}}], 0x2, 0x60010000, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40c1) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4", 0x20) 785.264738ms ago: executing program 0 (id=2197): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r1 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x46, 0x6, 0x0, 0x80000001, 0xfc, "37d2bb", 0x8, [0x7, 0xffffffff, 0x405, 0x6]}}) symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x8) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x3, 0x7, &(0x7f0000002980)=[{&(0x7f0000000280), 0x0, 0x80, 0x5}, {&(0x7f0000000880), 0x0, 0x2, 0x5}, {&(0x7f0000000500)="0919bf9551c48dfa1b07f8f9176ae88ae20159e5c8c512267e54cb547aa9f0ad89aa9e41524a48f1cf89031f8bd2725363587f54019c18091906ef001ce129338a81d9bbf341712b42f649f2ba235970fb4a89facd4e13f365bf6d70b0ebab8f68663d23a0c843c8504b508f5d94caff4b8ab6fa0146e3184926eb0c0c680653207cb0e05e45ecef6c2b1cc0138fbb1853a125fba6c0d4b00a4b06f7b635f25f6bf876ae17cfaf0eabe64db229bae34af2ef92747d858adf613576970fd6dff9410b449b00f0837c5f3e081aff3f136b4761273a5176f34746b9ac8ecf879a7444a6f6c6c61be143b2f69b0faa3f365989d4cb9a4c9eb93a0a970bc657", 0xfd, 0xfffffffffffff0e5, 0x3}, {&(0x7f0000001880)="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", 0xec3, 0x0, 0xa}, {&(0x7f0000000640)="ca49761d85a8706a23591bbead3346fa8a57c1582bae26419146c9d952373c29afe80eae7dfa1e5040f2f18fc22d4e972871c6aed0f9c621790121ac098ad41df17ebfe4be834bac4a24329a04dedaf22dced321a63fd9582f821668d22d2dddb4798b66ba92c945901ffe630458c2162b90e8686aaf19c0867ecf94431ce5a9", 0x80, 0x80000001, 0x3}, {&(0x7f0000000440)="44114234c997270cb9d4f8f6ce60a280092b5e5a0f106ec1991e096ceb83736d06f099f4edd18da7c3c920f0c5c99aca8b9a8f5e94aa0e492b260a36368670e6f18de0ea88007e3fe5d40244018142f6593a16edf4e4583315a12d288d300c", 0x5f, 0x4, 0x9}, {&(0x7f0000000300), 0x0, 0x1, 0x8}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000) mknodat$loop(r2, &(0x7f0000000700)='./file1\x00', 0x0, 0x1) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xea7fc}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x60}}, 0x0) 337.307544ms ago: executing program 3 (id=2198): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$igmp(0x2, 0x3, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x8, 0x2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6, 0x180) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e22, 0x3ae, @empty, 0x129}}, 0x2, 0x9, 0x3, 0x1, 0x14, 0x8001, 0x4}, 0x9c) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000180)={0x1}) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x20000000}) preadv(r6, &(0x7f0000000380)=[{&(0x7f0000000040)=""/138, 0x8a}], 0x1, 0x16, 0xc) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r6) write$binfmt_script(r2, &(0x7f00000106c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x40010, r2, 0x9f415000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000300)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r9, r10, 0x0, 0x1f5, 0x4e, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x8, 0xfffd, 0x0, 0x0, 0x8001, 0x5, "b4bc323ef77d1f000071849800000000dfff00"}}) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r11 = accept$alg(r0, 0x0, 0x0) fcntl$dupfd(r11, 0x0, r11) 245.599823ms ago: executing program 2 (id=2199): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) futimesat(0xffffffffffffffff, 0x0, &(0x7f00000019c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000280)={0x10004, 0x2, 0x9000, 0x1000, &(0x7f00000f0000/0x1000)=nil, 0x4, r1}) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000100)) 232.243613ms ago: executing program 2 (id=2200): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='\xe4\xadMy\x05G\xbaf\xe4\x06\x8cX%', &(0x7f0000000180)='\xb7BD,\xe2Hq\x9c_:\x93\xf2\xfd\xc7\x18\x0fP#\xc78Q1\xaf\x9b\xd0\x11T\xb3G\xbe+\xd9\xf9#\xa3\xc1\xd6\x98\v\\\x95\xb9\x06J[\xbf\xd0v&\xf7]', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) 174.21456ms ago: executing program 6 (id=2201): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x2, 0x3, 0x4, {0xa, 0x4e23, 0x3, @empty, 0xfffffff9}}}, 0x3a) getsockopt(r2, 0x111, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x20000000) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_fuse_handle_req(r7, 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r8, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001080)=[0x0], 0x0, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r9 = userfaultfd(0x80800) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa08, 0x0) write$FUSE_INIT(r7, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000200)) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000280)=0x15) 148.532911ms ago: executing program 0 (id=2202): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@remote, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=@bridge_dellink={0x300, 0x11, 0x700, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x10, 0x20280}, [@IFLA_VFINFO_LIST={0x2d8, 0x16, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xfffffffd, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x2, 0xfffffa41}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3, 0xb}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0xb87}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x9}}]}, {0xf4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0xcc, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x7c, 0x9, 0x88a8}}, {0x14, 0x1, {0x1, 0xae7, 0x0, 0x8100}}, {0x14, 0x1, {0xffffffff, 0x2f3, 0x6, 0x8100}}, {0x14, 0x1, {0x0, 0xb69, 0x10001, 0x8100}}, {0x14, 0x1, {0x1ff, 0x2aa, 0x7f, 0x8100}}, {0x14, 0x1, {0x2, 0x3e1, 0xff, 0x8100}}, {0x14, 0x1, {0x1, 0x5d5, 0x10000, 0x88a8}}, {0x14, 0x1, {0x5, 0x5fc, 0x6, 0x88a8}}, {0x14, 0x1, {0x11c1, 0xac5, 0xdf9e, 0x88a8}}, {0x14, 0x1, {0xffffffc0, 0xeb4, 0x1, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0xffff, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x8000}}]}, {0x180, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x267561dd, 0xfb9, 0x3, 0x88a8}}, {0x14, 0x1, {0x5, 0xf5c, 0x9, 0x8100}}, {0x14, 0x1, {0x77, 0x56f, 0x10000, 0x88a8}}, {0x14, 0x1, {0x1, 0x642, 0x6, 0x88a8}}, {0x14, 0x1, {0xbf, 0x129, 0x0, 0x8100}}, {0x14, 0x1, {0x3, 0x1c1, 0x0, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x7fff00, 0x990, 0x1}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8d7c, 0xe06, 0x5, 0x8100}}, {0x14, 0x1, {0x7, 0x85, 0xfffffff8, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xe5, 0xb2e, 0x0, 0x88a8}}, {0x14, 0x1, {0x3, 0x307, 0x10001, 0x88a8}}, {0x14, 0x1, {0x0, 0xb40, 0xfffffff7, 0x88a8}}, {0x14, 0x1, {0x3, 0xd54, 0x4, 0x88a8}}, {0x14, 0x1, {0x6, 0x3c2, 0x2, 0x8100}}, {0x14, 0x1, {0x0, 0x93a, 0x9, 0x88a8}}, {0x14, 0x1, {0xffffff80, 0xb3e, 0x6, 0x88a8}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0xfdea}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x130}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x80}}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7, 0x6b4, 0x8}}]}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x300}, 0x1, 0x0, 0x0, 0x4004}, 0x2000080) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r6], 0x24}}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r8 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r8, &(0x7f0000000540)={&(0x7f0000000180)=@in6={0xa, 0x4e27, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x41840) openat$cgroup_ro(r7, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) 148.218345ms ago: executing program 2 (id=2203): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 1.309868ms ago: executing program 6 (id=2204): r0 = fsopen(0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900"}) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002"], 0x18) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents(r5, &(0x7f0000000040)=""/46, 0x2e) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 466.323µs ago: executing program 3 (id=2205): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) msgrcv(0x0, 0x0, 0x0, 0x835597a199ab43be, 0x4800) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0xa, 0x4000, @fd_index, 0x8, 0x0, 0x0, 0x8}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r2, &(0x7f0000000280)=""/4096, 0x1000, 0x22, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c00020018001780140001"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) io_uring_enter(0xffffffffffffffff, 0x7330, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=2206): connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002210"], 0x0}, 0x0) socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r5, 0x7, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ftruncate(r3, 0xee08) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20995a7d7b000d0b000800012002000004001793000000000000000000000000995cc39cad2661bc766947857f056ca28949fef7a74a884ea2a6d560267c8f9ef291dc4d041eb1fa56f2912a18b089f290a19a46049db75dc328620504874cc219f56ac519da009282eb7828e4e1f52635e5dd9e499a22ac0fe0c008ba47979b7f80805cd97cf37b43122f8955a8ecbe637946ad5568a1a672b10c4c48fc26"], 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r7, &(0x7f0000003340)={0x2020}, 0x2020) syz_io_uring_setup(0x33cf, &(0x7f0000000240)={0x0, 0x3, 0x20, 0x3, 0x0, 0x0, r7}, 0x0, 0x0) kernel console output (not intermixed with test programs): KUP [ 364.018395][T10481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.018405][T10481] Call Trace: [ 364.018413][T10481] [ 364.018420][T10481] dump_stack_lvl+0xe8/0x150 [ 364.018450][T10481] should_fail_ex+0x46b/0x600 [ 364.018477][T10481] should_failslab+0xa8/0x100 [ 364.018497][T10481] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 364.018522][T10481] ? __alloc_skb+0x1d0/0x7d0 [ 364.018544][T10481] ? lockdep_hardirqs_on+0x7a/0x110 [ 364.018572][T10481] __alloc_skb+0x1d0/0x7d0 [ 364.018599][T10481] netlink_sendmsg+0x5d4/0xb40 [ 364.018630][T10481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.018653][T10481] ? unwind_get_return_address+0x4d/0x90 [ 364.018685][T10481] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 364.018711][T10481] ____sys_sendmsg+0x94c/0x9c0 [ 364.018735][T10481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.018761][T10481] ? import_iovec+0x73/0xa0 [ 364.018788][T10481] ___sys_sendmsg+0x2a5/0x360 [ 364.018811][T10481] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.018861][T10481] ? __fget_files+0x2a/0x420 [ 364.018881][T10481] ? __fget_files+0x3a6/0x420 [ 364.018910][T10481] __x64_sys_sendmsg+0x1c3/0x2a0 [ 364.018931][T10481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.018957][T10481] ? __pfx_ksys_write+0x10/0x10 [ 364.018990][T10481] do_syscall_64+0x14d/0xf80 [ 364.019006][T10481] ? trace_irq_disable+0x3b/0x150 [ 364.019025][T10481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.019044][T10481] ? clear_bhb_loop+0x40/0x90 [ 364.019065][T10481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.019082][T10481] RIP: 0033:0x7f46f8a8c799 [ 364.019099][T10481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.019115][T10481] RSP: 002b:00007f46f6ce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.019134][T10481] RAX: ffffffffffffffda RBX: 00007f46f8d05fa0 RCX: 00007f46f8a8c799 [ 364.019147][T10481] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 364.019158][T10481] RBP: 00007f46f6ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 364.019168][T10481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.019179][T10481] R13: 00007f46f8d06038 R14: 00007f46f8d05fa0 R15: 00007ffc31fa84f8 [ 364.019207][T10481] [ 364.062790][T10476] fido_id[10476]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 366.120585][T10495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.617750][ T31] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 366.771087][ T31] usb 1-1: no configurations [ 366.771106][ T31] usb 1-1: can't read configurations, error -22 [ 366.897741][ T31] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 367.081394][ T31] usb 1-1: no configurations [ 367.081424][ T31] usb 1-1: can't read configurations, error -22 [ 367.099043][ T31] usb usb1-port1: attempt power cycle [ 367.437695][ T31] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 367.471228][ T31] usb 1-1: no configurations [ 367.471246][ T31] usb 1-1: can't read configurations, error -22 [ 367.597770][ T31] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 367.618817][ T31] usb 1-1: no configurations [ 367.618835][ T31] usb 1-1: can't read configurations, error -22 [ 367.619161][ T31] usb usb1-port1: unable to enumerate USB device [ 368.028163][T10558] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 369.060747][T10580] FAULT_INJECTION: forcing a failure. [ 369.060747][T10580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.060798][T10580] CPU: 0 UID: 0 PID: 10580 Comm: syz.2.1613 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 369.060824][T10580] Tainted: [L]=SOFTLOCKUP [ 369.060831][T10580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 369.060842][T10580] Call Trace: [ 369.060849][T10580] [ 369.060857][T10580] dump_stack_lvl+0xe8/0x150 [ 369.060879][T10580] should_fail_ex+0x46b/0x600 [ 369.060895][T10580] strncpy_from_user+0x36/0x2b0 [ 369.060909][T10580] do_getname+0x77/0x250 [ 369.060923][T10580] do_sys_openat2+0xca/0x200 [ 369.060936][T10580] ? __pfx_do_sys_openat2+0x10/0x10 [ 369.060948][T10580] ? ksys_write+0x248/0x270 [ 369.060963][T10580] ? __pfx_ksys_write+0x10/0x10 [ 369.060978][T10580] __x64_sys_open+0x11e/0x150 [ 369.060991][T10580] do_syscall_64+0x14d/0xf80 [ 369.061001][T10580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.061011][T10580] ? clear_bhb_loop+0x40/0x90 [ 369.061025][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.061035][T10580] RIP: 0033:0x7f88e597c799 [ 369.061046][T10580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.061054][T10580] RSP: 002b:00007f88e3bad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 369.061066][T10580] RAX: ffffffffffffffda RBX: 00007f88e5bf6090 RCX: 00007f88e597c799 [ 369.061073][T10580] RDX: 00000000000000b0 RSI: 0000000000004000 RDI: 00002000000000c0 [ 369.061080][T10580] RBP: 00007f88e3bad090 R08: 0000000000000000 R09: 0000000000000000 [ 369.061086][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.061092][T10580] R13: 00007f88e5bf6128 R14: 00007f88e5bf6090 R15: 00007fff15e5a638 [ 369.061107][T10580] [ 370.364251][T10598] FAULT_INJECTION: forcing a failure. [ 370.364251][T10598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.364286][T10598] CPU: 0 UID: 0 PID: 10598 Comm: syz.5.1623 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 370.364311][T10598] Tainted: [L]=SOFTLOCKUP [ 370.364318][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.364329][T10598] Call Trace: [ 370.364336][T10598] [ 370.364353][T10598] dump_stack_lvl+0xe8/0x150 [ 370.364383][T10598] should_fail_ex+0x46b/0x600 [ 370.364411][T10598] _copy_from_iter+0x1d3/0x1670 [ 370.364440][T10598] ? trace_kmem_cache_alloc+0x29/0xf0 [ 370.364464][T10598] ? __alloc_skb+0x27d/0x7d0 [ 370.364487][T10598] ? __pfx__copy_from_iter+0x10/0x10 [ 370.364507][T10598] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 370.364531][T10598] ? __alloc_skb+0x27d/0x7d0 [ 370.364558][T10598] ? netlink_sendmsg+0x650/0xb40 [ 370.364580][T10598] ? skb_put+0x11b/0x210 [ 370.364607][T10598] netlink_sendmsg+0x6c0/0xb40 [ 370.364637][T10598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.364662][T10598] ? unwind_get_return_address+0x4d/0x90 [ 370.364684][T10598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.364710][T10598] ____sys_sendmsg+0x94c/0x9c0 [ 370.364734][T10598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.364760][T10598] ? import_iovec+0x73/0xa0 [ 370.364786][T10598] ___sys_sendmsg+0x2a5/0x360 [ 370.364809][T10598] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.364858][T10598] ? __fget_files+0x2a/0x420 [ 370.364878][T10598] ? __fget_files+0x3a6/0x420 [ 370.364908][T10598] __x64_sys_sendmsg+0x1c3/0x2a0 [ 370.364929][T10598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.364959][T10598] ? __pfx_ksys_write+0x10/0x10 [ 370.364993][T10598] do_syscall_64+0x14d/0xf80 [ 370.365010][T10598] ? trace_irq_disable+0x3b/0x150 [ 370.365029][T10598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.365047][T10598] ? clear_bhb_loop+0x40/0x90 [ 370.365069][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.365086][T10598] RIP: 0033:0x7fd3cc05c799 [ 370.365104][T10598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.365120][T10598] RSP: 002b:00007fd3ca2b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.365139][T10598] RAX: ffffffffffffffda RBX: 00007fd3cc2d5fa0 RCX: 00007fd3cc05c799 [ 370.365152][T10598] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 370.365164][T10598] RBP: 00007fd3ca2b6090 R08: 0000000000000000 R09: 0000000000000000 [ 370.365176][T10598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.365187][T10598] R13: 00007fd3cc2d6038 R14: 00007fd3cc2d5fa0 R15: 00007ffcb3b8c7d8 [ 370.365216][T10598] [ 372.111114][T10639] netlink: 'syz.3.1641': attribute type 83 has an invalid length. [ 372.777326][T10664] kvm: requested 101409 ns i8254 timer period limited to 200000 ns [ 372.791112][T10664] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 372.797779][T10664] kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 372.798441][T10664] kvm: requested 108114 ns i8254 timer period limited to 200000 ns [ 372.799585][T10664] kvm: requested 94704 ns i8254 timer period limited to 200000 ns [ 372.983076][T10678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.097695][ T5910] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 373.302648][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 373.342044][ T5910] usb 1-1: unable to get BOS descriptor or descriptor too short [ 373.344012][ T5910] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 20, changing to 7 [ 373.358539][ T5910] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 373.358566][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.358584][ T5910] usb 1-1: Product: syz [ 373.358597][ T5910] usb 1-1: Manufacturer: syz [ 373.358608][ T5910] usb 1-1: SerialNumber: syz [ 373.665480][ T5910] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 373.712466][ T5910] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 373.955812][ T5910] usb 1-1: USB disconnect, device number 41 [ 374.152692][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.367459][T10710] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1671'. [ 376.750053][T10749] netlink: 'syz.2.1686': attribute type 5 has an invalid length. [ 376.976091][T10759] FAULT_INJECTION: forcing a failure. [ 376.976091][T10759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.976126][T10759] CPU: 0 UID: 0 PID: 10759 Comm: syz.6.1690 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 376.976150][T10759] Tainted: [L]=SOFTLOCKUP [ 376.976157][T10759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.976168][T10759] Call Trace: [ 376.976176][T10759] [ 376.976184][T10759] dump_stack_lvl+0xe8/0x150 [ 376.976213][T10759] should_fail_ex+0x46b/0x600 [ 376.976241][T10759] _copy_from_user+0x2d/0xb0 [ 376.976266][T10759] map_delete_elem+0x2be/0x690 [ 376.976294][T10759] __sys_bpf+0x5e5/0x950 [ 376.976316][T10759] ? __pfx___sys_bpf+0x10/0x10 [ 376.976334][T10759] ? rt_mutex_slowunlock+0x1cb/0x300 [ 376.976370][T10759] ? ksys_write+0x248/0x270 [ 376.976395][T10759] ? __pfx_ksys_write+0x10/0x10 [ 376.976425][T10759] __x64_sys_bpf+0x7c/0x90 [ 376.976446][T10759] do_syscall_64+0x14d/0xf80 [ 376.976462][T10759] ? trace_irq_disable+0x3b/0x150 [ 376.976481][T10759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.976500][T10759] ? clear_bhb_loop+0x40/0x90 [ 376.976518][T10759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.976534][T10759] RIP: 0033:0x7f46f8a8c799 [ 376.976551][T10759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.976566][T10759] RSP: 002b:00007f46f6ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.976586][T10759] RAX: ffffffffffffffda RBX: 00007f46f8d05fa0 RCX: 00007f46f8a8c799 [ 376.976600][T10759] RDX: 0000000000000020 RSI: 0000200000001380 RDI: 0000000000000003 [ 376.976611][T10759] RBP: 00007f46f6ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 376.976623][T10759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.976634][T10759] R13: 00007f46f8d06038 R14: 00007f46f8d05fa0 R15: 00007ffc31fa84f8 [ 376.976662][T10759] [ 377.123929][T10765] FAULT_INJECTION: forcing a failure. [ 377.123929][T10765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.123961][T10765] CPU: 1 UID: 0 PID: 10765 Comm: syz.5.1694 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 377.123983][T10765] Tainted: [L]=SOFTLOCKUP [ 377.123989][T10765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.123998][T10765] Call Trace: [ 377.124005][T10765] [ 377.124012][T10765] dump_stack_lvl+0xe8/0x150 [ 377.124040][T10765] should_fail_ex+0x46b/0x600 [ 377.124066][T10765] _copy_to_user+0x31/0xb0 [ 377.124090][T10765] simple_read_from_buffer+0xe1/0x170 [ 377.124116][T10765] proc_fail_nth_read+0x1be/0x230 [ 377.124137][T10765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.124157][T10765] ? rw_verify_area+0x2ac/0x4e0 [ 377.124177][T10765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.124197][T10765] vfs_read+0x212/0xa80 [ 377.124227][T10765] ? __pfx_vfs_read+0x10/0x10 [ 377.124251][T10765] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 377.124274][T10765] ? lockdep_hardirqs_on+0x7a/0x110 [ 377.124296][T10765] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 377.124319][T10765] ? mutex_lock_nested+0x152/0x1d0 [ 377.124336][T10765] ? fdget_pos+0x252/0x320 [ 377.124362][T10765] ksys_read+0x156/0x270 [ 377.124386][T10765] ? __pfx_ksys_read+0x10/0x10 [ 377.124419][T10765] do_syscall_64+0x14d/0xf80 [ 377.124434][T10765] ? trace_irq_disable+0x3b/0x150 [ 377.124453][T10765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.124471][T10765] ? clear_bhb_loop+0x40/0x90 [ 377.124493][T10765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.124510][T10765] RIP: 0033:0x7fd3cc01cfce [ 377.124527][T10765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 377.124543][T10765] RSP: 002b:00007fd3ca2b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 377.124561][T10765] RAX: ffffffffffffffda RBX: 00007fd3ca2b66c0 RCX: 00007fd3cc01cfce [ 377.124574][T10765] RDX: 000000000000000f RSI: 00007fd3ca2b60a0 RDI: 0000000000000005 [ 377.124585][T10765] RBP: 00007fd3ca2b6090 R08: 0000000000000000 R09: 0000000000000000 [ 377.124596][T10765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.124605][T10765] R13: 00007fd3cc2d6038 R14: 00007fd3cc2d5fa0 R15: 00007ffcb3b8c7d8 [ 377.124634][T10765] [ 377.513642][T10776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.513999][T10776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.694211][T10786] FAULT_INJECTION: forcing a failure. [ 377.694211][T10786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.694244][T10786] CPU: 0 UID: 0 PID: 10786 Comm: syz.5.1701 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 377.694269][T10786] Tainted: [L]=SOFTLOCKUP [ 377.694276][T10786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.694287][T10786] Call Trace: [ 377.694294][T10786] [ 377.694303][T10786] dump_stack_lvl+0xe8/0x150 [ 377.694332][T10786] should_fail_ex+0x46b/0x600 [ 377.694361][T10786] _copy_from_user+0x2d/0xb0 [ 377.694385][T10786] snd_ctl_ioctl+0x5f8/0x1dc0 [ 377.694415][T10786] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 377.694440][T10786] ? kasan_save_track+0x4f/0x80 [ 377.694462][T10786] ? kasan_save_track+0x3e/0x80 [ 377.694482][T10786] ? kasan_save_free_info+0x46/0x50 [ 377.694501][T10786] ? __kasan_slab_free+0x5c/0x80 [ 377.694522][T10786] ? kfree+0x1c1/0x6c0 [ 377.694542][T10786] ? tomoyo_path_number_perm+0x501/0x630 [ 377.694565][T10786] ? security_file_ioctl+0xc3/0x2a0 [ 377.694582][T10786] ? __se_sys_ioctl+0x47/0x170 [ 377.694605][T10786] ? do_syscall_64+0x14d/0xf80 [ 377.694621][T10786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.694678][T10786] ? kasan_quarantine_put+0xbb/0x1f0 [ 377.694708][T10786] ? tomoyo_path_number_perm+0x219/0x630 [ 377.694733][T10786] ? tomoyo_path_number_perm+0x219/0x630 [ 377.694761][T10786] ? do_vfs_ioctl+0x117b/0x1540 [ 377.694780][T10786] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 377.694798][T10786] ? __pfx_smack_log+0x10/0x10 [ 377.694820][T10786] ? smk_access+0x14c/0x4e0 [ 377.694846][T10786] ? smk_tskacc+0x311/0x3a0 [ 377.694872][T10786] ? smack_file_ioctl+0x2c2/0x360 [ 377.694898][T10786] ? __pfx_smack_file_ioctl+0x10/0x10 [ 377.694930][T10786] ? __fget_files+0x2a/0x420 [ 377.694949][T10786] ? __fget_files+0x3a6/0x420 [ 377.694969][T10786] ? __fget_files+0x2a/0x420 [ 377.694998][T10786] ? bpf_lsm_file_ioctl+0x9/0x20 [ 377.695017][T10786] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 377.695037][T10786] __se_sys_ioctl+0xff/0x170 [ 377.695064][T10786] do_syscall_64+0x14d/0xf80 [ 377.695079][T10786] ? trace_irq_disable+0x3b/0x150 [ 377.695099][T10786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.695117][T10786] ? clear_bhb_loop+0x40/0x90 [ 377.695139][T10786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.695156][T10786] RIP: 0033:0x7fd3cc05c799 [ 377.695173][T10786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.695188][T10786] RSP: 002b:00007fd3ca2b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.695207][T10786] RAX: ffffffffffffffda RBX: 00007fd3cc2d5fa0 RCX: 00007fd3cc05c799 [ 377.695220][T10786] RDX: 0000000000000000 RSI: 00000000c0405519 RDI: 0000000000000003 [ 377.695232][T10786] RBP: 00007fd3ca2b6090 R08: 0000000000000000 R09: 0000000000000000 [ 377.695244][T10786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.695255][T10786] R13: 00007fd3cc2d6038 R14: 00007fd3cc2d5fa0 R15: 00007ffcb3b8c7d8 [ 377.695283][T10786] [ 377.727668][ T5910] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 378.008357][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 378.010900][ T5910] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 378.010923][ T5910] usb 7-1: config 0 has no interface number 0 [ 378.048115][ T5910] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 378.048132][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.048142][ T5910] usb 7-1: Product: syz [ 378.048149][ T5910] usb 7-1: Manufacturer: syz [ 378.048156][ T5910] usb 7-1: SerialNumber: syz [ 378.071176][ T5910] usb 7-1: config 0 descriptor?? [ 378.113548][ T5910] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 378.309019][ T5910] gspca_spca1528: reg_w err -71 [ 378.342781][ T5910] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 378.369757][ T5910] usb 7-1: USB disconnect, device number 11 [ 378.427308][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.427383][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.687112][T10802] IPVS: set_ctl: invalid protocol: 1 10.1.1.2:20004 [ 378.818379][ T5866] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 378.939300][T10813] FAULT_INJECTION: forcing a failure. [ 378.939300][T10813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.939322][T10813] CPU: 1 UID: 0 PID: 10813 Comm: syz.6.1712 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 378.939337][T10813] Tainted: [L]=SOFTLOCKUP [ 378.939341][T10813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.939347][T10813] Call Trace: [ 378.939351][T10813] [ 378.939356][T10813] dump_stack_lvl+0xe8/0x150 [ 378.939375][T10813] should_fail_ex+0x46b/0x600 [ 378.939391][T10813] _copy_from_user+0x2d/0xb0 [ 378.939406][T10813] bpf_test_init+0xd8/0x150 [ 378.939421][T10813] bpf_prog_test_run_skb+0x36f/0x1c90 [ 378.939447][T10813] ? __fget_files+0x2a/0x420 [ 378.939459][T10813] ? __fget_files+0x3a6/0x420 [ 378.939470][T10813] ? __fget_files+0x2a/0x420 [ 378.939483][T10813] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 378.939496][T10813] bpf_prog_test_run+0x2cd/0x340 [ 378.939512][T10813] __sys_bpf+0x643/0x950 [ 378.939525][T10813] ? __pfx___sys_bpf+0x10/0x10 [ 378.939535][T10813] ? rt_mutex_slowunlock+0x1cb/0x300 [ 378.939555][T10813] ? ksys_write+0x248/0x270 [ 378.939570][T10813] ? __pfx_ksys_write+0x10/0x10 [ 378.939588][T10813] __x64_sys_bpf+0x7c/0x90 [ 378.939599][T10813] do_syscall_64+0x14d/0xf80 [ 378.939608][T10813] ? trace_irq_disable+0x3b/0x150 [ 378.939620][T10813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.939630][T10813] ? clear_bhb_loop+0x40/0x90 [ 378.939642][T10813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.939652][T10813] RIP: 0033:0x7f46f8a8c799 [ 378.939662][T10813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.939671][T10813] RSP: 002b:00007f46f6ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.939681][T10813] RAX: ffffffffffffffda RBX: 00007f46f8d05fa0 RCX: 00007f46f8a8c799 [ 378.939689][T10813] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 378.939695][T10813] RBP: 00007f46f6ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 378.939701][T10813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.939707][T10813] R13: 00007f46f8d06038 R14: 00007f46f8d05fa0 R15: 00007ffc31fa84f8 [ 378.939722][T10813] [ 379.067671][ T5866] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 379.067697][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.238270][ T5866] usb 1-1: config 0 descriptor?? [ 379.291331][ T5866] cp210x 1-1:0.0: cp210x converter detected [ 379.466107][ T5866] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 379.466189][ T5866] cp210x 1-1:0.0: querying part number failed [ 379.589650][ T5866] usb 1-1: cp210x converter now attached to ttyUSB0 [ 381.618088][ T31] usb 1-1: USB disconnect, device number 42 [ 381.623618][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 381.624388][ T31] cp210x 1-1:0.0: device disconnected [ 382.167763][ T31] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 382.329402][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 382.331428][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 86 [ 382.333623][ T31] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 382.333647][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.333666][ T31] usb 1-1: Product: syz [ 382.333678][ T31] usb 1-1: Manufacturer: syz [ 382.333691][ T31] usb 1-1: SerialNumber: syz [ 382.351865][ T31] usb 1-1: config 0 descriptor?? [ 382.352826][T10874] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 382.422782][ T31] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 382.621033][T10874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.625487][T10874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.663869][T10874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.694852][T10874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.139928][T10911] FAULT_INJECTION: forcing a failure. [ 383.139928][T10911] name failslab, interval 1, probability 0, space 0, times 0 [ 383.139963][T10911] CPU: 0 UID: 0 PID: 10911 Comm: syz.6.1752 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 383.139987][T10911] Tainted: [L]=SOFTLOCKUP [ 383.139994][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 383.140005][T10911] Call Trace: [ 383.140012][T10911] [ 383.140020][T10911] dump_stack_lvl+0xe8/0x150 [ 383.140049][T10911] should_fail_ex+0x46b/0x600 [ 383.140075][T10911] should_failslab+0xa8/0x100 [ 383.140094][T10911] __kvmalloc_node_noprof+0x170/0x8e0 [ 383.140113][T10911] ? proc_sys_call_handler+0x3d2/0x830 [ 383.140143][T10911] proc_sys_call_handler+0x3d2/0x830 [ 383.140170][T10911] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 383.140195][T10911] ? aio_write+0x559/0x880 [ 383.140223][T10911] aio_write+0x5df/0x880 [ 383.140259][T10911] ? __pfx_aio_write+0x10/0x10 [ 383.140313][T10911] io_submit_one+0x7bb/0x14c0 [ 383.140339][T10911] ? irqentry_exit+0x59e/0x620 [ 383.140368][T10911] ? trace_irq_disable+0x3b/0x150 [ 383.140392][T10911] ? __pfx_io_submit_one+0x10/0x10 [ 383.140427][T10911] ? __might_fault+0xaf/0x130 [ 383.140454][T10911] __se_sys_io_submit+0x195/0x340 [ 383.140479][T10911] ? __pfx___se_sys_io_submit+0x10/0x10 [ 383.140499][T10911] ? ksys_write+0x248/0x270 [ 383.140536][T10911] do_syscall_64+0x14d/0xf80 [ 383.140551][T10911] ? trace_irq_disable+0x3b/0x150 [ 383.140569][T10911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.140586][T10911] ? clear_bhb_loop+0x40/0x90 [ 383.140607][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.140624][T10911] RIP: 0033:0x7f46f8a8c799 [ 383.140641][T10911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.140656][T10911] RSP: 002b:00007f46f6ce6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 383.140676][T10911] RAX: ffffffffffffffda RBX: 00007f46f8d05fa0 RCX: 00007f46f8a8c799 [ 383.140689][T10911] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 00007f46f6cb6000 [ 383.140700][T10911] RBP: 00007f46f6ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 383.140711][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.140721][T10911] R13: 00007f46f8d06038 R14: 00007f46f8d05fa0 R15: 00007ffc31fa84f8 [ 383.140748][T10911] [ 383.693606][T10913] FAULT_INJECTION: forcing a failure. [ 383.693606][T10913] name failslab, interval 1, probability 0, space 0, times 0 [ 383.693640][T10913] CPU: 1 UID: 0 PID: 10913 Comm: syz.5.1753 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 383.693666][T10913] Tainted: [L]=SOFTLOCKUP [ 383.693672][T10913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 383.693683][T10913] Call Trace: [ 383.693690][T10913] [ 383.693699][T10913] dump_stack_lvl+0xe8/0x150 [ 383.693728][T10913] should_fail_ex+0x46b/0x600 [ 383.693755][T10913] should_failslab+0xa8/0x100 [ 383.693775][T10913] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 383.693800][T10913] ? __alloc_skb+0x1d0/0x7d0 [ 383.693822][T10913] ? lockdep_hardirqs_on+0x7a/0x110 [ 383.693852][T10913] __alloc_skb+0x1d0/0x7d0 [ 383.693880][T10913] netlink_sendmsg+0x5d4/0xb40 [ 383.693911][T10913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.693935][T10913] ? unwind_get_return_address+0x4d/0x90 [ 383.693956][T10913] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.693983][T10913] ____sys_sendmsg+0x94c/0x9c0 [ 383.694007][T10913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.694033][T10913] ? import_iovec+0x73/0xa0 [ 383.694061][T10913] ___sys_sendmsg+0x2a5/0x360 [ 383.694085][T10913] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.694135][T10913] ? __fget_files+0x2a/0x420 [ 383.694155][T10913] ? __fget_files+0x3a6/0x420 [ 383.694185][T10913] __x64_sys_sendmsg+0x1c3/0x2a0 [ 383.694206][T10913] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.694233][T10913] ? __pfx_ksys_write+0x10/0x10 [ 383.694267][T10913] do_syscall_64+0x14d/0xf80 [ 383.694283][T10913] ? trace_irq_disable+0x3b/0x150 [ 383.694302][T10913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.694327][T10913] ? clear_bhb_loop+0x40/0x90 [ 383.694348][T10913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.694366][T10913] RIP: 0033:0x7fd3cc05c799 [ 383.694383][T10913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.694398][T10913] RSP: 002b:00007fd3ca2b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.694417][T10913] RAX: ffffffffffffffda RBX: 00007fd3cc2d5fa0 RCX: 00007fd3cc05c799 [ 383.694430][T10913] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000015 [ 383.694442][T10913] RBP: 00007fd3ca2b6090 R08: 0000000000000000 R09: 0000000000000000 [ 383.694454][T10913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.694465][T10913] R13: 00007fd3cc2d6038 R14: 00007fd3cc2d5fa0 R15: 00007ffcb3b8c7d8 [ 383.694494][T10913] [ 383.716902][ T57] usb 1-1: Failed to submit usb control message: -110 [ 383.716937][ T57] usb 1-1: unable to send the bmi data to the device: -110 [ 383.716953][ T57] usb 1-1: unable to get target info from device [ 383.716967][ T57] usb 1-1: could not get target info (-110) [ 383.717048][ T57] usb 1-1: could not probe fw (-110) [ 384.757886][ T5910] usb 1-1: USB disconnect, device number 43 [ 386.008321][T10958] netlink: 'syz.0.1771': attribute type 29 has an invalid length. [ 386.181812][T10952] FAULT_INJECTION: forcing a failure. [ 386.181812][T10952] name fail_futex, interval 1, probability 0, space 0, times 0 [ 386.181846][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.6.1767 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 386.181870][T10952] Tainted: [L]=SOFTLOCKUP [ 386.181877][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.181898][T10952] Call Trace: [ 386.181906][T10952] [ 386.181914][T10952] dump_stack_lvl+0xe8/0x150 [ 386.181943][T10952] should_fail_ex+0x46b/0x600 [ 386.181969][T10952] get_futex_key+0x1ac/0x1690 [ 386.182000][T10952] ? perf_lock_task_context+0xf3/0x850 [ 386.182020][T10952] ? __lock_acquire+0x6b5/0x2cf0 [ 386.182039][T10952] ? __pfx_get_futex_key+0x10/0x10 [ 386.182062][T10952] ? __lock_acquire+0x6b5/0x2cf0 [ 386.182085][T10952] futex_wake+0x114/0x580 [ 386.182105][T10952] ? __lock_acquire+0x6b5/0x2cf0 [ 386.182124][T10952] ? __pfx_futex_wake+0x10/0x10 [ 386.182143][T10952] ? do_raw_spin_lock+0x12b/0x2f0 [ 386.182175][T10952] do_futex+0x395/0x420 [ 386.182197][T10952] ? __pfx_do_futex+0x10/0x10 [ 386.182225][T10952] ? __might_fault+0xaf/0x130 [ 386.182252][T10952] mm_release+0x103/0x290 [ 386.182277][T10952] exit_mm+0x51/0x220 [ 386.182294][T10952] ? unwind_deferred_task_exit+0x67/0xa0 [ 386.182317][T10952] do_exit+0x6a2/0x23c0 [ 386.182337][T10952] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 386.182365][T10952] ? __pfx_do_exit+0x10/0x10 [ 386.182380][T10952] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 386.182401][T10952] ? reacquire_held_locks+0x104/0x190 [ 386.182419][T10952] ? rt_spin_lock+0x1e0/0x400 [ 386.182449][T10952] do_group_exit+0x21b/0x2d0 [ 386.182467][T10952] ? rt_spin_unlock+0x160/0x200 [ 386.182490][T10952] get_signal+0x125c/0x1310 [ 386.182528][T10952] arch_do_signal_or_restart+0xbc/0x830 [ 386.182554][T10952] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 386.182581][T10952] ? __x64_sys_recvmmsg+0x198/0x250 [ 386.182609][T10952] exit_to_user_mode_loop+0x86/0x480 [ 386.182632][T10952] ? rcu_is_watching+0x15/0xb0 [ 386.182655][T10952] do_syscall_64+0x32d/0xf80 [ 386.182672][T10952] ? trace_irq_disable+0x3b/0x150 [ 386.182691][T10952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.182710][T10952] ? clear_bhb_loop+0x40/0x90 [ 386.182731][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.182749][T10952] RIP: 0033:0x7f46f8a8c799 [ 386.182766][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.182780][T10952] RSP: 002b:00007f46f6ce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 386.182799][T10952] RAX: fffffffffffffe00 RBX: 00007f46f8d05fa0 RCX: 00007f46f8a8c799 [ 386.182812][T10952] RDX: 0000000000000001 RSI: 0000200000008b80 RDI: 0000000000000003 [ 386.182824][T10952] RBP: 00007f46f6ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 386.182835][T10952] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 386.182845][T10952] R13: 00007f46f8d06038 R14: 00007f46f8d05fa0 R15: 00007ffc31fa84f8 [ 386.182874][T10952] [ 386.351446][ T5866] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 386.417672][ T5880] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 386.548845][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 386.555051][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 386.555084][ T5866] usb 1-1: can't read configurations, error -61 [ 386.567684][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 386.569967][ T5880] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.569992][ T5880] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.570014][ T5880] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.570034][ T5880] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.570072][ T5880] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 386.570092][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.697669][ T5866] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 386.824548][ T5880] usb 6-1: GET_CAPABILITIES returned 0 [ 386.824595][ T5880] usbtmc 6-1:16.0: can't read capabilities [ 386.916869][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 386.927932][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 386.927968][ T5866] usb 1-1: can't read configurations, error -61 [ 386.928343][ T5866] usb usb1-port1: attempt power cycle [ 387.027728][T10963] FAULT_INJECTION: forcing a failure. [ 387.027728][T10963] name failslab, interval 1, probability 0, space 0, times 0 [ 387.027762][T10963] CPU: 1 UID: 0 PID: 10963 Comm: syz.5.1773 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.027786][T10963] Tainted: [L]=SOFTLOCKUP [ 387.027792][T10963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.027803][T10963] Call Trace: [ 387.027811][T10963] [ 387.027819][T10963] dump_stack_lvl+0xe8/0x150 [ 387.027849][T10963] should_fail_ex+0x46b/0x600 [ 387.027876][T10963] should_failslab+0xa8/0x100 [ 387.027896][T10963] __kmalloc_noprof+0xdf/0x7b0 [ 387.027921][T10963] ? tomoyo_encode+0x28b/0x550 [ 387.027946][T10963] tomoyo_encode+0x28b/0x550 [ 387.027971][T10963] tomoyo_realpath_from_path+0x58d/0x5d0 [ 387.028001][T10963] ? tomoyo_path_number_perm+0x219/0x630 [ 387.028026][T10963] tomoyo_path_number_perm+0x246/0x630 [ 387.028053][T10963] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 387.028079][T10963] ? __lock_acquire+0x6b5/0x2cf0 [ 387.028129][T10963] ? __fget_files+0x2a/0x420 [ 387.028153][T10963] ? __fget_files+0x2a/0x420 [ 387.028173][T10963] ? __fget_files+0x3a6/0x420 [ 387.028192][T10963] ? __fget_files+0x2a/0x420 [ 387.028217][T10963] security_file_ioctl+0xc3/0x2a0 [ 387.028245][T10963] __se_sys_ioctl+0x47/0x170 [ 387.028273][T10963] do_syscall_64+0x14d/0xf80 [ 387.028289][T10963] ? trace_irq_disable+0x3b/0x150 [ 387.028309][T10963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.028328][T10963] ? clear_bhb_loop+0x40/0x90 [ 387.028350][T10963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.028367][T10963] RIP: 0033:0x7fd3cc05c799 [ 387.028384][T10963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.028399][T10963] RSP: 002b:00007fd3ca2b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.028419][T10963] RAX: ffffffffffffffda RBX: 00007fd3cc2d5fa0 RCX: 00007fd3cc05c799 [ 387.028431][T10963] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000004 [ 387.028443][T10963] RBP: 00007fd3ca2b6090 R08: 0000000000000000 R09: 0000000000000000 [ 387.028455][T10963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.028465][T10963] R13: 00007fd3cc2d6038 R14: 00007fd3cc2d5fa0 R15: 00007ffcb3b8c7d8 [ 387.028495][T10963] [ 387.028513][T10963] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.034739][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.036910][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.039411][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.041446][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.041513][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.041574][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.041629][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.041686][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.041748][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.041812][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.041877][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.041936][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.041992][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.042056][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.042120][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 387.042182][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 387.042423][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 387.047814][ T5880] usb 6-1: USB disconnect, device number 12 [ 387.267669][ T5866] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 387.331889][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 387.340226][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 387.340270][ T5866] usb 1-1: can't read configurations, error -61 [ 387.527682][ T5866] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 387.582012][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 387.583736][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 387.583768][ T5866] usb 1-1: can't read configurations, error -61 [ 387.584108][ T5866] usb usb1-port1: unable to enumerate USB device [ 388.017446][T11006] FAULT_INJECTION: forcing a failure. [ 388.017446][T11006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.017481][T11006] CPU: 0 UID: 0 PID: 11006 Comm: syz.3.1790 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 388.017506][T11006] Tainted: [L]=SOFTLOCKUP [ 388.017512][T11006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.017523][T11006] Call Trace: [ 388.017531][T11006] [ 388.017539][T11006] dump_stack_lvl+0xe8/0x150 [ 388.017569][T11006] should_fail_ex+0x46b/0x600 [ 388.017593][T11006] _copy_from_user+0x2d/0xb0 [ 388.017617][T11006] ___sys_recvmsg+0x175/0x590 [ 388.017634][T11006] ? __lock_acquire+0x6b5/0x2cf0 [ 388.017655][T11006] ? __pfx____sys_recvmsg+0x10/0x10 [ 388.017703][T11006] do_recvmmsg+0x33a/0x800 [ 388.017727][T11006] ? __pfx_do_recvmmsg+0x10/0x10 [ 388.017754][T11006] ? rt_mutex_slowunlock+0x1cb/0x300 [ 388.017788][T11006] __x64_sys_recvmmsg+0x198/0x250 [ 388.017809][T11006] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 388.017838][T11006] do_syscall_64+0x14d/0xf80 [ 388.017854][T11006] ? trace_irq_disable+0x3b/0x150 [ 388.017874][T11006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.017892][T11006] ? clear_bhb_loop+0x40/0x90 [ 388.017913][T11006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.017931][T11006] RIP: 0033:0x7f9f14e7c799 [ 388.017948][T11006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.017964][T11006] RSP: 002b:00007f9f130ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 388.017983][T11006] RAX: ffffffffffffffda RBX: 00007f9f150f6090 RCX: 00007f9f14e7c799 [ 388.017996][T11006] RDX: 000000000291962b RSI: 0000200000000040 RDI: 0000000000000003 [ 388.018008][T11006] RBP: 00007f9f130ad090 R08: 0000000000000000 R09: 0000000000000000 [ 388.018019][T11006] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 388.018031][T11006] R13: 00007f9f150f6128 R14: 00007f9f150f6090 R15: 00007ffff1428878 [ 388.018059][T11006] [ 388.671752][T11026] pim6reg: entered allmulticast mode [ 388.713297][T11031] FAULT_INJECTION: forcing a failure. [ 388.713297][T11031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.713332][T11031] CPU: 1 UID: 0 PID: 11031 Comm: syz.6.1803 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 388.713356][T11031] Tainted: [L]=SOFTLOCKUP [ 388.713363][T11031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.713374][T11031] Call Trace: [ 388.713381][T11031] [ 388.713390][T11031] dump_stack_lvl+0xe8/0x150 [ 388.713419][T11031] should_fail_ex+0x46b/0x600 [ 388.713446][T11031] _copy_to_user+0x31/0xb0 [ 388.713472][T11031] simple_read_from_buffer+0xe1/0x170 [ 388.713498][T11031] proc_fail_nth_read+0x1be/0x230 [ 388.713529][T11031] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.713553][T11031] ? rw_verify_area+0x2ac/0x4e0 [ 388.713576][T11031] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.713597][T11031] vfs_read+0x212/0xa80 [ 388.713629][T11031] ? __pfx_vfs_read+0x10/0x10 [ 388.713654][T11031] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 388.713679][T11031] ? lockdep_hardirqs_on+0x7a/0x110 [ 388.713704][T11031] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 388.713728][T11031] ? mutex_lock_nested+0x152/0x1d0 [ 388.713747][T11031] ? fdget_pos+0x252/0x320 [ 388.713776][T11031] ksys_read+0x156/0x270 [ 388.713801][T11031] ? __pfx_ksys_read+0x10/0x10 [ 388.713835][T11031] do_syscall_64+0x14d/0xf80 [ 388.713852][T11031] ? trace_irq_disable+0x3b/0x150 [ 388.713871][T11031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.713889][T11031] ? clear_bhb_loop+0x40/0x90 [ 388.713910][T11031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.713928][T11031] RIP: 0033:0x7f46f8a4cfce [ 388.713945][T11031] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 388.713961][T11031] RSP: 002b:00007f46f6ce5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.713980][T11031] RAX: ffffffffffffffda RBX: 00007f46f6ce66c0 RCX: 00007f46f8a4cfce [ 388.713994][T11031] RDX: 000000000000000f RSI: 00007f46f6ce60a0 RDI: 0000000000000011 [ 388.714005][T11031] RBP: 00007f46f6ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 388.714016][T11031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.714027][T11031] R13: 00007f46f8d06038 R14: 00007f46f8d05fa0 R15: 00007ffc31fa84f8 [ 388.714060][T11031] [ 390.817339][T11042] Scaler: ================= START STATUS ================= [ 390.817354][T11042] Scaler: ================== END STATUS ================== [ 391.047432][T11055] FAULT_INJECTION: forcing a failure. [ 391.047432][T11055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.047466][T11055] CPU: 0 UID: 0 PID: 11055 Comm: syz.6.1811 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 391.047491][T11055] Tainted: [L]=SOFTLOCKUP [ 391.047497][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 391.047508][T11055] Call Trace: [ 391.047515][T11055] [ 391.047523][T11055] dump_stack_lvl+0xe8/0x150 [ 391.047556][T11055] should_fail_ex+0x46b/0x600 [ 391.047586][T11055] _copy_from_iter+0x1d3/0x1670 [ 391.047613][T11055] ? trace_kmem_cache_alloc+0x29/0xf0 [ 391.047635][T11055] ? __alloc_skb+0x27d/0x7d0 [ 391.047657][T11055] ? __pfx__copy_from_iter+0x10/0x10 [ 391.047676][T11055] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 391.047699][T11055] ? __alloc_skb+0x27d/0x7d0 [ 391.047724][T11055] ? netlink_sendmsg+0x650/0xb40 [ 391.047743][T11055] ? skb_put+0x11b/0x210 [ 391.047775][T11055] netlink_sendmsg+0x6c0/0xb40 [ 391.047803][T11055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.047830][T11055] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.047856][T11055] ____sys_sendmsg+0x94c/0x9c0 [ 391.047879][T11055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.047905][T11055] ? import_iovec+0x73/0xa0 [ 391.047930][T11055] ___sys_sendmsg+0x2a5/0x360 [ 391.047952][T11055] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.047975][T11055] ? kstrtouint+0x6e/0xe0 [ 391.048018][T11055] ? __fget_files+0x2a/0x420 [ 391.048039][T11055] ? __fget_files+0x3a6/0x420 [ 391.048068][T11055] __sys_sendmmsg+0x282/0x4e0 [ 391.048092][T11055] ? __pfx___sys_sendmmsg+0x10/0x10 [ 391.048117][T11055] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 391.048151][T11055] ? ksys_write+0x248/0x270 [ 391.048177][T11055] ? __pfx_ksys_write+0x10/0x10 [ 391.048206][T11055] __x64_sys_sendmmsg+0xa0/0xc0 [ 391.048226][T11055] do_syscall_64+0x14d/0xf80 [ 391.048242][T11055] ? trace_irq_disable+0x3b/0x150 [ 391.048262][T11055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.048280][T11055] ? clear_bhb_loop+0x40/0x90 [ 391.048300][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.048318][T11055] RIP: 0033:0x7f46f8a8c799 [ 391.048335][T11055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.048349][T11055] RSP: 002b:00007f46f6ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 391.048368][T11055] RAX: ffffffffffffffda RBX: 00007f46f8d05fa0 RCX: 00007f46f8a8c799 [ 391.048382][T11055] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 391.048394][T11055] RBP: 00007f46f6ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 391.048404][T11055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.048415][T11055] R13: 00007f46f8d06038 R14: 00007f46f8d05fa0 R15: 00007ffc31fa84f8 [ 391.048443][T11055] [ 391.478636][T11059] FAULT_INJECTION: forcing a failure. [ 391.478636][T11059] name failslab, interval 1, probability 0, space 0, times 0 [ 391.478677][T11059] CPU: 1 UID: 0 PID: 11059 Comm: syz.3.1814 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 391.478701][T11059] Tainted: [L]=SOFTLOCKUP [ 391.478707][T11059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 391.478718][T11059] Call Trace: [ 391.478726][T11059] [ 391.478734][T11059] dump_stack_lvl+0xe8/0x150 [ 391.478763][T11059] should_fail_ex+0x46b/0x600 [ 391.478792][T11059] should_failslab+0xa8/0x100 [ 391.478813][T11059] kmem_cache_alloc_noprof+0x87/0x680 [ 391.478837][T11059] ? sctp_get_port_local+0x748/0x1770 [ 391.478866][T11059] sctp_get_port_local+0x748/0x1770 [ 391.478896][T11059] ? sctp_get_port_local+0x525/0x1770 [ 391.478920][T11059] ? __pfx_sctp_get_port_local+0x10/0x10 [ 391.478945][T11059] ? sctp_bind_addr_match+0x28b/0x2b0 [ 391.478969][T11059] sctp_do_bind+0x4f1/0x9d0 [ 391.479003][T11059] sctp_connect_new_asoc+0x270/0x6b0 [ 391.479028][T11059] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 391.479054][T11059] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 391.479078][T11059] ? lockdep_hardirqs_on+0x7a/0x110 [ 391.479101][T11059] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 391.479118][T11059] ? security_sctp_bind_connect+0x7e/0x2c0 [ 391.479139][T11059] sctp_sendmsg+0x14c0/0x2990 [ 391.479174][T11059] ? __pfx_sctp_sendmsg+0x10/0x10 [ 391.479200][T11059] ? __lock_acquire+0x6b5/0x2cf0 [ 391.479235][T11059] ? sock_rps_record_flow+0x19/0x400 [ 391.479262][T11059] ? inet_sendmsg+0x2f4/0x370 [ 391.479293][T11059] ____sys_sendmsg+0x7da/0x9c0 [ 391.479318][T11059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.479346][T11059] ? import_iovec+0x73/0xa0 [ 391.479373][T11059] ___sys_sendmsg+0x2a5/0x360 [ 391.479398][T11059] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.479421][T11059] ? kstrtouint+0x6e/0xe0 [ 391.479468][T11059] ? __fget_files+0x2a/0x420 [ 391.479489][T11059] ? __fget_files+0x3a6/0x420 [ 391.479521][T11059] __sys_sendmmsg+0x282/0x4e0 [ 391.479546][T11059] ? __pfx___sys_sendmmsg+0x10/0x10 [ 391.479573][T11059] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 391.479610][T11059] ? ksys_write+0x248/0x270 [ 391.479635][T11059] ? __pfx_ksys_write+0x10/0x10 [ 391.479664][T11059] __x64_sys_sendmmsg+0xa0/0xc0 [ 391.479691][T11059] do_syscall_64+0x14d/0xf80 [ 391.479705][T11059] ? trace_irq_disable+0x3b/0x150 [ 391.479723][T11059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.479739][T11059] ? clear_bhb_loop+0x40/0x90 [ 391.479758][T11059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.479776][T11059] RIP: 0033:0x7f9f14e7c799 [ 391.479792][T11059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.479806][T11059] RSP: 002b:00007f9f130ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 391.479826][T11059] RAX: ffffffffffffffda RBX: 00007f9f150f6090 RCX: 00007f9f14e7c799 [ 391.479839][T11059] RDX: 0000000000000002 RSI: 0000200000000d00 RDI: 0000000000000005 [ 391.479849][T11059] RBP: 00007f9f130ad090 R08: 0000000000000000 R09: 0000000000000000 [ 391.479860][T11059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.479870][T11059] R13: 00007f9f150f6128 R14: 00007f9f150f6090 R15: 00007ffff1428878 [ 391.479900][T11059] [ 394.369136][T11120] FAULT_INJECTION: forcing a failure. [ 394.369136][T11120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.369168][T11120] CPU: 0 UID: 0 PID: 11120 Comm: syz.6.1842 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 394.369193][T11120] Tainted: [L]=SOFTLOCKUP [ 394.369199][T11120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.369211][T11120] Call Trace: [ 394.369218][T11120] [ 394.369227][T11120] dump_stack_lvl+0xe8/0x150 [ 394.369259][T11120] should_fail_ex+0x46b/0x600 [ 394.369287][T11120] _copy_to_user+0x31/0xb0 [ 394.369314][T11120] simple_read_from_buffer+0xe1/0x170 [ 394.369340][T11120] proc_fail_nth_read+0x1be/0x230 [ 394.369364][T11120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 394.369388][T11120] ? rw_verify_area+0x2ac/0x4e0 [ 394.369411][T11120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 394.369432][T11120] vfs_read+0x212/0xa80 [ 394.369463][T11120] ? __pfx_vfs_read+0x10/0x10 [ 394.369489][T11120] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 394.369514][T11120] ? lockdep_hardirqs_on+0x7a/0x110 [ 394.369538][T11120] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 394.369562][T11120] ? mutex_lock_nested+0x152/0x1d0 [ 394.369582][T11120] ? fdget_pos+0x252/0x320 [ 394.369611][T11120] ksys_read+0x156/0x270 [ 394.369637][T11120] ? __pfx_ksys_read+0x10/0x10 [ 394.369658][T11120] ? fput+0xa0/0xd0 [ 394.369688][T11120] do_syscall_64+0x14d/0xf80 [ 394.369704][T11120] ? trace_irq_disable+0x3b/0x150 [ 394.369723][T11120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.369741][T11120] ? clear_bhb_loop+0x40/0x90 [ 394.369762][T11120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.369780][T11120] RIP: 0033:0x7f46f8a4cfce [ 394.369797][T11120] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 394.369813][T11120] RSP: 002b:00007f46f6ce5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 394.369832][T11120] RAX: ffffffffffffffda RBX: 00007f46f6ce66c0 RCX: 00007f46f8a4cfce [ 394.369846][T11120] RDX: 000000000000000f RSI: 00007f46f6ce60a0 RDI: 0000000000000004 [ 394.369858][T11120] RBP: 00007f46f6ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 394.369870][T11120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.369880][T11120] R13: 00007f46f8d06038 R14: 00007f46f8d05fa0 R15: 00007ffc31fa84f8 [ 394.369916][T11120] [ 394.624919][T11125] FAULT_INJECTION: forcing a failure. [ 394.624919][T11125] name failslab, interval 1, probability 0, space 0, times 0 [ 394.624975][T11125] CPU: 0 UID: 0 PID: 11125 Comm: syz.3.1840 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 394.625000][T11125] Tainted: [L]=SOFTLOCKUP [ 394.625006][T11125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.625017][T11125] Call Trace: [ 394.625025][T11125] [ 394.625033][T11125] dump_stack_lvl+0xe8/0x150 [ 394.625062][T11125] should_fail_ex+0x46b/0x600 [ 394.625089][T11125] should_failslab+0xa8/0x100 [ 394.625109][T11125] kmem_cache_alloc_noprof+0x87/0x680 [ 394.625134][T11125] ? do_getname+0x2e/0x250 [ 394.625157][T11125] do_getname+0x2e/0x250 [ 394.625179][T11125] __se_sys_symlink+0x3a/0x2b0 [ 394.625201][T11125] do_syscall_64+0x14d/0xf80 [ 394.625219][T11125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.625237][T11125] ? clear_bhb_loop+0x40/0x90 [ 394.625259][T11125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.625277][T11125] RIP: 0033:0x7f9f14e7c799 [ 394.625294][T11125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.625309][T11125] RSP: 002b:00007f9f1308c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 394.625329][T11125] RAX: ffffffffffffffda RBX: 00007f9f150f6180 RCX: 00007f9f14e7c799 [ 394.625342][T11125] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 00002000000003c0 [ 394.625355][T11125] RBP: 00007f9f1308c090 R08: 0000000000000000 R09: 0000000000000000 [ 394.625373][T11125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.625384][T11125] R13: 00007f9f150f6218 R14: 00007f9f150f6180 R15: 00007ffff1428878 [ 394.625413][T11125] [ 395.957754][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 396.078369][T11158] FAULT_INJECTION: forcing a failure. [ 396.078369][T11158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.078408][T11158] CPU: 0 UID: 0 PID: 11158 Comm: syz.5.1854 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 396.078433][T11158] Tainted: [L]=SOFTLOCKUP [ 396.078440][T11158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.078451][T11158] Call Trace: [ 396.078458][T11158] [ 396.078467][T11158] dump_stack_lvl+0xe8/0x150 [ 396.078496][T11158] should_fail_ex+0x46b/0x600 [ 396.078531][T11158] _copy_to_user+0x31/0xb0 [ 396.078570][T11158] simple_read_from_buffer+0xe1/0x170 [ 396.078610][T11158] proc_fail_nth_read+0x1be/0x230 [ 396.078647][T11158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.078674][T11158] ? rw_verify_area+0x2ac/0x4e0 [ 396.078707][T11158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.078742][T11158] vfs_read+0x212/0xa80 [ 396.078788][T11158] ? __pfx_vfs_read+0x10/0x10 [ 396.078828][T11158] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 396.078860][T11158] ? lockdep_hardirqs_on+0x7a/0x110 [ 396.078898][T11158] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 396.078932][T11158] ? mutex_lock_nested+0x152/0x1d0 [ 396.078961][T11158] ? fdget_pos+0x252/0x320 [ 396.079002][T11158] ksys_read+0x156/0x270 [ 396.079036][T11158] ? __pfx_ksys_read+0x10/0x10 [ 396.079087][T11158] do_syscall_64+0x14d/0xf80 [ 396.079113][T11158] ? trace_irq_disable+0x3b/0x150 [ 396.079144][T11158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.079172][T11158] ? clear_bhb_loop+0x40/0x90 [ 396.079208][T11158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.079225][T11158] RIP: 0033:0x7fd3cc01cfce [ 396.079249][T11158] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 396.079271][T11158] RSP: 002b:00007fd3ca294fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.079294][T11158] RAX: ffffffffffffffda RBX: 00007fd3ca2956c0 RCX: 00007fd3cc01cfce [ 396.079312][T11158] RDX: 000000000000000f RSI: 00007fd3ca2950a0 RDI: 0000000000000005 [ 396.079330][T11158] RBP: 00007fd3ca295090 R08: 0000000000000000 R09: 0000000000000000 [ 396.079348][T11158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.079365][T11158] R13: 00007fd3cc2d6128 R14: 00007fd3cc2d6090 R15: 00007ffcb3b8c7d8 [ 396.079408][T11158] [ 396.093824][ T9] usb 7-1: device descriptor read/64, error -71 [ 396.106125][T11145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1850'. [ 396.397686][ T5880] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 396.467665][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 396.547670][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 396.551957][ T5880] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 396.551983][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.556483][ T5880] usb 4-1: config 0 descriptor?? [ 396.617664][ T9] usb 7-1: device descriptor read/64, error -71 [ 396.640007][T11172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1860'. [ 396.743079][ T9] usb usb7-port1: attempt power cycle [ 396.762319][ T5880] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 396.792794][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 396.801812][ T5880] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 396.801902][ T5880] usb 4-1: media controller created [ 397.079995][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.097721][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 397.753190][ T9] usb 7-1: device descriptor read/8, error -71 [ 398.127654][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 398.158601][ T9] usb 7-1: device descriptor read/8, error -71 [ 398.268281][ T9] usb usb7-port1: unable to enumerate USB device [ 398.694602][T11197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1868'. [ 399.085016][T11218] FAULT_INJECTION: forcing a failure. [ 399.085016][T11218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.085049][T11218] CPU: 1 UID: 0 PID: 11218 Comm: syz.5.1876 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 399.085074][T11218] Tainted: [L]=SOFTLOCKUP [ 399.085080][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.085091][T11218] Call Trace: [ 399.085099][T11218] [ 399.085107][T11218] dump_stack_lvl+0xe8/0x150 [ 399.085139][T11218] should_fail_ex+0x46b/0x600 [ 399.085166][T11218] _copy_from_user+0x2d/0xb0 [ 399.085191][T11218] core_sys_select+0x6ff/0xc30 [ 399.085228][T11218] ? __pfx_core_sys_select+0x10/0x10 [ 399.085269][T11218] ? __pfx_set_user_sigmask+0x10/0x10 [ 399.085291][T11218] ? rt_mutex_slowunlock+0x1cb/0x300 [ 399.085313][T11218] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 399.085340][T11218] __se_sys_pselect6+0x267/0x320 [ 399.085365][T11218] ? __pfx___se_sys_pselect6+0x10/0x10 [ 399.085385][T11218] ? __pfx_ksys_write+0x10/0x10 [ 399.085412][T11218] ? __x64_sys_pselect6+0x21/0xf0 [ 399.085434][T11218] do_syscall_64+0x14d/0xf80 [ 399.085449][T11218] ? trace_irq_disable+0x3b/0x150 [ 399.085469][T11218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.085486][T11218] ? clear_bhb_loop+0x40/0x90 [ 399.085507][T11218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.085525][T11218] RIP: 0033:0x7fd3cc05c799 [ 399.085542][T11218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.085558][T11218] RSP: 002b:00007fd3ca2b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 399.085576][T11218] RAX: ffffffffffffffda RBX: 00007fd3cc2d5fa0 RCX: 00007fd3cc05c799 [ 399.085590][T11218] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 399.085601][T11218] RBP: 00007fd3ca2b6090 R08: 0000200000000000 R09: 0000000000000000 [ 399.085613][T11218] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 399.085624][T11218] R13: 00007fd3cc2d6038 R14: 00007fd3cc2d5fa0 R15: 00007ffcb3b8c7d8 [ 399.085652][T11218] [ 399.248561][ T5880] az6027: usb out operation failed. (-71) [ 399.251078][ T5880] az6027: usb out operation failed. (-71) [ 399.251094][ T5880] stb0899_attach: Driver disabled by Kconfig [ 399.251103][ T5880] az6027: no front-end attached [ 399.251103][ T5880] [ 399.251481][ T5880] az6027: usb out operation failed. (-71) [ 399.251493][ T5880] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 399.272373][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 399.318228][ T5880] dvb-usb: schedule remote query interval to 400 msecs. [ 399.318249][ T5880] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 399.340313][ T5880] usb 4-1: USB disconnect, device number 29 [ 399.783175][ T5880] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 399.982207][T11248] FAULT_INJECTION: forcing a failure. [ 399.982207][T11248] name failslab, interval 1, probability 0, space 0, times 0 [ 399.982245][T11248] CPU: 1 UID: 0 PID: 11248 Comm: syz.5.1891 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 399.982269][T11248] Tainted: [L]=SOFTLOCKUP [ 399.982276][T11248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.982287][T11248] Call Trace: [ 399.982295][T11248] [ 399.982302][T11248] dump_stack_lvl+0xe8/0x150 [ 399.982332][T11248] should_fail_ex+0x46b/0x600 [ 399.982359][T11248] should_failslab+0xa8/0x100 [ 399.982379][T11248] __kmalloc_cache_noprof+0x84/0x690 [ 399.982405][T11248] ? do_kimage_alloc_init+0x4e/0x280 [ 399.982430][T11248] do_kimage_alloc_init+0x4e/0x280 [ 399.982453][T11248] do_kexec_load+0x136/0x7c0 [ 399.982481][T11248] ? __pfx_do_kexec_load+0x10/0x10 [ 399.982506][T11248] ? _copy_from_user+0x94/0xb0 [ 399.982533][T11248] __se_sys_kexec_load+0x134/0x160 [ 399.982558][T11248] do_syscall_64+0x14d/0xf80 [ 399.982575][T11248] ? trace_irq_disable+0x3b/0x150 [ 399.982594][T11248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.982613][T11248] ? clear_bhb_loop+0x40/0x90 [ 399.982633][T11248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.982651][T11248] RIP: 0033:0x7fd3cc05c799 [ 399.982668][T11248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.982686][T11248] RSP: 002b:00007fd3ca2b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 399.982705][T11248] RAX: ffffffffffffffda RBX: 00007fd3cc2d5fa0 RCX: 00007fd3cc05c799 [ 399.982719][T11248] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 0000000000000000 [ 399.982730][T11248] RBP: 00007fd3ca2b6090 R08: 0000000000000000 R09: 0000000000000000 [ 399.982742][T11248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.982753][T11248] R13: 00007fd3cc2d6038 R14: 00007fd3cc2d5fa0 R15: 00007ffcb3b8c7d8 [ 399.982787][T11248] [ 400.041786][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 400.087798][ T5880] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 400.256472][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.256498][ T5880] usb 4-1: config 0 has no interfaces? [ 400.259651][ T5880] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 400.259676][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 400.259694][ T5880] usb 4-1: Product: syz [ 400.259707][ T5880] usb 4-1: Manufacturer: syz [ 400.259720][ T5880] usb 4-1: SerialNumber: syz [ 400.280357][ T5880] usb 4-1: config 0 descriptor?? [ 400.297868][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 400.317299][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 400.317325][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.317343][ T9] usb 1-1: Product: syz [ 400.317355][ T9] usb 1-1: Manufacturer: syz [ 400.317368][ T9] usb 1-1: SerialNumber: syz [ 400.357704][ T9] usb 1-1: config 0 descriptor?? [ 400.567711][ T9] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 400.747712][ T5880] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 400.899688][ T5880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.899714][ T5880] usb 7-1: config 0 has no interfaces? [ 400.913506][ T5880] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 400.913533][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 400.913552][ T5880] usb 7-1: Product: syz [ 400.913565][ T5880] usb 7-1: Manufacturer: syz [ 400.913578][ T5880] usb 7-1: SerialNumber: syz [ 400.955541][ T5880] usb 7-1: config 0 descriptor?? [ 401.248721][ T9] usb write operation failed. (-71) [ 401.340451][T11263] FAULT_INJECTION: forcing a failure. [ 401.340451][T11263] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 401.340485][T11263] CPU: 1 UID: 0 PID: 11263 Comm: syz.6.1897 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 401.340519][T11263] Tainted: [L]=SOFTLOCKUP [ 401.340525][T11263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.340535][T11263] Call Trace: [ 401.340543][T11263] [ 401.340551][T11263] dump_stack_lvl+0xe8/0x150 [ 401.340581][T11263] should_fail_ex+0x46b/0x600 [ 401.340607][T11263] prepare_alloc_pages+0x22a/0x6b0 [ 401.340634][T11263] __alloc_frozen_pages_noprof+0x12f/0x380 [ 401.340657][T11263] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 401.340680][T11263] ? __pfx_policy_nodemask+0x10/0x10 [ 401.340698][T11263] ? lockdep_hardirqs_on+0x7a/0x110 [ 401.340724][T11263] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 401.340745][T11263] ? reacquire_held_locks+0x104/0x190 [ 401.340768][T11263] alloc_pages_mpol+0xd1/0x380 [ 401.340790][T11263] alloc_pages_noprof+0xce/0x1e0 [ 401.340810][T11263] get_free_pages_noprof+0xf/0x80 [ 401.340828][T11263] __pollwait+0x263/0x430 [ 401.340848][T11263] ? __pfx___pollwait+0x10/0x10 [ 401.340867][T11263] snd_rawmidi_poll+0x246/0x450 [ 401.340887][T11263] ? __pfx_snd_rawmidi_poll+0x10/0x10 [ 401.340905][T11263] do_select+0x101e/0x15c0 [ 401.340932][T11263] ? do_select+0x881/0x15c0 [ 401.340967][T11263] ? __pfx_do_select+0x10/0x10 [ 401.340989][T11263] ? unwind_next_frame+0xa5/0x23c0 [ 401.341008][T11263] ? __pfx___pollwait+0x10/0x10 [ 401.341031][T11263] ? __pfx_pollwake+0x10/0x10 [ 401.341053][T11263] ? __pfx_pollwake+0x10/0x10 [ 401.341075][T11263] ? __pfx_pollwake+0x10/0x10 [ 401.341097][T11263] ? __pfx_pollwake+0x10/0x10 [ 401.341119][T11263] ? __pfx_pollwake+0x10/0x10 [ 401.341141][T11263] ? __pfx_pollwake+0x10/0x10 [ 401.341163][T11263] ? __pfx_pollwake+0x10/0x10 [ 401.341185][T11263] ? __pfx_pollwake+0x10/0x10 [ 401.341207][T11263] ? __pfx_pollwake+0x10/0x10 [ 401.341246][T11263] core_sys_select+0x898/0xc30 [ 401.341282][T11263] ? __pfx_core_sys_select+0x10/0x10 [ 401.341323][T11263] ? __pfx_set_user_sigmask+0x10/0x10 [ 401.341344][T11263] ? rt_mutex_slowunlock+0x1cb/0x300 [ 401.341365][T11263] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 401.341392][T11263] __se_sys_pselect6+0x267/0x320 [ 401.341418][T11263] ? __pfx___se_sys_pselect6+0x10/0x10 [ 401.341438][T11263] ? __pfx_ksys_write+0x10/0x10 [ 401.341466][T11263] ? __x64_sys_pselect6+0x21/0xf0 [ 401.341488][T11263] do_syscall_64+0x14d/0xf80 [ 401.341511][T11263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.341529][T11263] ? clear_bhb_loop+0x40/0x90 [ 401.341550][T11263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.341568][T11263] RIP: 0033:0x7f46f8a8c799 [ 401.341585][T11263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.341600][T11263] RSP: 002b:00007f46f6ce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 401.341619][T11263] RAX: ffffffffffffffda RBX: 00007f46f8d05fa0 RCX: 00007f46f8a8c799 [ 401.341633][T11263] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 401.341644][T11263] RBP: 00007f46f6ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 401.341656][T11263] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 401.341667][T11263] R13: 00007f46f8d06038 R14: 00007f46f8d05fa0 R15: 00007ffc31fa84f8 [ 401.341696][T11263] [ 401.396202][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 401.398982][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 401.399084][ T9] usb 1-1: media controller created [ 401.399476][ T9] usb read operation failed. (-71) [ 401.400706][ T9] usb write operation failed. (-71) [ 401.415585][ T9] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 401.425277][ T9] usb 1-1: USB disconnect, device number 48 [ 402.694369][ T5893] usb 4-1: USB disconnect, device number 30 [ 402.885121][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 402.909857][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 402.911826][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 402.914092][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.915579][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 403.472122][ T5910] usb 7-1: USB disconnect, device number 16 [ 403.790896][T11358] FAULT_INJECTION: forcing a failure. [ 403.790896][T11358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.790930][T11358] CPU: 0 UID: 0 PID: 11358 Comm: syz.6.1938 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 403.790953][T11358] Tainted: [L]=SOFTLOCKUP [ 403.790960][T11358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.790970][T11358] Call Trace: [ 403.790978][T11358] [ 403.790986][T11358] dump_stack_lvl+0xe8/0x150 [ 403.791015][T11358] should_fail_ex+0x46b/0x600 [ 403.791042][T11358] _copy_from_iter+0x1d3/0x1670 [ 403.791072][T11358] ? trace_kmem_cache_alloc+0x29/0xf0 [ 403.791095][T11358] ? __alloc_skb+0x27d/0x7d0 [ 403.791121][T11358] ? __pfx__copy_from_iter+0x10/0x10 [ 403.791140][T11358] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 403.791163][T11358] ? __alloc_skb+0x27d/0x7d0 [ 403.791197][T11358] ? netlink_sendmsg+0x650/0xb40 [ 403.791218][T11358] ? skb_put+0x11b/0x210 [ 403.791244][T11358] netlink_sendmsg+0x6c0/0xb40 [ 403.791274][T11358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.791297][T11358] ? unwind_get_return_address+0x4d/0x90 [ 403.791320][T11358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 403.791346][T11358] ____sys_sendmsg+0x94c/0x9c0 [ 403.791370][T11358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.791397][T11358] ? import_iovec+0x73/0xa0 [ 403.791422][T11358] ___sys_sendmsg+0x2a5/0x360 [ 403.791446][T11358] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.791496][T11358] ? __fget_files+0x2a/0x420 [ 403.791516][T11358] ? __fget_files+0x3a6/0x420 [ 403.791546][T11358] __x64_sys_sendmsg+0x1c3/0x2a0 [ 403.791567][T11358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.791594][T11358] ? __pfx_ksys_write+0x10/0x10 [ 403.791627][T11358] do_syscall_64+0x14d/0xf80 [ 403.791644][T11358] ? trace_irq_disable+0x3b/0x150 [ 403.791663][T11358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.791681][T11358] ? clear_bhb_loop+0x40/0x90 [ 403.791702][T11358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.791719][T11358] RIP: 0033:0x7f46f8a8c799 [ 403.791735][T11358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.791750][T11358] RSP: 002b:00007f46f6ce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.791769][T11358] RAX: ffffffffffffffda RBX: 00007f46f8d05fa0 RCX: 00007f46f8a8c799 [ 403.791782][T11358] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 403.791794][T11358] RBP: 00007f46f6ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 403.791805][T11358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.791816][T11358] R13: 00007f46f8d06038 R14: 00007f46f8d05fa0 R15: 00007ffc31fa84f8 [ 403.791845][T11358] [ 404.116172][T11342] can0: slcan on ttyS3. [ 404.376165][T11339] can0 (unregistered): slcan off ttyS3. [ 405.597651][ T5819] Bluetooth: hci2: command tx timeout [ 407.356488][T11442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1973'. [ 407.607652][ T5818] Bluetooth: hci2: command tx timeout [ 408.117301][ T1484] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.534989][T11475] FAULT_INJECTION: forcing a failure. [ 409.534989][T11475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.535022][T11475] CPU: 0 UID: 0 PID: 11475 Comm: syz.6.1984 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 409.535047][T11475] Tainted: [L]=SOFTLOCKUP [ 409.535054][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.535065][T11475] Call Trace: [ 409.535072][T11475] [ 409.535080][T11475] dump_stack_lvl+0xe8/0x150 [ 409.535109][T11475] should_fail_ex+0x46b/0x600 [ 409.535136][T11475] _copy_to_user+0x31/0xb0 [ 409.535162][T11475] simple_read_from_buffer+0xe1/0x170 [ 409.535188][T11475] proc_fail_nth_read+0x1be/0x230 [ 409.535211][T11475] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.535235][T11475] ? rw_verify_area+0x2ac/0x4e0 [ 409.535257][T11475] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.535278][T11475] vfs_read+0x212/0xa80 [ 409.535309][T11475] ? __pfx_vfs_read+0x10/0x10 [ 409.535334][T11475] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 409.535359][T11475] ? lockdep_hardirqs_on+0x7a/0x110 [ 409.535383][T11475] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 409.535406][T11475] ? mutex_lock_nested+0x152/0x1d0 [ 409.535426][T11475] ? fdget_pos+0x252/0x320 [ 409.535453][T11475] ksys_read+0x156/0x270 [ 409.535479][T11475] ? __pfx_ksys_read+0x10/0x10 [ 409.535512][T11475] do_syscall_64+0x14d/0xf80 [ 409.535528][T11475] ? trace_irq_disable+0x3b/0x150 [ 409.535547][T11475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.535566][T11475] ? clear_bhb_loop+0x40/0x90 [ 409.535587][T11475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.535603][T11475] RIP: 0033:0x7f46f8a4cfce [ 409.535620][T11475] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 409.535636][T11475] RSP: 002b:00007f46f6ce5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 409.535655][T11475] RAX: ffffffffffffffda RBX: 00007f46f6ce66c0 RCX: 00007f46f8a4cfce [ 409.535669][T11475] RDX: 000000000000000f RSI: 00007f46f6ce60a0 RDI: 0000000000000004 [ 409.535680][T11475] RBP: 00007f46f6ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 409.535691][T11475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.535703][T11475] R13: 00007f46f8d06038 R14: 00007f46f8d05fa0 R15: 00007ffc31fa84f8 [ 409.535733][T11475] [ 410.736502][ T5818] Bluetooth: hci2: command tx timeout [ 410.794753][T11479] capability: warning: `syz.3.1988' uses 32-bit capabilities (legacy support in use) [ 411.949530][ T1484] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.072833][T11507] FAULT_INJECTION: forcing a failure. [ 412.072833][T11507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.072865][T11507] CPU: 1 UID: 0 PID: 11507 Comm: syz.6.1998 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 412.072890][T11507] Tainted: [L]=SOFTLOCKUP [ 412.072896][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 412.072907][T11507] Call Trace: [ 412.072915][T11507] [ 412.072923][T11507] dump_stack_lvl+0xe8/0x150 [ 412.072952][T11507] should_fail_ex+0x46b/0x600 [ 412.072980][T11507] _copy_from_user+0x2d/0xb0 [ 412.073004][T11507] video_usercopy+0x36f/0x14b0 [ 412.073031][T11507] ? smk_tskacc+0x311/0x3a0 [ 412.073052][T11507] ? __pfx___video_do_ioctl+0x10/0x10 [ 412.073076][T11507] ? __pfx_video_usercopy+0x10/0x10 [ 412.073096][T11507] ? smack_file_ioctl+0x2c2/0x360 [ 412.073132][T11507] ? __fget_files+0x2a/0x420 [ 412.073152][T11507] ? __fget_files+0x3a6/0x420 [ 412.073176][T11507] v4l2_ioctl+0x190/0x1e0 [ 412.073197][T11507] ? __pfx_v4l2_ioctl+0x10/0x10 [ 412.073218][T11507] __se_sys_ioctl+0xff/0x170 [ 412.073245][T11507] do_syscall_64+0x14d/0xf80 [ 412.073262][T11507] ? trace_irq_disable+0x3b/0x150 [ 412.073281][T11507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.073300][T11507] ? clear_bhb_loop+0x40/0x90 [ 412.073321][T11507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.073339][T11507] RIP: 0033:0x7f46f8a8c799 [ 412.073356][T11507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.073373][T11507] RSP: 002b:00007f46f6ca4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.073392][T11507] RAX: ffffffffffffffda RBX: 00007f46f8d06180 RCX: 00007f46f8a8c799 [ 412.073405][T11507] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 0000000000000005 [ 412.073418][T11507] RBP: 00007f46f6ca4090 R08: 0000000000000000 R09: 0000000000000000 [ 412.073429][T11507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.073440][T11507] R13: 00007f46f8d06218 R14: 00007f46f8d06180 R15: 00007ffc31fa84f8 [ 412.073468][T11507] [ 412.890883][ T5818] Bluetooth: hci2: command tx timeout [ 413.246588][T11327] chnl_net:caif_netlink_parms(): no params data found [ 413.597683][ T5866] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 413.697709][ T1484] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.761592][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.761622][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.761656][ T5866] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 413.761677][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.799840][ T5866] usb 7-1: config 0 descriptor?? [ 417.140266][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 417.158215][ T5866] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 417.338779][ T5866] cp2112 0003:10C4:EA90.0008: error requesting version [ 417.369059][ T5866] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -71 [ 417.399867][ T5866] usb 7-1: USB disconnect, device number 17 [ 417.518896][T11559] fido_id[11559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 417.521428][ T1484] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.774802][T11327] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.774987][T11327] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.775164][T11327] bridge_slave_0: entered allmulticast mode [ 418.777657][T11327] bridge_slave_0: entered promiscuous mode [ 418.780827][T11327] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.781006][T11327] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.781156][T11327] bridge_slave_1: entered allmulticast mode [ 418.783362][T11327] bridge_slave_1: entered promiscuous mode [ 418.835029][T11327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.842733][T11327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.145744][T11593] netlink: 'syz.0.2030': attribute type 5 has an invalid length. [ 421.033617][T11611] FAULT_INJECTION: forcing a failure. [ 421.033617][T11611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.033664][T11611] CPU: 0 UID: 0 PID: 11611 Comm: syz.6.2037 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 421.033690][T11611] Tainted: [L]=SOFTLOCKUP [ 421.033696][T11611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 421.033706][T11611] Call Trace: [ 421.033713][T11611] [ 421.033720][T11611] dump_stack_lvl+0xe8/0x150 [ 421.033739][T11611] should_fail_ex+0x46b/0x600 [ 421.033756][T11611] _copy_from_user+0x2d/0xb0 [ 421.033772][T11611] kstrtouint_from_user+0xd6/0x180 [ 421.033785][T11611] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 421.033799][T11611] ? __lock_acquire+0x6b5/0x2cf0 [ 421.033814][T11611] proc_fail_nth_write+0x8e/0x210 [ 421.033826][T11611] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 421.033840][T11611] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 421.033852][T11611] vfs_write+0x2a3/0xba0 [ 421.033871][T11611] ? __pfx_vfs_write+0x10/0x10 [ 421.033885][T11611] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.033901][T11611] ? lockdep_hardirqs_on+0x7a/0x110 [ 421.033916][T11611] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 421.033930][T11611] ? mutex_lock_nested+0x152/0x1d0 [ 421.033940][T11611] ? fdget_pos+0x252/0x320 [ 421.033957][T11611] ksys_write+0x156/0x270 [ 421.033972][T11611] ? __pfx_ksys_write+0x10/0x10 [ 421.033986][T11611] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 421.034001][T11611] do_syscall_64+0x14d/0xf80 [ 421.034010][T11611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.034020][T11611] ? clear_bhb_loop+0x40/0x90 [ 421.034032][T11611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.034042][T11611] RIP: 0033:0x7f46f8a4cfce [ 421.034052][T11611] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 421.034060][T11611] RSP: 002b:00007f46f6cc4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 421.034072][T11611] RAX: ffffffffffffffda RBX: 00007f46f6cc56c0 RCX: 00007f46f8a4cfce [ 421.034079][T11611] RDX: 0000000000000001 RSI: 00007f46f6cc50a0 RDI: 0000000000000006 [ 421.034085][T11611] RBP: 00007f46f6cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 421.034091][T11611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.034096][T11611] R13: 00007f46f8d06128 R14: 00007f46f8d06090 R15: 00007ffc31fa84f8 [ 421.034112][T11611] [ 421.398360][T11327] team0: Port device team_slave_0 added [ 421.627798][T11327] team0: Port device team_slave_1 added [ 421.824841][T11327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.824852][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.824866][T11327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.871580][T11327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.871590][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.871605][T11327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.945590][T11621] FAULT_INJECTION: forcing a failure. [ 421.945590][T11621] name fail_futex, interval 1, probability 0, space 0, times 0 [ 421.945623][T11621] CPU: 1 UID: 0 PID: 11621 Comm: syz.3.2040 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 421.945647][T11621] Tainted: [L]=SOFTLOCKUP [ 421.945654][T11621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 421.945665][T11621] Call Trace: [ 421.945672][T11621] [ 421.945680][T11621] dump_stack_lvl+0xe8/0x150 [ 421.945710][T11621] should_fail_ex+0x46b/0x600 [ 421.945737][T11621] get_futex_key+0x1022/0x1690 [ 421.945772][T11621] ? __pfx_get_futex_key+0x10/0x10 [ 421.945792][T11621] ? __lock_acquire+0x6b5/0x2cf0 [ 421.945813][T11621] ? is_bpf_text_address+0x26/0x2b0 [ 421.945842][T11621] futex_wait_setup+0x4c/0x560 [ 421.945864][T11621] ? arch_stack_walk+0xfb/0x150 [ 421.945896][T11621] __futex_wait+0x175/0x420 [ 421.945924][T11621] ? __pfx___futex_wait+0x10/0x10 [ 421.945948][T11621] ? __pfx_futex_wake_mark+0x10/0x10 [ 421.945986][T11621] futex_wait+0x119/0x380 [ 421.946008][T11621] ? __pfx_futex_wait+0x10/0x10 [ 421.946034][T11621] ? do_raw_spin_lock+0x12b/0x2f0 [ 421.946065][T11621] do_futex+0x333/0x420 [ 421.946083][T11621] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.946111][T11621] ? __pfx_do_futex+0x10/0x10 [ 421.946127][T11621] ? rt_mutex_slowunlock+0x1cb/0x300 [ 421.946147][T11621] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 421.946172][T11621] __se_sys_futex+0x3a8/0x450 [ 421.946192][T11621] ? ksys_write+0x248/0x270 [ 421.946214][T11621] ? __pfx___se_sys_futex+0x10/0x10 [ 421.946231][T11621] ? __pfx_ksys_write+0x10/0x10 [ 421.946257][T11621] ? __x64_sys_futex+0x21/0xf0 [ 421.946277][T11621] do_syscall_64+0x14d/0xf80 [ 421.946293][T11621] ? trace_irq_disable+0x3b/0x150 [ 421.946312][T11621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.946329][T11621] ? clear_bhb_loop+0x40/0x90 [ 421.946350][T11621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.946367][T11621] RIP: 0033:0x7f9f14e7c799 [ 421.946383][T11621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.946399][T11621] RSP: 002b:00007f9f130ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 421.946418][T11621] RAX: ffffffffffffffda RBX: 00007f9f150f5fa0 RCX: 00007f9f14e7c799 [ 421.946430][T11621] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000020000000cffc [ 421.946441][T11621] RBP: 00007f9f130ce090 R08: 0000000000000000 R09: 0000000000000001 [ 421.946452][T11621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.946463][T11621] R13: 00007f9f150f6038 R14: 00007f9f150f5fa0 R15: 00007ffff1428878 [ 421.946492][T11621] [ 422.227220][ T1484] bridge_slave_1: left allmulticast mode [ 422.227246][ T1484] bridge_slave_1: left promiscuous mode [ 422.227459][ T1484] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.310813][ T1484] bridge_slave_0: left allmulticast mode [ 422.310842][ T1484] bridge_slave_0: left promiscuous mode [ 422.311061][ T1484] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.572622][T11662] FAULT_INJECTION: forcing a failure. [ 423.572622][T11662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.572656][T11662] CPU: 0 UID: 0 PID: 11662 Comm: syz.0.2047 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 423.572678][T11662] Tainted: [L]=SOFTLOCKUP [ 423.572684][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 423.572695][T11662] Call Trace: [ 423.572702][T11662] [ 423.572709][T11662] dump_stack_lvl+0xe8/0x150 [ 423.572728][T11662] should_fail_ex+0x46b/0x600 [ 423.572744][T11662] _copy_from_iter+0x1d3/0x1670 [ 423.572761][T11662] ? trace_kmem_cache_alloc+0x29/0xf0 [ 423.572775][T11662] ? __alloc_skb+0x27d/0x7d0 [ 423.572789][T11662] ? __pfx__copy_from_iter+0x10/0x10 [ 423.572800][T11662] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 423.572814][T11662] ? __alloc_skb+0x27d/0x7d0 [ 423.572829][T11662] ? netlink_sendmsg+0x650/0xb40 [ 423.572842][T11662] ? skb_put+0x11b/0x210 [ 423.572857][T11662] netlink_sendmsg+0x6c0/0xb40 [ 423.572873][T11662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.572887][T11662] ? unwind_get_return_address+0x4d/0x90 [ 423.572899][T11662] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.572914][T11662] ____sys_sendmsg+0x94c/0x9c0 [ 423.572927][T11662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.572941][T11662] ? import_iovec+0x73/0xa0 [ 423.572956][T11662] ___sys_sendmsg+0x2a5/0x360 [ 423.572968][T11662] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.572993][T11662] ? __fget_files+0x2a/0x420 [ 423.573005][T11662] ? __fget_files+0x3a6/0x420 [ 423.573021][T11662] __x64_sys_sendmsg+0x1c3/0x2a0 [ 423.573032][T11662] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.573046][T11662] ? __pfx_ksys_write+0x10/0x10 [ 423.573066][T11662] do_syscall_64+0x14d/0xf80 [ 423.573075][T11662] ? trace_irq_disable+0x3b/0x150 [ 423.573087][T11662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.573097][T11662] ? clear_bhb_loop+0x40/0x90 [ 423.573109][T11662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.573118][T11662] RIP: 0033:0x7fd45bf3c799 [ 423.573129][T11662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.573138][T11662] RSP: 002b:00007fd45a18e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.573149][T11662] RAX: ffffffffffffffda RBX: 00007fd45c1b5fa0 RCX: 00007fd45bf3c799 [ 423.573156][T11662] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 423.573162][T11662] RBP: 00007fd45a18e090 R08: 0000000000000000 R09: 0000000000000000 [ 423.573168][T11662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.573180][T11662] R13: 00007fd45c1b6038 R14: 00007fd45c1b5fa0 R15: 00007ffc6b2eea18 [ 423.573196][T11662] [ 424.531028][ T1484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.033768][ T1484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.036588][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'. [ 426.080708][ T1484] bond0 (unregistering): Released all slaves [ 426.111681][ T1484] bond1 (unregistering): Released all slaves [ 426.163092][T11327] hsr_slave_0: entered promiscuous mode [ 426.163806][T11327] hsr_slave_1: entered promiscuous mode [ 426.174283][T11688] ip6gre1: entered allmulticast mode [ 426.197205][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 426.197367][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 426.217887][ T5866] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 426.327908][ T5924] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 426.469205][T11705] FAULT_INJECTION: forcing a failure. [ 426.469205][T11705] name failslab, interval 1, probability 0, space 0, times 0 [ 426.469238][T11705] CPU: 0 UID: 0 PID: 11705 Comm: syz.0.2076 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 426.469259][T11705] Tainted: [L]=SOFTLOCKUP [ 426.469264][T11705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.469272][T11705] Call Trace: [ 426.469278][T11705] [ 426.469285][T11705] dump_stack_lvl+0xe8/0x150 [ 426.469308][T11705] should_fail_ex+0x46b/0x600 [ 426.469330][T11705] should_failslab+0xa8/0x100 [ 426.469345][T11705] kmem_cache_alloc_noprof+0x87/0x680 [ 426.469365][T11705] ? alloc_empty_file+0x55/0x1d0 [ 426.469383][T11705] alloc_empty_file+0x55/0x1d0 [ 426.469398][T11705] path_openat+0x11b/0x38a0 [ 426.469423][T11705] ? try_to_take_rt_mutex+0x840/0xb00 [ 426.469439][T11705] ? arch_stack_walk+0xfb/0x150 [ 426.469458][T11705] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 426.469479][T11705] ? __pfx_path_openat+0x10/0x10 [ 426.469497][T11705] ? __lock_acquire+0x6b5/0x2cf0 [ 426.469512][T11705] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 426.469534][T11705] ? do_raw_spin_lock+0x12b/0x2f0 [ 426.469557][T11705] do_file_open+0x23e/0x4a0 [ 426.469574][T11705] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 426.469594][T11705] ? __pfx_do_file_open+0x10/0x10 [ 426.469610][T11705] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 426.469640][T11705] ? alloc_fd+0x64e/0x6c0 [ 426.469662][T11705] do_sys_openat2+0x113/0x200 [ 426.469679][T11705] ? __pfx_do_sys_openat2+0x10/0x10 [ 426.469695][T11705] ? ksys_write+0x248/0x270 [ 426.469713][T11705] ? __pfx_ksys_write+0x10/0x10 [ 426.469733][T11705] __x64_sys_openat+0x138/0x170 [ 426.469751][T11705] do_syscall_64+0x14d/0xf80 [ 426.469763][T11705] ? trace_irq_disable+0x3b/0x150 [ 426.469777][T11705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.469790][T11705] ? clear_bhb_loop+0x40/0x90 [ 426.469806][T11705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.469818][T11705] RIP: 0033:0x7fd45bf3c799 [ 426.469837][T11705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.469848][T11705] RSP: 002b:00007fd45a18e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 426.469863][T11705] RAX: ffffffffffffffda RBX: 00007fd45c1b5fa0 RCX: 00007fd45bf3c799 [ 426.469873][T11705] RDX: 0000000000040d82 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 426.469882][T11705] RBP: 00007fd45a18e090 R08: 0000000000000000 R09: 0000000000000000 [ 426.469891][T11705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.469898][T11705] R13: 00007fd45c1b6038 R14: 00007fd45c1b5fa0 R15: 00007ffc6b2eea18 [ 426.469919][T11705] [ 426.667764][ T5924] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.078401][T11720] overlayfs: failed to clone upperpath [ 428.440289][ T36] audit: type=1326 audit(1774301613.153:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11741 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8a8c799 code=0x7ffc0000 [ 428.504419][ T36] audit: type=1326 audit(1774301613.193:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11741 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8a8c799 code=0x7ffc0000 [ 428.504466][ T36] audit: type=1326 audit(1774301613.213:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11741 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8a8c799 code=0x7ffc0000 [ 428.504503][ T36] audit: type=1326 audit(1774301613.213:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11741 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f46f8a8c799 code=0x7ffc0000 [ 428.504540][ T36] audit: type=1326 audit(1774301613.213:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11741 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8a8c799 code=0x7ffc0000 [ 428.504576][ T36] audit: type=1326 audit(1774301613.213:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11741 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8a8c799 code=0x7ffc0000 [ 428.504613][ T36] audit: type=1326 audit(1774301613.213:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11741 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8a8c799 code=0x7ffc0000 [ 428.504648][ T36] audit: type=1326 audit(1774301613.213:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11741 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f46f8a8c799 code=0x7ffc0000 [ 428.504685][ T36] audit: type=1326 audit(1774301613.213:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11741 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8a8c799 code=0x7ffc0000 [ 428.504721][ T36] audit: type=1326 audit(1774301613.213:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11741 comm="syz.6.2088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f8a8c799 code=0x7ffc0000 [ 429.168810][T11765] FAULT_INJECTION: forcing a failure. [ 429.168810][T11765] name failslab, interval 1, probability 0, space 0, times 0 [ 429.168854][T11765] CPU: 1 UID: 0 PID: 11765 Comm: syz.6.2093 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 429.168878][T11765] Tainted: [L]=SOFTLOCKUP [ 429.168884][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.168901][T11765] Call Trace: [ 429.168909][T11765] [ 429.168917][T11765] dump_stack_lvl+0xe8/0x150 [ 429.168946][T11765] should_fail_ex+0x46b/0x600 [ 429.168974][T11765] should_failslab+0xa8/0x100 [ 429.168994][T11765] kmem_cache_alloc_noprof+0x87/0x680 [ 429.169018][T11765] ? do_getname+0x2e/0x250 [ 429.169042][T11765] do_getname+0x2e/0x250 [ 429.169063][T11765] __se_sys_rename+0x3a/0x2c0 [ 429.169087][T11765] do_syscall_64+0x14d/0xf80 [ 429.169104][T11765] ? trace_irq_disable+0x3b/0x150 [ 429.169123][T11765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.169141][T11765] ? clear_bhb_loop+0x40/0x90 [ 429.169162][T11765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.169179][T11765] RIP: 0033:0x7f46f8a8c799 [ 429.169197][T11765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.169212][T11765] RSP: 002b:00007f46f6cc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 429.169231][T11765] RAX: ffffffffffffffda RBX: 00007f46f8d06090 RCX: 00007f46f8a8c799 [ 429.169245][T11765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 429.169256][T11765] RBP: 00007f46f6cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 429.169267][T11765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.169277][T11765] R13: 00007f46f8d06128 R14: 00007f46f8d06090 R15: 00007ffc31fa84f8 [ 429.169307][T11765] [ 429.962790][T11788] binder: 11787:11788 ioctl 4018620d 0 returned -22 [ 430.167887][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 430.263638][T11788] binder: 11787:11788 ioctl c0306201 0 returned -14 [ 431.499521][ T1484] hsr_slave_0: left promiscuous mode [ 431.537766][ T1484] hsr_slave_1: left promiscuous mode [ 431.538796][ T1484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.538819][ T1484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.824842][ T1484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.824868][ T1484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.463998][ T1484] veth1_macvtap: left promiscuous mode [ 432.464075][ T1484] veth0_macvtap: left promiscuous mode [ 432.464263][ T1484] veth1_vlan: left promiscuous mode [ 432.466034][ T1484] veth0_vlan: left promiscuous mode [ 433.163267][ T5910] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 433.676567][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 433.683125][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.683154][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.683173][ T5910] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 433.683223][ T5910] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 433.683244][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.744615][ T5910] usb 7-1: config 0 descriptor?? [ 434.188418][ T5910] microsoft 0003:045E:07DA.0009: global environment stack underflow [ 434.188441][ T5910] microsoft 0003:045E:07DA.0009: item 0 4 1 11 parsing failed [ 434.191765][ T5910] microsoft 0003:045E:07DA.0009: parse failed [ 434.191874][ T5910] microsoft 0003:045E:07DA.0009: probe with driver microsoft failed with error -22 [ 434.364543][T11855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.368671][T11855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.598304][ T1484] team0 (unregistering): Port device team_slave_1 removed [ 434.640186][ T1484] team0 (unregistering): Port device team_slave_0 removed [ 435.605573][ T5893] usb 7-1: USB disconnect, device number 18 [ 435.800578][T11327] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 435.942728][T11327] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 436.320404][T11327] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 436.957690][ T5910] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 437.023447][T11327] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 437.042476][T11931] FAULT_INJECTION: forcing a failure. [ 437.042476][T11931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.042508][T11931] CPU: 1 UID: 0 PID: 11931 Comm: syz.6.2157 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 437.042529][T11931] Tainted: [L]=SOFTLOCKUP [ 437.042535][T11931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 437.042544][T11931] Call Trace: [ 437.042551][T11931] [ 437.042558][T11931] dump_stack_lvl+0xe8/0x150 [ 437.042585][T11931] should_fail_ex+0x46b/0x600 [ 437.042608][T11931] _copy_from_user+0x2d/0xb0 [ 437.042630][T11931] core_sys_select+0x6ff/0xc30 [ 437.042661][T11931] ? __pfx_core_sys_select+0x10/0x10 [ 437.042697][T11931] ? __pfx_set_user_sigmask+0x10/0x10 [ 437.042715][T11931] ? rt_mutex_slowunlock+0x1cb/0x300 [ 437.042735][T11931] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 437.042758][T11931] __se_sys_pselect6+0x267/0x320 [ 437.042780][T11931] ? __pfx___se_sys_pselect6+0x10/0x10 [ 437.042797][T11931] ? __pfx_ksys_write+0x10/0x10 [ 437.042823][T11931] ? __x64_sys_pselect6+0x21/0xf0 [ 437.042841][T11931] do_syscall_64+0x14d/0xf80 [ 437.042855][T11931] ? trace_irq_disable+0x3b/0x150 [ 437.042872][T11931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.042888][T11931] ? clear_bhb_loop+0x40/0x90 [ 437.042907][T11931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.042922][T11931] RIP: 0033:0x7f46f8a8c799 [ 437.042937][T11931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.042950][T11931] RSP: 002b:00007f46f6ce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 437.042977][T11931] RAX: ffffffffffffffda RBX: 00007f46f8d05fa0 RCX: 00007f46f8a8c799 [ 437.042989][T11931] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 437.042998][T11931] RBP: 00007f46f6ce6090 R08: 0000200000000680 R09: 0000000000000000 [ 437.043008][T11931] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 437.043018][T11931] R13: 00007f46f8d06038 R14: 00007f46f8d05fa0 R15: 00007ffc31fa84f8 [ 437.043043][T11931] [ 437.087674][ T5910] usb 1-1: device descriptor read/64, error -71 [ 437.347694][ T5910] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 437.477663][ T5910] usb 1-1: device descriptor read/64, error -71 [ 437.563300][T11951] FAULT_INJECTION: forcing a failure. [ 437.563300][T11951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.563333][T11951] CPU: 0 UID: 0 PID: 11951 Comm: syz.6.2164 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 437.563357][T11951] Tainted: [L]=SOFTLOCKUP [ 437.563364][T11951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 437.563375][T11951] Call Trace: [ 437.563382][T11951] [ 437.563399][T11951] dump_stack_lvl+0xe8/0x150 [ 437.563427][T11951] should_fail_ex+0x46b/0x600 [ 437.563455][T11951] _copy_from_iter+0x1d3/0x1670 [ 437.563485][T11951] ? trace_kmem_cache_alloc+0x29/0xf0 [ 437.563508][T11951] ? __alloc_skb+0x27d/0x7d0 [ 437.563531][T11951] ? __pfx__copy_from_iter+0x10/0x10 [ 437.563550][T11951] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 437.563573][T11951] ? __alloc_skb+0x27d/0x7d0 [ 437.563599][T11951] ? netlink_sendmsg+0x650/0xb40 [ 437.563620][T11951] ? skb_put+0x11b/0x210 [ 437.563645][T11951] netlink_sendmsg+0x6c0/0xb40 [ 437.563675][T11951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.563698][T11951] ? unwind_get_return_address+0x4d/0x90 [ 437.563720][T11951] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.563745][T11951] ____sys_sendmsg+0x94c/0x9c0 [ 437.563768][T11951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.563794][T11951] ? import_iovec+0x73/0xa0 [ 437.563820][T11951] ___sys_sendmsg+0x2a5/0x360 [ 437.563842][T11951] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.563891][T11951] ? __fget_files+0x2a/0x420 [ 437.563912][T11951] ? __fget_files+0x3a6/0x420 [ 437.563940][T11951] __x64_sys_sendmsg+0x1c3/0x2a0 [ 437.563961][T11951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.563986][T11951] ? __pfx_ksys_write+0x10/0x10 [ 437.564019][T11951] do_syscall_64+0x14d/0xf80 [ 437.564034][T11951] ? trace_irq_disable+0x3b/0x150 [ 437.564053][T11951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.564071][T11951] ? clear_bhb_loop+0x40/0x90 [ 437.564092][T11951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.564109][T11951] RIP: 0033:0x7f46f8a8c799 [ 437.564126][T11951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.564141][T11951] RSP: 002b:00007f46f6ce6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.564160][T11951] RAX: ffffffffffffffda RBX: 00007f46f8d05fa0 RCX: 00007f46f8a8c799 [ 437.564172][T11951] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000004 [ 437.564183][T11951] RBP: 00007f46f6ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 437.564193][T11951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.564203][T11951] R13: 00007f46f8d06038 R14: 00007f46f8d05fa0 R15: 00007ffc31fa84f8 [ 437.564229][T11951] [ 437.588013][ T5910] usb usb1-port1: attempt power cycle [ 437.937661][ T5910] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 437.963538][ T5910] usb 1-1: device descriptor read/8, error -71 [ 438.408186][ T5910] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 438.458238][ T5910] usb 1-1: device descriptor read/8, error -71 [ 438.465609][T11327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.484919][T11975] FAULT_INJECTION: forcing a failure. [ 438.484919][T11975] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.484942][T11975] CPU: 0 UID: 0 PID: 11975 Comm: syz.3.2170 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 438.484956][T11975] Tainted: [L]=SOFTLOCKUP [ 438.484960][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.484966][T11975] Call Trace: [ 438.484971][T11975] [ 438.484976][T11975] dump_stack_lvl+0xe8/0x150 [ 438.484996][T11975] should_fail_ex+0x46b/0x600 [ 438.485012][T11975] prepare_alloc_pages+0x22a/0x6b0 [ 438.485026][T11975] __alloc_frozen_pages_noprof+0x12f/0x380 [ 438.485039][T11975] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 438.485051][T11975] ? __pfx_policy_nodemask+0x10/0x10 [ 438.485062][T11975] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 438.485078][T11975] ? lockdep_hardirqs_on+0x7a/0x110 [ 438.485095][T11975] alloc_pages_mpol+0xd1/0x380 [ 438.485106][T11975] alloc_pages_noprof+0xce/0x1e0 [ 438.485118][T11975] get_free_pages_noprof+0xf/0x80 [ 438.485128][T11975] __kasan_populate_vmalloc+0x38/0x1d0 [ 438.485143][T11975] ? rt_spin_unlock+0x160/0x200 [ 438.485156][T11975] alloc_vmap_area+0xd73/0x14b0 [ 438.485176][T11975] ? __pfx_alloc_vmap_area+0x10/0x10 [ 438.485190][T11975] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 438.485206][T11975] ? __get_vm_area_node+0x171/0x350 [ 438.485219][T11975] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 438.485233][T11975] __get_vm_area_node+0x226/0x350 [ 438.485257][T11975] __vmalloc_node_range_noprof+0x372/0x1730 [ 438.485271][T11975] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 438.485290][T11975] ? __lock_acquire+0x6b5/0x2cf0 [ 438.485303][T11975] ? kernel_text_address+0xa5/0xe0 [ 438.485317][T11975] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 438.485331][T11975] ? arch_stack_walk+0xfb/0x150 [ 438.485346][T11975] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 438.485358][T11975] __vmalloc_noprof+0xd2/0x120 [ 438.485371][T11975] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 438.485384][T11975] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 438.485399][T11975] bpf_prog_alloc+0x3c/0x1a0 [ 438.485412][T11975] bpf_prog_load+0x7ba/0x1ae0 [ 438.485431][T11975] ? __pfx_bpf_prog_load+0x10/0x10 [ 438.485453][T11975] ? bpf_lsm_bpf+0x9/0x20 [ 438.485463][T11975] ? security_bpf+0x7e/0x2d0 [ 438.485475][T11975] __sys_bpf+0x618/0x950 [ 438.485488][T11975] ? __pfx___sys_bpf+0x10/0x10 [ 438.485498][T11975] ? rt_mutex_slowunlock+0x1cb/0x300 [ 438.485517][T11975] ? ksys_write+0x248/0x270 [ 438.485539][T11975] ? __pfx_ksys_write+0x10/0x10 [ 438.485567][T11975] __x64_sys_bpf+0x7c/0x90 [ 438.485586][T11975] do_syscall_64+0x14d/0xf80 [ 438.485601][T11975] ? trace_irq_disable+0x3b/0x150 [ 438.485619][T11975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.485636][T11975] ? clear_bhb_loop+0x40/0x90 [ 438.485656][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.485671][T11975] RIP: 0033:0x7f9f14e7c799 [ 438.485687][T11975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.485701][T11975] RSP: 002b:00007f9f130ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 438.485718][T11975] RAX: ffffffffffffffda RBX: 00007f9f150f6090 RCX: 00007f9f14e7c799 [ 438.485729][T11975] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 438.485741][T11975] RBP: 00007f9f130ad090 R08: 0000000000000000 R09: 0000000000000000 [ 438.485751][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.485761][T11975] R13: 00007f9f150f6128 R14: 00007f9f150f6090 R15: 00007ffff1428878 [ 438.485788][T11975] [ 438.509350][T11975] syz.3.2170: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 438.521779][T11975] CPU: 0 UID: 0 PID: 11975 Comm: syz.3.2170 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 438.521794][T11975] Tainted: [L]=SOFTLOCKUP [ 438.521798][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.521805][T11975] Call Trace: [ 438.521809][T11975] [ 438.521815][T11975] dump_stack_lvl+0xe8/0x150 [ 438.521834][T11975] warn_alloc+0x263/0x3e0 [ 438.521846][T11975] ? kasan_quarantine_put+0xbb/0x1f0 [ 438.521863][T11975] ? __pfx_warn_alloc+0x10/0x10 [ 438.521873][T11975] ? __get_vm_area_node+0x23f/0x350 [ 438.521886][T11975] ? __get_vm_area_node+0x171/0x350 [ 438.521899][T11975] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 438.521913][T11975] ? __get_vm_area_node+0x23f/0x350 [ 438.521929][T11975] __vmalloc_node_range_noprof+0x397/0x1730 [ 438.521950][T11975] ? __lock_acquire+0x6b5/0x2cf0 [ 438.521963][T11975] ? kernel_text_address+0xa5/0xe0 [ 438.521976][T11975] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 438.521990][T11975] ? arch_stack_walk+0xfb/0x150 [ 438.522006][T11975] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 438.522017][T11975] __vmalloc_noprof+0xd2/0x120 [ 438.522031][T11975] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 438.522045][T11975] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 438.522059][T11975] bpf_prog_alloc+0x3c/0x1a0 [ 438.522073][T11975] bpf_prog_load+0x7ba/0x1ae0 [ 438.522093][T11975] ? __pfx_bpf_prog_load+0x10/0x10 [ 438.522115][T11975] ? bpf_lsm_bpf+0x9/0x20 [ 438.522125][T11975] ? security_bpf+0x7e/0x2d0 [ 438.522137][T11975] __sys_bpf+0x618/0x950 [ 438.522150][T11975] ? __pfx___sys_bpf+0x10/0x10 [ 438.522160][T11975] ? rt_mutex_slowunlock+0x1cb/0x300 [ 438.522181][T11975] ? ksys_write+0x248/0x270 [ 438.522196][T11975] ? __pfx_ksys_write+0x10/0x10 [ 438.522213][T11975] __x64_sys_bpf+0x7c/0x90 [ 438.522224][T11975] do_syscall_64+0x14d/0xf80 [ 438.522233][T11975] ? trace_irq_disable+0x3b/0x150 [ 438.522250][T11975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.522260][T11975] ? clear_bhb_loop+0x40/0x90 [ 438.522272][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.522282][T11975] RIP: 0033:0x7f9f14e7c799 [ 438.522293][T11975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.522302][T11975] RSP: 002b:00007f9f130ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 438.522313][T11975] RAX: ffffffffffffffda RBX: 00007f9f150f6090 RCX: 00007f9f14e7c799 [ 438.522320][T11975] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 438.522326][T11975] RBP: 00007f9f130ad090 R08: 0000000000000000 R09: 0000000000000000 [ 438.522332][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.522338][T11975] R13: 00007f9f150f6128 R14: 00007f9f150f6090 R15: 00007ffff1428878 [ 438.522352][T11975] [ 438.522361][T11975] Mem-Info: [ 438.522367][T11975] active_anon:275 inactive_anon:24121 isolated_anon:0 [ 438.522367][T11975] active_file:22750 inactive_file:37759 isolated_file:0 [ 438.522367][T11975] unevictable:768 dirty:190 writeback:0 [ 438.522367][T11975] slab_reclaimable:12604 slab_unreclaimable:103552 [ 438.522367][T11975] mapped:31107 shmem:17791 pagetables:1612 [ 438.522367][T11975] sec_pagetables:0 bounce:0 [ 438.522367][T11975] kernel_misc_reclaimable:0 [ 438.522367][T11975] free:1278749 free_pcp:7386 free_cma:0 [ 438.522392][T11975] Node 0 active_anon:1100kB inactive_anon:96484kB active_file:90796kB inactive_file:151036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124428kB dirty:760kB writeback:0kB shmem:69628kB kernel_stack:13780kB pagetables:6320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 438.522414][T11975] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 438.522436][T11975] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 438.522463][T11975] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 438.522479][T11975] Node 0 DMA32 free:1168656kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1100kB inactive_anon:96484kB active_file:90796kB inactive_file:151036kB unevictable:1536kB writepending:760kB zspages:0kB present:3129332kB managed:2566492kB mlocked:0kB bounce:0kB free_pcp:29544kB local_pcp:8576kB free_cma:0kB [ 438.522507][T11975] lowmem_reserve[]: 0 0 0 0 0 [ 438.522521][T11975] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:416kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 438.522638][T11975] lowmem_reserve[]: 0 0 0 0 0 [ 438.522653][T11975] Node 1 Normal free:3930980kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 438.522680][T11975] lowmem_reserve[]: 0 0 0 0 0 [ 438.522695][T11975] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 438.522752][T11975] Node 0 DMA32: 1604*4kB (UME) 1603*8kB (UME) 1038*16kB (UME) 927*32kB (UME) 373*64kB (UM) 202*128kB (UM) 119*256kB (UME) 60*512kB (UME) 37*1024kB (UME) 18*2048kB (UM) 224*4096kB (UM) = 1168680kB [ 438.538428][T11975] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 438.538475][T11975] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 6*16kB (UM) 13*32kB (UM) 9*64kB (UM) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 958*4096kB (M) = 3930980kB [ 438.538627][T11975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 438.539921][T11975] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 438.539937][T11975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 438.539952][T11975] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 438.539979][T11975] 78296 total pagecache pages [ 438.539986][T11975] 0 pages in swap cache [ 438.539990][T11975] Free swap = 124996kB [ 438.539994][T11975] Total swap = 124996kB [ 438.539998][T11975] 2097051 pages RAM [ 438.540002][T11975] 0 pages HighMem/MovableOnly [ 438.540005][T11975] 423709 pages reserved [ 438.540009][T11975] 0 pages cma reserved [ 438.567728][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 438.587218][ T5910] usb usb1-port1: unable to enumerate USB device [ 438.599544][T11327] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.689961][ T189] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.690081][ T189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.727362][ T1589] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.737752][ T1589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.087731][ T5893] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 439.228001][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 439.247759][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 439.249832][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.249859][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.249892][ T5893] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 439.249911][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.255657][ T5893] usb 4-1: config 0 descriptor?? [ 439.357695][ T9] usb 7-1: device descriptor read/64, error -71 [ 439.629140][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 439.713248][ T5893] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 439.713288][ T5893] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 439.713315][ T5893] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 439.713339][ T5893] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 439.713365][ T5893] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 439.744182][ T5893] corsair 0003:1B1C:1B02.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 439.769566][ T9] usb 7-1: device descriptor read/64, error -71 [ 439.855354][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.855420][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.879959][ T9] usb usb7-port1: attempt power cycle [ 440.928220][ T5893] corsair 0003:1B1C:1B02.000A: Failed to get K90 initial state (error -71). [ 440.933694][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 440.938259][ T5893] usb 4-1: USB disconnect, device number 31 [ 440.978550][ T9] usb 7-1: device descriptor read/8, error -71 [ 441.111745][T11327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.217732][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 441.241014][ T9] usb 7-1: device descriptor read/8, error -71 [ 441.349368][ T9] usb usb7-port1: unable to enumerate USB device [ 441.894942][T11327] veth0_vlan: entered promiscuous mode [ 441.902456][T12044] netlink: 'syz.0.2197': attribute type 5 has an invalid length. [ 441.957193][T11327] veth1_vlan: entered promiscuous mode [ 442.221880][T11327] veth0_macvtap: entered promiscuous mode [ 442.236569][T11327] veth1_macvtap: entered promiscuous mode [ 442.357970][T12067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.401077][T12069] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2207'. [ 442.448321][T11327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.459421][T11327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.474900][ T1597] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.475688][ T1597] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.475878][ T1597] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.475911][ T1597] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.114688][T12085] netlink: 'syz.3.2211': attribute type 5 has an invalid length. [ 443.363996][ T1589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.364015][ T1589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.435458][ T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.435478][ T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.777933][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 443.941664][ T9] usb 6-1: config 4 has an invalid interface number: 162 but max is 2 [ 443.941691][ T9] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 443.941708][ T9] usb 6-1: config 4 has an invalid interface number: 13 but max is 2 [ 443.941726][ T9] usb 6-1: config 4 has an invalid interface number: 161 but max is 2 [ 443.941745][ T9] usb 6-1: config 4 has no interface number 0 [ 443.941759][ T9] usb 6-1: config 4 has no interface number 1 [ 443.941771][ T9] usb 6-1: config 4 has no interface number 2 [ 443.941832][ T9] usb 6-1: config 4 interface 162 altsetting 3 bulk endpoint 0x2 has invalid maxpacket 1023 [ 443.941853][ T9] usb 6-1: config 4 interface 162 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 443.941864][ T9] usb 6-1: config 4 interface 162 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 443.941874][ T9] usb 6-1: config 4 interface 162 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 443.941886][ T9] usb 6-1: config 4 interface 162 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 443.941897][ T9] usb 6-1: config 4 interface 162 altsetting 3 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 443.941909][ T9] usb 6-1: config 4 interface 162 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 443.941920][ T9] usb 6-1: config 4 interface 162 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 443.941933][ T9] usb 6-1: config 4 interface 162 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 443.941949][ T9] usb 6-1: config 4 interface 13 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 443.941960][ T9] usb 6-1: config 4 interface 13 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 443.941970][ T9] usb 6-1: config 4 interface 13 altsetting 4 endpoint 0x4 has an invalid bInterval 224, changing to 11 [ 443.941982][ T9] usb 6-1: config 4 interface 13 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 443.941994][ T9] usb 6-1: config 4 interface 13 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 443.942004][ T9] usb 6-1: config 4 interface 13 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 443.942021][ T9] usb 6-1: config 4 interface 161 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 443.942032][ T9] usb 6-1: config 4 interface 161 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 443.942042][ T9] usb 6-1: config 4 interface 161 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 443.942052][ T9] usb 6-1: config 4 interface 161 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 443.942063][ T9] usb 6-1: config 4 interface 161 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 443.942072][ T9] usb 6-1: config 4 interface 161 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 443.942085][ T9] usb 6-1: config 4 interface 162 has no altsetting 0 [ 443.942093][ T9] usb 6-1: config 4 interface 13 has no altsetting 0 [ 443.942100][ T9] usb 6-1: config 4 interface 161 has no altsetting 0 [ 443.944237][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=82.99 [ 443.944261][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.944278][ T9] usb 6-1: Product: Ѝ [ 443.944285][ T9] usb 6-1: Manufacturer: ꬰ鳑魯Ↄᱰ㓞લ₩涾涯ৡ躩뎣댐뤶㘉鄡焟碰愿赜뎣叜楍ꍨ㥩펨慡 坹瑋㨄㌅쬫뜇耒᝕ň蛧ⅸ꥿۽瘟ꮞ鷠羼렀⦷곆輰㞏멧˴ꞝ蹜燭䄝㱸꿥Ȟ铯ꉞꆰ␂ꐼ凘䥇傻굜꣓猀톞ꏔᅝ妍鿷勄㜦徇恋㵅䵿玲跐Քꜗꤊ⟏Ꮂ⒐⎇䐾잧뽧年驂敆礘 [ 443.944314][ T9] usb 6-1: SerialNumber: 퀃퓽㲼䎏뮚잊曤쉏䛛痹풵ꑨ铱暼衡Ꮰຟ緯㋍硰擂⫝⼆ఎ䮴赖逑䪦な喫샢瀨蝝㈸緋޼㧺⹚鬅踼澓ﰫ틽璨툲鳞鵷纂좴ૃꞛ䐱밓죧똃⳴䇃鉃⷗纥쀺훻踭㖳 [ 443.951281][T12091] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 443.951569][T12091] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 443.952389][T12091] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 444.301751][ T9] usb 6-1: USB disconnect, device number 13 [ 447.419846][ T5989] ------------[ cut here ]------------ [ 447.419863][ T5989] kcov->t != t [ 447.419878][ T5989] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#0: udevd/5989 [ 447.419925][ T5989] Modules linked in: [ 447.419948][ T5989] CPU: 0 UID: 0 PID: 5989 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 447.419977][ T5989] Tainted: [L]=SOFTLOCKUP [ 447.419985][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 447.419998][ T5989] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 447.420022][ T5989] Code: 10 00 00 48 8b bb 90 00 00 00 e8 16 5b 54 00 48 89 df 5b 41 5e 41 5f e9 d9 32 5a 00 7c 1c 5b 41 5e 41 5f e9 8d 91 62 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 eb 2a 61 09 48 89 df be 03 00 [ 447.420040][ T5989] RSP: 0018:ffffc90005137d20 EFLAGS: 00010202 [ 447.420058][ T5989] RAX: 9c44c5d269725300 RBX: ffff8880246c4b00 RCX: 0000000000000000 [ 447.420074][ T5989] RDX: 00000000b8e13370 RSI: ffffffff8ba671e0 RDI: 00000000ffffffff [ 447.420089][ T5989] RBP: ffffc90005137e78 R08: ffffffff8b25a1d0 R09: ffffffff8ddcba80 [ 447.420104][ T5989] R10: dffffc0000000000 R11: fffffbfff1ed4bb7 R12: dffffc0000000000 [ 447.420120][ T5989] R13: 0000000000000000 R14: ffff8880246c4b08 R15: ffff8880260bbd00 [ 447.420135][ T5989] FS: 00007eff45f17880(0000) GS:ffff888126339000(0000) knlGS:0000000000000000 [ 447.420161][ T5989] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.420178][ T5989] CR2: 0000565236cdf568 CR3: 0000000032e90000 CR4: 00000000003526f0 [ 447.420198][ T5989] Call Trace: [ 447.420207][ T5989] [ 447.420219][ T5989] do_exit+0x150/0x23c0 [ 447.420242][ T5989] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.420273][ T5989] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.420303][ T5989] ? reacquire_held_locks+0x104/0x190 [ 447.420325][ T5989] ? rt_spin_lock+0x1e0/0x400 [ 447.420349][ T5989] ? __pfx_do_exit+0x10/0x10 [ 447.420370][ T5989] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 447.420403][ T5989] ? rt_spin_unlock+0x160/0x200 [ 447.420431][ T5989] do_group_exit+0x21b/0x2d0 [ 447.420458][ T5989] __x64_sys_exit_group+0x3f/0x40 [ 447.420480][ T5989] x64_sys_call+0x221a/0x2240 [ 447.420499][ T5989] do_syscall_64+0x14d/0xf80 [ 447.420518][ T5989] ? trace_irq_disable+0x3b/0x150 [ 447.420540][ T5989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.420562][ T5989] ? clear_bhb_loop+0x40/0x90 [ 447.420587][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.420608][ T5989] RIP: 0033:0x7eff4604f6c5 [ 447.420628][ T5989] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 447.420646][ T5989] RSP: 002b:00007ffc13d658a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 447.420665][ T5989] RAX: ffffffffffffffda RBX: 000056523706a010 RCX: 00007eff4604f6c5 [ 447.420681][ T5989] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 447.420695][ T5989] RBP: 0000565236cb4910 R08: 0000000000000000 R09: 0000000000000000 [ 447.420709][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.420722][ T5989] R13: 00007ffc13d658f0 R14: 0000000000000000 R15: 0000000000000000 [ 447.420753][ T5989] [ 447.420777][ T5989] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 447.420796][ T5989] CPU: 0 UID: 0 PID: 5989 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 447.420825][ T5989] Tainted: [L]=SOFTLOCKUP [ 447.420834][ T5989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 447.420845][ T5989] Call Trace: [ 447.420854][ T5989] [ 447.420863][ T5989] vpanic+0x56c/0xa60 [ 447.420891][ T5989] ? __pfx__printk+0x10/0x10 [ 447.420913][ T5989] ? __pfx_vpanic+0x10/0x10 [ 447.420939][ T5989] ? is_bpf_text_address+0x292/0x2b0 [ 447.420965][ T5989] ? is_bpf_text_address+0x26/0x2b0 [ 447.420998][ T5989] panic+0xc5/0xd0 [ 447.421024][ T5989] ? __pfx_panic+0x10/0x10 [ 447.421067][ T5989] __warn+0x315/0x4f0 [ 447.421092][ T5989] ? kcov_task_exit+0xf5/0x160 [ 447.421116][ T5989] ? kcov_task_exit+0xf5/0x160 [ 447.421140][ T5989] __report_bug+0x29a/0x540 [ 447.421185][ T5989] ? kcov_task_exit+0xf5/0x160 [ 447.421209][ T5989] ? __pfx___report_bug+0x10/0x10 [ 447.421238][ T5989] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 447.421266][ T5989] ? do_raw_spin_lock+0x12b/0x2f0 [ 447.421301][ T5989] ? kcov_task_exit+0xf5/0x160 [ 447.421324][ T5989] report_bug+0x16a/0x220 [ 447.421352][ T5989] ? kcov_task_exit+0xf5/0x160 [ 447.421373][ T5989] ? kcov_task_exit+0xf7/0x160 [ 447.421395][ T5989] handle_bug+0x9c/0x200 [ 447.421418][ T5989] exc_invalid_op+0x1a/0x50 [ 447.421441][ T5989] asm_exc_invalid_op+0x1a/0x20 [ 447.421460][ T5989] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 447.421484][ T5989] Code: 10 00 00 48 8b bb 90 00 00 00 e8 16 5b 54 00 48 89 df 5b 41 5e 41 5f e9 d9 32 5a 00 7c 1c 5b 41 5e 41 5f e9 8d 91 62 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 eb 2a 61 09 48 89 df be 03 00 [ 447.421501][ T5989] RSP: 0018:ffffc90005137d20 EFLAGS: 00010202 [ 447.421519][ T5989] RAX: 9c44c5d269725300 RBX: ffff8880246c4b00 RCX: 0000000000000000 [ 447.421534][ T5989] RDX: 00000000b8e13370 RSI: ffffffff8ba671e0 RDI: 00000000ffffffff [ 447.421550][ T5989] RBP: ffffc90005137e78 R08: ffffffff8b25a1d0 R09: ffffffff8ddcba80 [ 447.421566][ T5989] R10: dffffc0000000000 R11: fffffbfff1ed4bb7 R12: dffffc0000000000 [ 447.421583][ T5989] R13: 0000000000000000 R14: ffff8880246c4b08 R15: ffff8880260bbd00 [ 447.421604][ T5989] ? rt_spin_lock+0x1e0/0x400 [ 447.421633][ T5989] do_exit+0x150/0x23c0 [ 447.421651][ T5989] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.421676][ T5989] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.421702][ T5989] ? reacquire_held_locks+0x104/0x190 [ 447.421723][ T5989] ? rt_spin_lock+0x1e0/0x400 [ 447.421744][ T5989] ? __pfx_do_exit+0x10/0x10 [ 447.421764][ T5989] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 447.421795][ T5989] ? rt_spin_unlock+0x160/0x200 [ 447.421819][ T5989] do_group_exit+0x21b/0x2d0 [ 447.421845][ T5989] __x64_sys_exit_group+0x3f/0x40 [ 447.421865][ T5989] x64_sys_call+0x221a/0x2240 [ 447.421883][ T5989] do_syscall_64+0x14d/0xf80 [ 447.421900][ T5989] ? trace_irq_disable+0x3b/0x150 [ 447.421920][ T5989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.421940][ T5989] ? clear_bhb_loop+0x40/0x90 [ 447.421962][ T5989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.421981][ T5989] RIP: 0033:0x7eff4604f6c5 [ 447.421998][ T5989] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 447.422014][ T5989] RSP: 002b:00007ffc13d658a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 447.422034][ T5989] RAX: ffffffffffffffda RBX: 000056523706a010 RCX: 00007eff4604f6c5 [ 447.422048][ T5989] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 447.422062][ T5989] RBP: 0000565236cb4910 R08: 0000000000000000 R09: 0000000000000000 [ 447.422074][ T5989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.422086][ T5989] R13: 00007ffc13d658f0 R14: 0000000000000000 R15: 0000000000000000 [ 447.422114][ T5989] [ 447.422375][ T5989] Kernel Offset: disabled