last executing test programs: 3m36.592489947s ago: executing program 2 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000846000/0x4000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) 3m35.236516358s ago: executing program 2 (id=589): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="40091a000000ed72e22f9f"], 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="14170008", @ANYRES32=r0, @ANYBLOB="01002abd7000ffdbdf253d00000008000300", @ANYRES32=r2, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40410}, 0x88c0) 3m32.212309494s ago: executing program 2 (id=594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80064d12, &(0x7f0000000000)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0xfffffff8, 0x21}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) 3m31.871674715s ago: executing program 2 (id=597): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c000480080002400000000008000240df05007b08000240000007ff08000240000000330800014000000000080001400000000508000140000000c10500030084"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000680)="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", &(0x7f0000000040)=@tcp, 0x4}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6c", 0x41}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000300), 0xf01c, 0x524f01) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m29.811414932s ago: executing program 2 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) chdir(&(0x7f00000002c0)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x12000, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x0, 0xc, {r0}, {}, 0x7fffffff, 0x5}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000100)={'\x00', 0x8, 0x40, 0x9, 0x3ff, 0x0, r3}) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x30a00, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) setpgid(r0, r0) setpgid(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) r8 = getpgrp(0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x1, 0x0) 3m28.920886868s ago: executing program 2 (id=604): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x800000000000002f, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdb1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f0000000140)='./control\x00', 0x0) 3m13.907081866s ago: executing program 32 (id=604): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x800000000000002f, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdb1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f0000000140)='./control\x00', 0x0) 12.970566668s ago: executing program 3 (id=1274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000180)="66fbd18d2c1cc294aa00002ba8ef63e8589d8b2f8acb188b99337c936edf9c7893b446b0f03b35f8336ae9f611f597f93625cc10f0a8ab66e1cc239e0f6e33c43c54b28835d61edbe899d874", 0x4c}], 0x1}}], 0x1, 0x20080058) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x8}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x40, 0x10, 0x0, 0x3, {{0x22, 0x4, 0x1, 0x1, 0x88, 0x65, 0x0, 0x7d, 0x4, 0x0, @local, @empty, {[@lsrr={0x83, 0x2b, 0xbf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @private=0xa010102, @multicast1, @rand_addr=0x64010102, @private=0xa010102, @rand_addr=0x64010100, @local, @multicast1]}, @end, @timestamp={0x44, 0x10, 0x1b, 0x0, 0x4, [0x20, 0x101, 0x9]}, @rr={0x7, 0x17, 0x4c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote]}, @lsrr={0x83, 0xb, 0xbf, [@local, @private=0xa010102]}, @ssrr={0x89, 0x13, 0xed, [@loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) close_range(r3, r5, 0x2) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000280)="14", 0x1}], 0x1, 0x9, 0xfffffffc, 0xa0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9e}, @generic={0x6, 0x5, 0x7, 0x430, 0x80000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0xfffffff9, 0x3d, &(0x7f0000000140)=""/61, 0x40f00, 0x22, '\x00', r4, @fallback=0xd, r5, 0x8, &(0x7f0000000280)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r6, r3, 0x3, &(0x7f0000000780)=[0xffffffffffffffff, 0x1, r7], &(0x7f00000007c0)=[{0x5, 0x1, 0x7, 0x1}, {0x5, 0x3, 0x2, 0x4}, {0x4, 0x3, 0xf}], 0x10, 0x5}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0xff, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}, 0x94) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300), 0x10) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200)='ubifs\x00', 0x1a0c099, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x4480, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'default', '=relative'}}}]}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast1}], 0x20) ioctl$IOMMU_VFIO_GET_API_VERSION(r11, 0x3b64) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0xff}, 0x4) ioctl$DRM_IOCTL_GET_MAGIC(r11, 0x80046402, &(0x7f00000000c0)=0x3) 12.75824744s ago: executing program 3 (id=1276): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x3, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x2, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) 11.331166306s ago: executing program 3 (id=1283): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0xe20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x4, 0x4) syz_io_uring_setup(0x497, &(0x7f0000000500)={0x0, 0xab2a, 0x8, 0x0, 0x256}, &(0x7f00000002c0), &(0x7f0000000340)) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x23, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xb, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x4, 0xfcc0, 0x41, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x9a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa0086dd602abe0000641100fc01000000fbb46cf0713942c9fec28605e8b11400000000000000000000010000000000000000000000000000000000004f22006490780200000002000000030000008a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15070dcafcdaca76e24fcb751eeaa8add0b2f075633f64c7249908bc00000000000000002000000051"], 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2038060, &(0x7f0000000340)={[{@nr_inodes={'nr_inodes', 0x3d, [0x38]}}]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='vlan0\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 11.287353485s ago: executing program 0 (id=1284): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/147, 0x93) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000280)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x115c, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x40402, 0x1) write$FUSE_NOTIFY_STORE(r5, 0x0, 0x2d) write$cgroup_subtree(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="2d6e65745f636c73202b6e65ffff636c73202d6e6574202d68756765746c62202d6e65745f636c73"], 0x43) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r7 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) semget(0x0, 0x1, 0x281) semget(0x0, 0x2, 0x120) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020500020200"/15], 0x10}}, 0x0) sendmmsg(r6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x400) sendmmsg$inet6(r2, &(0x7f0000004b00)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x7, @private0, 0x3d}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000380)="ad9c6d4f3b68d2bd7eecf95cb0802016eafcae156888a0cbf4f3483539289bc5d91176b94c34eccc73cf39d49d2d8ab2d501fc07df3b1f60a2792058c706ac631bdcd8", 0x43}, {&(0x7f0000000580)="41c2c48dfc2b01e03e7ab350c312c12793aa086eb5dd9d514e7722e7e674eaa5e196ade1ae90e07fe6e6059267710fc8f776591bdebf9810582cc7221621b0ffd7de9db11314e5bcc9019f1e7d638d67425cee9b62761b8ee44a281272c2ecda506f3813ea17406960b95ce59c60a6134af8f3d8e7e2769fef22971b535d775b887a80bb66e90ce90196dd1fd797cdec5b099bbcc4e637c586e55691ea71ac4bbd9b16c4f5e1482f61", 0xa9}, {&(0x7f0000000640)="77a9b5b2a1250a92fefc66f130b137169b0c046a67e41c2717a4c56edd2dfef14d70165869c5ecf1d4db8413e6997ad17a8a0b3b76de97400c0acae525ba7ead60fcfb7d1c1ac37c226c9083564dbe66cdc44552ffa2bdb0b588d57df92f7081b74991c81299b99280bb3e1ad33648387aa4b9ebe71b9057a2ad2bdf6711b6a124665ddfc4da49bad96694a69346685704abeb947dc6ca5316193f216a68b4e7fbe31aa58274771fc1d1736c6924900996355e9427238e021c31fbefe8ae0fcf38c796225a50f942be7135aedc67a134a4583afca4243728152005bae769b4b706dd9a943160bae747986c916825e3ff99339a894060783cc06cb1", 0xfb}, {&(0x7f0000000740)="b70bdbca47a349d9727c91189f4fbc22fee08492c1247d552c299c3947729f0bcb0aaac87cca8256dab4f48ff006e8b86c811b2f65bea88f518f1c026ce7e7853da6c80cc888c9de46d5a30902b654b6d5eb1f21d00d89de80ee2690a0307527", 0x60}, {&(0x7f0000001180)="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", 0x1000}], 0x5, &(0x7f0000000840)=[@rthdr={{0x88, 0x29, 0x39, {0xff, 0xe, 0x0, 0x7, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0xe}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x67eb}}], 0xa0}}, {{&(0x7f0000000900)={0xa, 0x4e24, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000940)="5ffa1a72a2de9a37222ad980ed896fcb3cd6cc9953b24cb6d3d5dac28bc2213d02e598bc55576ab515785691ddf81f", 0x2f}, {&(0x7f0000000980)="e239c451518f1a11fbb1bf05b6330e8c5ad2768d9976e16562633cf1cb3d6bc2d99dc264b5546fc28a6bdb1e935997ff13fa3ca007bc3eec4c9ed2175ae5b9e205ff0c4314ba6214490dc2ef33ca6deb371046d1a73fde916d3dfcf15d90e98ec8a95fb7bb961cfe0f2090c484303e229224e6feebbdb7c54d12bf4938e396a68f58cb8704ef5924961f28d85db0f94ccd17a6a81d05b91768d3fdf31ae74d962708278e31cfcd944d5138352621e260008363214ca22dc60d8d617bdceee4353aee20d261ad81b28a80977146b292372a1b455fbf3b4ee1568c15246ac950666dce66f65a94dde0a4e7e7ba", 0xec}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000000a80)="5b75e504019f928061a9a8f499c3d389ed1eb1564f9495ef3ac4b87d8a256913ef729268130fb1bf54316f03070388f6c65ae36c7eff8952671e0e0254c86adeb3191856516c447c9d764078ce468a2d8cbf2174cf052fcb5806c9a7d8598311b97d46c4082dfa7bfb91052a2de0559ac314376164f586240f79e8b59c37742f2ab8f1c9e61d5b6e11843a9d6caa867e29012cd1078f38302bbe7d232b8eef47f944f9176980d643ae0ec078fbf9d4ed7011842e13acba69ec2d999cf7f56066dc36f776781d01b8036281302c92f52f7b2d1537de80848e6dac0018f9307c38afde33931907fd485b648a8316d5982e4669", 0xf2}], 0x4, &(0x7f0000000bc0)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hopopts_2292={{0x210, 0x29, 0x36, {0x1, 0x3e, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @jumbo, @calipso={0x7, 0x50, {0x0, 0x12, 0x66, 0x3, [0x100, 0x3, 0x7, 0x2f9b, 0x2, 0x7, 0x401, 0x80000001, 0x7]}}, @generic={0x1, 0xe7, "06844e40275e9e7a33f87c0058e69d198115721718a04a63719fe0957e3d0482fe5c2bf91326a5c04ffba90183ada0edff213421828873d0e26005918fb7bcce40e4f6e7d50ca56ab5fbd0c319604c3a39e405eac0fa88d0ac6e0f69ae0026c4760d65d6148fb8f14f26405b8ce147dc0120013e2242f77dd2e86dc97db50c85e00765c4244308e35f951f94ce5a3a5b4721a55b7ce81142134b32f66eb72f64cbe423e6b10433ff3f6253c8e7218e44cee297fda65b8769dad70974f7e5e0bc0b71bee55c82bd3de8e71e555ff4295e02318c6e6113ea03e653ba1ecf7680ffdb087c1bd9398b"}, @generic={0x0, 0x75, "99a3124aa1b4982ee5753835f747baf4a13ab9c910f86967d3046e4fdf8ae588889ee8a517cea2d0069313f6cc06ed7697f46916aa6252dc59c8ee9609f385f0d06c960d0dea4d4596a8c75283a0c7de900c6bfeaa8688a0967625aacbe345a8d0131fad2972844b4d1d39fb85fd4fd981c0093f13"}, @generic={0xd, 0x21, "222c46eacda307e1d1a594e21f307bda1ea018a840f6a6254d9c2bad1a0a5d9df4"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}], 0x228}}, {{&(0x7f0000000e00)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000e40)="ce4cba6795bfc4acfb38364138f8a5bd577a9c01e9d4f52361cf3770502ddd5734287277e9be03ee6a7adc4ed18c0a613c83b51adc0d1403fd16d0f2ceada91318e305c4773ec4", 0x47}], 0x1, &(0x7f0000004c80)=[@hopopts={{0x40, 0x29, 0x36, {0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x98}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}], 0x40}}, {{&(0x7f0000000f40)={0xa, 0x4e22, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x1}, 0x1c, &(0x7f0000003440)=[{&(0x7f0000000f80)="77e8d98c0d306a6321c2081d2c62cf553b9d0b1810a0965e51531aacdf89cb45bbb548fb55d830beb6bd34dd87df8fd7976eed51d023c58016b5fbdee4edf303d57c572b718d2a34cf8a9b6f5e26ae4447f89d1a077766e4dec931ff87be8e17c9751829adc16d0d0d1f9bec55b004e8bb62e539e07b1233a11fcd35fd0a0ac1f067c21acf100c13a37d0be97a157727543322cef64db014d23b94c32280d4a7dd58b8bf44e151c80ccf99b5265db3be5e99ed96baf1a26284890f", 0xbb}, {&(0x7f0000001040)="e75182e2de3203ed4f284e", 0xb}, {&(0x7f0000001080)="aafd1275f73ccab6c9aa3d0370fa951e96286bb7a031a949d227e520c65cdfcc21841b85bb6ba0f2f0ba3227608391d059fa3798966ae33622b30135d980", 0x3e}, {&(0x7f0000003180)="2d1f18c4f303b3c598c063026815c692c506e1a0dc51a346f616ce93489bd4a081c3840eccadb26328dd9e0d96471966107e787cae3d9022d7b6d977e3bce9547be15c1a7fdea908ca5518cad97d21602f93455254e3ea5f9e202d366169f9dd18cbfa1674fca0c9443892b8d803e19525c32495e4d569852d984b2f271d1d0f7fca1400033805e09340b619959e2d15c00044ca5b14f4748b30cf444d15b3643a28159e837e065b6f8e6bd2696c8debcd331fbc", 0xb4}, {&(0x7f0000003240)="3f3897f16ca027cd7a30184929dbb7666e6923beca89aafcf15b44e0c2b2a35f768d56393ca73bcd163ce5c2323d32921dc74a47f0fecc2ffaffdb50ae2ee28ab1f4a89ca23cd2625d635c741c4c85bf4436b7fe4ba97399165e4138fccab77af18aa6673039ddb0ed7c84a08e4353f21f8de5693969843e331acb7040a53aaaa6a2a142db7efa18f3fc755ded52bd068d715d7c861020690992365944f40cebd9722e77dbd3f6aa843085cee25d6df38bf5fd7181510d4882a95d87af5f705179fa03", 0xc3}, {&(0x7f0000003340)="b68ac025fc5b938336a58c4aaeae012b05010a02839f90582faa920bc71040b505fd54c405483d68761c6bdb6f0f98764d9d72f252f28ab6ac2cc8c87d9c8a6e56c13eefb5ee82a1fb4d3e526b38113ad524d885f108b1ebf587767b7cc63bd673241269829913e4819aad26a22874d16a5e4debe3c21aebfc77736e8f571689b3f38dadbd3aea9bc59c7c53562c26b1e77a6e44b5de56fa7f88ad945f052f58e81d9628d33875c68180252f8d1761c65873d8583424d1378c251905aeacc51935a5c24e9f87dce1982b65d9ca01c66d4f53132b950bc7d189dfba8fa636fc5279d59729abfb4c48a7d28499d5", 0xed}], 0x6, &(0x7f00000034c0)=[@tclass={{0x14, 0x29, 0x43, 0x10000}}, @pktinfo={{0x24, 0x29, 0x32, {@private1}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x98}}, {{&(0x7f0000003580)={0xa, 0x4e23, 0xfffffff8, @mcast1, 0x273}, 0x1c, &(0x7f0000003740)=[{&(0x7f00000035c0)="090c21b7f66786bc99feca527a2c86bfaac80c48abd6d933522c8e661786d492e674df8defa1001c", 0x28}, {&(0x7f0000003600)="c99175b1d959df033fb9e4f6c6eff5c7e78b3deafa2058d07c97c515345bf96327ddfd830e9aa87bb26bdfabcb", 0x2d}, {&(0x7f0000003640)="18ba6bba0f7e44f4da1f6e9cba5cc897443c265c90cd9e835a2a2ab4b164bb03fe2387c3ddd955504c54aea8ef3ec41eda6a12115eb07639aa75d2378b4ba1c7255086e208e0941dcc544d446cf5787c9784baf90ba4f30fa05d96b424546db38bc001c2dcb4ded47c3c89101ae8287a263b573e556b29fdca9f1a5b6a", 0x7d}, {&(0x7f00000036c0)="a4ee3628d5f45efb02f79a35bec19038cd3d8f477ac8d3ac3312d71d4d2cee3b52f4600179712f8edc4909b7596e8db827fb71a10beee36baab8c543", 0x3c}, {&(0x7f0000003700)="7e7729bbf7cc12a4449d09e06aa65ee48dc838d6", 0x14}], 0x5, &(0x7f00000037c0)=[@tclass={{0x14, 0x29, 0x43, 0x80000001}}], 0x18}}, {{&(0x7f0000003800)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}, 0x1c, &(0x7f00000049c0)=[{&(0x7f0000003840)="180ba5f5a127186511478db8dd2a9e02f1b5ff28122ccecfeb8d34eef567a6a03fb0bff99e68a942a875f444f8a24d0a9aa30e79ddfdfae85512ff9011e8603ed5", 0x41}, {&(0x7f00000038c0)="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", 0x1000}, {&(0x7f00000048c0)="2750d32096719f6b792af52d5f0e7bc35c798ea4bfdb212f8a79d117959ede5ce7e3caa1de", 0x25}, {&(0x7f0000004900)="6e952e8b3aebd42b7ce9bee7ab8a7b2551357b8bc197fb8a3a5e16ff404071fe2cbde341e0a1671f4b388a114fe9eb97a3da0d9f98eb37bb9f6d54a4215c7ab02088ec2c5d7bdec7d7dbe155c7823893382340de8ae9944ea97c7677a0f5a3c69da4ac00f2c9c1a1bc03fc2e230a0bff77995489bf45aa4c50e6412b50045cbdcf37112a70b6139a9f", 0x89}], 0x4, &(0x7f0000004a00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x66a1578d}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x16, 0xc, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x3, 0x4, [0x6]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x90, 0x2b, "eb05a9f407e40630a79f31b003218c378c0d881c732e08a143e0673a4ea2d68ca288ab2ff4b938a4f69923"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0xff, [0xeab3]}}, @jumbo={0xc2, 0x4, 0x584}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x0, 0xa, 0x1, 0x9, 0x0, [@loopback, @private1, @mcast2, @loopback, @empty]}}}], 0xf8}}], 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=r1, @ANYRESOCT=r1, @ANYBLOB="ff1dc42a97f5ac291986d3db899ba40e1bee9d87b503a54cad0065c0e2a6201be710290427455070d24b6e8d5115ef4b8cf772efd4ade5eb1053444b11b74d9b87a9f5d9eb1ec911b72eb7486f08e1e0aa863b2421e9e43d839b1030dcc7457aeff60d9e28cddd32d2f3e2cf7a7de3e255850b3acb2aea3f770f0aa7418960d87d38c08af1f85cf46d63342f6e620f99f19600c163d492f7075d0ad29fd9720147da33f66b1111908f62c82df1d27a08b0a10cf37ecec413fb493e1f4030b20e6741bc48905ae04b4a16b67d588b04d731d0648bed1fff4494b1daf327bb4973e23e6e603a", @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.394613166s ago: executing program 4 (id=1285): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80082) close(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000302ff2505a1a440000102030109023b000101022080090400090302060028052406000005240009000d240f01fcffff7f01000100000000000000bc010703090503022000040306"], 0x0) r0 = getpid() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x40000000c8243, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x22a102, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) 10.155430747s ago: executing program 3 (id=1286): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80082) close(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000302ff2505a1a440000102030109023b000101022080090400090302060028052406000005240009000d240f01fcffff7f01000100000000000000bc010703090503022000040306"], 0x0) r0 = getpid() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x40000000c8243, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7ff}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) gettid() 8.723669513s ago: executing program 0 (id=1288): bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000050000000004000009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20020000}}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@ipv6_delrule={0x24, 0x21, 0x121, 0x0, 0x1, {0xa, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getpgrp(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, &(0x7f00000002c0)=ANY=[], 0x78) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000600)={0x20000001}) close(r8) socket(0x10, 0x803, 0x0) splice(r6, 0x0, r8, 0x0, 0x7151, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8937, &(0x7f00000000c0)={'netdevsim0\x00', @random="0100012010ff"}) r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r12, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r12, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0xfffffffb, 0x6}}]}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000140)={0x8080000, 0xf000, 0x1}) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0xe, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0xf4, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x8}, {0x88, 0x1, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xd, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x1}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7e}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) fsopen(&(0x7f0000000040)='vxfs\x00', 0x0) 8.615243561s ago: executing program 1 (id=1291): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x7a77b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000100)={{@host}, 0x1, 0x1, 0x3}) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) r6 = userfaultfd(0x801) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@getchain={0x44, 0x66, 0x10, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff1, 0x4}, {0x6, 0x4}, {0x5, 0xffe7}}, [{0x8, 0xb, 0xfffffff7}, {0x8, 0xb, 0x20000000}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x1}]}, 0x44}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getchain={0x5c, 0x66, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x5, 0x1}, {0x7, 0xfff3}, {0x8, 0x4}}, [{0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xc5}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x455}]}, 0x5c}}, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x202}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 8.497235136s ago: executing program 5 (id=1292): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='FROZEN\x00', 0x7) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'pim6reg1\x00', @local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001500010321000000000000000c000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4004080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) 8.42605068s ago: executing program 0 (id=1293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r2}) shutdown(r0, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4, 0x800000}, 0x38) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x240c089d) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d4, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.308237176s ago: executing program 0 (id=1294): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380), 0x0, 0x300, 0xf6, 0x0, 0x0}) 8.185267487s ago: executing program 3 (id=1295): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002280)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f00000007c0)=""/84, 0x54}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000840)=""/185, 0xb9}, {&(0x7f0000001a00)=""/224, 0xe0}, {&(0x7f0000000240)}], 0x6, &(0x7f0000001b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001c00), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001c80)=""/247, 0xf7}, {&(0x7f0000001d80)=""/67, 0x43}, {&(0x7f0000001e00)=""/131, 0x83}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000001ec0)=""/128, 0x80}, {&(0x7f0000001f40)=""/176, 0xb0}, {&(0x7f0000002000)=""/193, 0xc1}, {&(0x7f0000000540)=""/10, 0xa}], 0x9, &(0x7f0000002340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}], 0x2, 0x2002, &(0x7f0000002300)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002100)=@newtaction={0x78, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x64, 0x1, [@m_skbedit={0x60, 0x9, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x10}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x6, 0x10000000, 0x4, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x46, 0x0, &(0x7f0000000140)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) write(r1, &(0x7f0000000300)="b66db8019d316f92ec172c78ab61aa9520bf63966ca80d0dd5485921a514940f8aef7ce7da158ff24a5822ea6d3880f37c3ea440b5cb0931f217f14ec03057077c0a808eda409137183dc5c445ba61f66aaf39ee30dfd291dec5a6177dfd7ce5ab02a028aba0b4bac3edcb77c6a1512a632018d6a952", 0x76) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0xffff) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x88480, 0xcd) fsetxattr$security_ima(r7, &(0x7f0000000100), &(0x7f00000009c0)=ANY=[@ANYBLOB="02da6d76e9ae903edbcd0f95396663e1d9464399"], 0x10, 0x0) 8.178905138s ago: executing program 4 (id=1296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r5 = syz_open_procfs(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000370000009500000000000000dc9b66abe042f6404cc82006a1102c9ee886362800490ac642619499f4997fb34291718b3a9b5238d372917ec718661a5a4592cc2244f7c14212301999661952f3f2a4c3bff5ee71261ea8db9e65e0beaccb18ec33f9442bfcb7e18096c81d6be190d6d660e397a47ecc09f4a375cc590019ff17679c505232edfe2965aded27b5836db117c5af44b27f52edca49b488e21953a167a14b83fa8ca08547f53ff700481565fd58702e9dffb3d0d1672aa236a32a8abf6ba5a09d64b0160829e1d402f0"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x3, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$fb(r6, &(0x7f0000000100)="732f64bd01d8958da2", 0x9) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x19b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 7.095462252s ago: executing program 3 (id=1297): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x12, r0, 0x7e423000) madvise(&(0x7f000036a000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0x4, 0x20000080003, 0xe691, 0x0, 0x8000000000000002, 0x2, 0x100000001, 0xfffffffffffffffb, 0x0, 0x20008, 0xffffffffffffffff, 0x6, 0x4, 0xfffffffffffffffd], 0x2000, 0x6f84}) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0x10000) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000000)={&(0x7f0000000380)=[{0x1, 0xc401, 0x2, &(0x7f0000000780)="2fa4"}], 0x1}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0x100001, 0x1, 0x4, 0x9, 0xa6, 0xffb, 0x7, 0xb69, 0xc1, 0x0, 0x1, 0x8, 0x5, 0x101, 0x1000, 0xc, 0x3, 0x3, 0x1, 0xfffffffa, 0x1000401, 0x2006, 0x9, 0x81, 0x7, 0x8, 0x100002, 0x8, 0x3, 0x429f, 0xe, 0x2b12, 0x5, 0x6, 0x1c00, 0xd, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x672, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x4, 0xaa, 0xfffffffe, 0x2, 0xd6f, 0xd, 0x8c, 0x37, 0x2af, 0xf7, 0x5, 0x1, 0x5, 0x6, 0x4, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x400000, 0x3, 0x0, 0x10001, 0x696, 0xffffffff, 0x6, 0x1, 0x9, 0xd4f9, 0xfdffffff, 0x2, 0x3, 0x84, 0x100, 0x5, 0x5b, 0x81, 0x33b, 0x7ff, 0x20006, 0x5, 0xffffffff, 0x6, 0x2, 0xd9a, 0xd, 0x6679, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x8, 0x2, 0x40, 0x8, 0x1, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x6, 0xc5c, 0xffffffff]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x622, 0x8, 0xa000200000a958, 0x2000000009, 0x8, 0x8000000f8, 0x48cd, 0xfffffffffffffffa, 0x401}) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a64b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0xc, 0x0, @opaque="03000000"}}}}}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r8, 0xfffffffffffffffe, 0x29) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000822000/0x1000)=nil, 0x1000}, 0x4}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.002783166s ago: executing program 0 (id=1298): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x30, 0x7, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) mount$afs(&(0x7f00000004c0)=ANY=[@ANYBLOB='#s'], &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000240), 0x800040, &(0x7f0000000300)=ANY=[@ANYBLOB='flock=write,flock=local,flock=strict,flock=strict,flock=strict,dyn']) syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22"], 0x0) 6.552529166s ago: executing program 1 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x24008051, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x3}, 0x12) 6.39421037s ago: executing program 5 (id=1300): r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') read$FUSE(r0, &(0x7f0000005880)={0x2020}, 0x2020) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x2, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) r6 = socket(0x10, 0x3, 0x0) setreuid(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000190015012bbd70000000000002188000ffffff000010000008000100ac1414"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x4) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xff32, &(0x7f0000000380)) 6.317139712s ago: executing program 1 (id=1301): fsopen(&(0x7f0000000040)='vxfs\x00', 0x0) (fail_nth: 5) 5.975326239s ago: executing program 1 (id=1302): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r5 = syz_open_procfs(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000370000009500000000000000dc9b66abe042f6404cc82006a1102c9ee886362800490ac642619499f4997fb34291718b3a9b5238d372917ec718661a5a4592cc2244f7c14212301999661952f3f2a4c3bff5ee71261ea8db9e65e0beaccb18ec33f9442bfcb7e18096c81d6be190d6d660e397a47ecc09f4a375cc590019ff17679c505232edfe2965aded27b5836db117c5af44b27f52edca49b488e21953a167a14b83fa8ca08547f53ff700481565fd58702e9dffb3d0d1672aa236a32a8abf6ba5a09d64b0160829e1d402f0"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x3, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$fb(r6, &(0x7f0000000100)="732f64bd01d8958da2", 0x9) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x19b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 5.97396184s ago: executing program 5 (id=1303): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x2, 0xffffffff00772d46, 0xfffc, 0x400, 0x200, 0x5, 0x0, 0x0, 0x12, 0x7fffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000002114000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x9, 0x0, {0x6, 0x1}, {0x45, 0x2}, @cond=[{0x0, 0x20c8, 0x20, 0x4, 0xaf}, {0x7ffe, 0x10, 0x1, 0x7, 0x5, 0x101}]}) chdir(&(0x7f0000000280)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) 5.017933337s ago: executing program 5 (id=1304): socket$caif_stream(0x25, 0x1, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000004000000c30000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000000701020000000000000000010000080c00064000000000000000040900010073797a30000000000800054000000030"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x24000090) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1200000, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) (async, rerun: 32) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) (async, rerun: 32) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) (async) socket(0xa, 0x3, 0xff) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs(r2, &(0x7f00000000c0)='net/arp\x00') setrlimit(0x4, &(0x7f0000000000)={0x6bd7, 0x2}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="780000002300100028bd7000fddbdf25000000005a001200656368be9714cd4f1b6bec099e61696e69762865636861696e69762861656769733132386c2929000000000000000000000000000000000000000000000000d151540200000000000000000000700000000002000080455d7cc4e880fe329b8f3639ff57ed9f47000008000b0000000080f349c771c50c7cba314ede16c05a3186e861e978a7e551da36c5dcdc16db31e4c7057ba3f954cac01e28e2018318f1519cb29d6759b175e7d1450f8ae3d4f4037c06c760bf61af643ce9bc5541fd68afb82c0317557f37adece167e1d73a68dd8ee18d3b1f7c298d02f2cf16d59416e3e911145648bc3ca0b0a043152ec5aa967a462c9c5870c482ae407e280e5370cdedaf9df3efa79e4ca57effbcf97314f303d45b"], 0x78}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1600000000000000040000000100000000", @ANYRES32], 0x50) (async, rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x1) (async, rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c014) 4.627883676s ago: executing program 5 (id=1305): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000846000/0x4000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs$namespace(0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) 4.212950545s ago: executing program 0 (id=1306): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80082) close(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000302ff2505a1a440000102030109023b000101022080090400090302060028052406000005240009000d240f01fcffff7f01000100000000000000bc010703090503022000040306"], 0x0) r0 = getpid() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x40000000c8243, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7ff}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) gettid() 4.052016587s ago: executing program 4 (id=1307): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002280)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f00000007c0)=""/84, 0x54}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000840)=""/185, 0xb9}, {&(0x7f0000001a00)=""/224, 0xe0}, {&(0x7f0000000240)}], 0x6, &(0x7f0000001b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001c00), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001c80)=""/247, 0xf7}, {&(0x7f0000001d80)=""/67, 0x43}, {&(0x7f0000001e00)=""/131, 0x83}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000001ec0)=""/128, 0x80}, {&(0x7f0000001f40)=""/176, 0xb0}, {&(0x7f0000002000)=""/193, 0xc1}, {&(0x7f0000000540)=""/10, 0xa}], 0x9, &(0x7f0000002340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}], 0x2, 0x2002, &(0x7f0000002300)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_pidfd_open(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002100)=@newtaction={0x78, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x64, 0x1, [@m_skbedit={0x60, 0x9, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x10}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x6, 0x10000000, 0x4, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x46, 0x0, &(0x7f0000000140)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) write(r1, &(0x7f0000000300)="b66db8019d316f92ec172c78ab61aa9520bf63966ca80d0dd5485921a514940f8aef7ce7da158ff24a5822ea6d3880f37c3ea440b5cb0931f217f14ec03057077c0a808eda409137183dc5c445ba61f66aaf39ee30dfd291dec5a6177dfd7ce5ab02a028aba0b4bac3edcb77c6a1512a632018d6a952", 0x76) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0xffff) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x88480, 0xcd) fsetxattr$security_ima(r7, &(0x7f0000000100), &(0x7f00000009c0)=ANY=[@ANYBLOB="02da6d76e9ae903edbcd0f95396663e1d9464399"], 0x10, 0x0) 3.120360518s ago: executing program 4 (id=1308): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) setxattr$security_ima(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="d45badb4b138a312014330026afc5336fc6460ed7c5f7bd494034e0c3258c80a1ecbd987477a9a6c456ec88666fe23f795438223c92f0137cfd10b66052c7b2a221a482de745150c4561eb9da61c06afb725b3fbe6d71c356a99b421189cb7520b222a9e4cb53901e2f461aec9e0448f335505d254a6cba09ae77189eff3c9be455c0bab9336d607ed50cdc081f636695c6fe755054d0ecc4461619c6f97880cf63a47bbde8083d97072406a680106b62044f5637b39855af4b9ec24596896c1a4edd05ca5fdf2307fdfa6ef7f8b011cdad7fc97190eb176e2ca489985a787be715d5df5bb475d005eabf96a08"], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000024) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) 2.869779804s ago: executing program 1 (id=1309): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x60}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x15}, 0x80) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @initdev}, &(0x7f00000000c0)=0xc) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000200)={0x6, 0x30, 0x3, 0xfffffff7, 0x3}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) close(0xffffffffffffffff) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid(0x1, r2, 0x0, 0x80000000, &(0x7f0000000300)) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getnexthop={0x50, 0x6a, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r1}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x200480c0}, 0x40000) 2.858457632s ago: executing program 4 (id=1310): r0 = getpgrp(0x0) socket$key(0xf, 0x3, 0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x400, 0x80040100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x200c1) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCCONS(r2, 0x541d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = semget$private(0x0, 0x5, 0x0) semop(r4, &(0x7f0000000180)=[{0x3, 0x44cf, 0x800}], 0x1f4) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_LINK_NETNSID={0x8, 0xa, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) 1.65220352s ago: executing program 1 (id=1311): pipe2$watch_queue(&(0x7f0000000180), 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x4, 0x9, 0xd45e, 0x2, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x7, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0x61}, @exit]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x3, 0x67) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x40, &(0x7f0000000400)=0x804, 0x4) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 933.158544ms ago: executing program 4 (id=1312): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010102ae299820fc0d0100ac240102030109022b0001fffa10170904510302ffffff01090507100800060808070593"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x4d}}, {0x5c, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0]}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xf7, &(0x7f0000000280)=@generic={0x7, 0x2, 0xef, "da0a313e", "5366b0a51f0afcdb0a1dbd9802dd3b8baa602e64b940cf16982c2e7d9bb8e6819f4b927e8668dd94192c1f9daf025c78ec90eae29c0accbc2556772cd6733cec56d6b35076ae3c6f5a8abce88b38fa477383a4a3d34e77a2f7bec8a995852883555243084f06a55c808153da58cc1a9f1d6e1ed364f41cea340a2ffd1b32cf6c5fa90ef7e3aa5f9ee7631e57a3779d632763097b09a47770fbd3c9792100b8dffb4f5b35a39055b01168163310f780abf462772beac5569052742a68441bdb82aefc69ad29b1732d86f1814a8f6ab09c171d4cdefcdce52f0a708b2d080cead99d6d02efc08c823b7da72430fee965"}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 0s ago: executing program 5 (id=1313): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) (async) migrate_pages(r1, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) (async) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) (async, rerun: 64) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x8c2) (rerun: 64) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000040)) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) (async) r5 = getpid() r6 = syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async, rerun: 32) r7 = syz_usb_connect(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2], 0x0) (rerun: 32) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000004c0)={0x0, 0x15, 0x31, "020000009c7e06afcf4cb56ab67501135524ab175b2d024de5bf2f6826c9e7fb58670fc1de861f3c1f7c1b1c921788586c"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x1, 0xa0}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) syz_usb_control_io$printer(r7, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000480)=0x7) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) write$cgroup_pid(r4, &(0x7f0000000180)=r5, 0x12) (async) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000002ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0x12, 0x60a, 0x1f8, 0x202, 0x300, 0x2e8, 0x2e8, 0x300, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, [0x4000000], [0x4000000, 0x0, 0xff000000], 'veth1_to_bond\x00', 'xfrm0\x00', {}, {}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1b0, 0x1f8, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@empty, [0x0, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@remote, [0x0, 0xffffffff, 0xff000000, 0xffffffff], @ipv6=@remote, [0x0, 0xffffff00, 0xff, 0xff000000], @ipv4=@multicast2, [0xff, 0x0, 0xffffffff, 0xff000000], 0x8, 0x3561, 0x3a, 0x4e23, 0x4e23, 0x4e20, 0x4e22, 0x400, 0x40}, 0x300, 0x6}}, @common=@dst={{0x48}, {0x101, 0x4, 0x1, [0x0, 0x2, 0x673, 0x7, 0x800, 0x7, 0xf, 0x1, 0x4, 0x3, 0xa4b, 0x1, 0x4, 0x80, 0x80, 0x80]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x12e, 0x8, 0x4, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0xffff5664, 0x0, 0x0, 0x0, 0x800}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000", @ANYRES8=r0], 0xc) kernel console output (not intermixed with test programs): [ 416.993861][ T9621] RAX: ffffffffffffffda RBX: 00007fdc00015fa0 RCX: 00007fdbffd9c629 [ 416.993872][ T9621] RDX: 0000200000000340 RSI: 0000000080e85411 RDI: 0000000000000003 [ 416.993882][ T9621] RBP: 00007fdc00c8a090 R08: 0000000000000000 R09: 0000000000000000 [ 416.993892][ T9621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.993902][ T9621] R13: 00007fdc00016038 R14: 00007fdc00015fa0 R15: 00007ffe8e091808 [ 416.993927][ T9621] [ 417.006831][ T9623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.488776][ T5894] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 417.750540][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 417.770540][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 417.785578][ T5894] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 417.794905][ T792] usb 6-1: USB disconnect, device number 10 [ 417.801527][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.825066][ T5894] usb 5-1: Product: syz [ 417.829347][ T5894] usb 5-1: Manufacturer: syz [ 417.834173][ T5894] usb 5-1: SerialNumber: syz [ 417.930843][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 417.968872][ T10] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 417.979473][ T10] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 417.991419][ T5912] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 418.000485][ T10] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.012466][ T10] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 418.040390][ T10] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 418.049625][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.058001][ T10] usb 4-1: Product: syz [ 418.062952][ T10] usb 4-1: Manufacturer: syz [ 418.067684][ T10] usb 4-1: SerialNumber: syz [ 418.086739][ T5894] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 418.091545][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 418.105822][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input62 [ 418.110328][ T5894] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 418.165923][ T5894] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 418.174890][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 418.186294][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.190355][ T5894] usb 5-1: media controller created [ 418.201799][ T5912] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 418.233519][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.250630][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.298513][ T5912] usb 2-1: config 0 descriptor?? [ 418.320238][ T10] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 418.328809][ T10] (id 0x00) [ 418.440712][ T10] rc_core: IR keymap rc-imon-pad not found [ 418.454548][ T10] Registered IR keymap rc-empty [ 418.462399][ T10] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 418.473380][ T9635] CUSE: info not properly terminated [ 418.473393][ T10] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 418.513660][ T5894] zl10353_read_register: readreg error (reg=127, ret==-32) [ 418.530697][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 418.548144][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input63 [ 418.569133][ T10] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:37> initialized [ 418.640173][ T5894] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 418.688435][ T5894] usb 5-1: USB disconnect, device number 40 [ 418.770876][ T10] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 418.940756][ T9637] fuse: Bad value for 'fd' [ 418.948974][ T5878] usb 4-1: USB disconnect, device number 37 [ 418.958630][ T9626] imon:send_packet: packet tx failed (-71) [ 418.971070][ T10] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 418.991366][ T10] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 418.999611][ T10] usb 6-1: Product: syz [ 419.004411][ T9626] imon:vfd_write: send packet #0 failed [ 419.010093][ T10] usb 6-1: Manufacturer: syz [ 419.016583][ T10] usb 6-1: SerialNumber: syz [ 419.054364][ T10] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 419.066663][ T5912] usbhid 2-1:0.0: can't add hid device: -71 [ 419.083803][ T5912] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 419.104416][ T5912] usb 2-1: USB disconnect, device number 42 [ 419.454708][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 419.465254][ T10] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 419.649718][ T5894] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 419.682374][ T5851] usb 6-1: USB disconnect, device number 11 [ 419.809549][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 419.821941][ T5894] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 419.839860][ T5894] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 419.850521][ T5894] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 419.861244][ T5894] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.872258][ T5894] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.886830][ T5894] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 419.896255][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.145334][ T5894] usb 1-1: GET_CAPABILITIES returned 0 [ 420.217482][ T5894] usbtmc 1-1:16.0: can't read capabilities [ 420.522597][ T9659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.622322][ T9659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.949948][ T9670] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 420.987032][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 420.995990][ T9650] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 421.010205][ T9650] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 421.020784][ T9650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.036151][ T9650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.039133][ T5894] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 421.053198][ T9674] FAULT_INJECTION: forcing a failure. [ 421.053198][ T9674] name fail_futex, interval 1, probability 0, space 0, times 1 [ 421.072292][ T10] usb 1-1: USB disconnect, device number 38 [ 421.102033][ T9676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.961'. [ 421.221522][ T9674] CPU: 1 UID: 0 PID: 9674 Comm: syz.5.962 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.221546][ T9674] Tainted: [L]=SOFTLOCKUP [ 421.221549][ T9674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 421.221556][ T9674] Call Trace: [ 421.221560][ T9674] [ 421.221564][ T9674] dump_stack_lvl+0x100/0x190 [ 421.221585][ T9674] should_fail_ex.cold+0x5/0xa [ 421.221599][ T9674] get_futex_key+0x295/0x1620 [ 421.221618][ T9674] ? __pfx_get_futex_key+0x10/0x10 [ 421.221637][ T9674] ? futex_private_hash+0x324/0x470 [ 421.221655][ T9674] futex_wait_multiple_setup+0x106/0x720 [ 421.221674][ T9674] futex_wait_multiple+0xe5/0x460 [ 421.221690][ T9674] ? __pfx_futex_wait_multiple+0x10/0x10 [ 421.221703][ T9674] ? __kmalloc_noprof+0x320/0x850 [ 421.221722][ T9674] __do_sys_futex_waitv+0x269/0x2c0 [ 421.221734][ T9674] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 421.221753][ T9674] do_syscall_64+0x106/0xf80 [ 421.221765][ T9674] ? clear_bhb_loop+0x40/0x90 [ 421.221779][ T9674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.221791][ T9674] RIP: 0033:0x7fc34559c629 [ 421.221800][ T9674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.221810][ T9674] RSP: 002b:00007fc346476028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 421.221821][ T9674] RAX: ffffffffffffffda RBX: 00007fc345815fa0 RCX: 00007fc34559c629 [ 421.221828][ T9674] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000180 [ 421.221835][ T9674] RBP: 00007fc346476090 R08: 0000000000000000 R09: 0000000000000000 [ 421.221841][ T9674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.221847][ T9674] R13: 00007fc345816038 R14: 00007fc345815fa0 R15: 00007ffe1f358e08 [ 421.221865][ T9674] [ 421.629073][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 421.639758][ T5894] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 421.650102][ T5894] usb 4-1: config 0 has no interface number 0 [ 421.666037][ T5894] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 421.687862][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.699696][ T5894] usb 4-1: Product: syz [ 421.704086][ T5894] usb 4-1: Manufacturer: syz [ 421.786299][ T5894] usb 4-1: SerialNumber: syz [ 421.908618][ T9681] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.916821][ T9681] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.985768][ T5894] usb 4-1: config 0 descriptor?? [ 422.095417][ T9688] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 422.131045][ T9681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.156305][ T9681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.197748][ T5894] radio-si470x 4-1:0.35: this is not a si470x device. [ 422.397869][ T5894] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 422.438552][ T49] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.447817][ T49] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.452557][ T5894] usb 4-1: USB disconnect, device number 38 [ 422.476413][ T49] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.505706][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.755637][ T9694] nftables ruleset with unbound set [ 422.760925][ T29] audit: type=1400 audit(1771550798.755:792): avc: denied { mount } for pid=9689 comm="syz.4.965" name="/" dev="ramfs" ino=26998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 422.864878][ T9695] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 422.884138][ T29] audit: type=1400 audit(1771550798.796:793): avc: denied { ioctl } for pid=9689 comm="syz.4.965" path="/dev/input/event2" dev="devtmpfs" ino=920 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 423.555980][ T29] audit: type=1400 audit(1771550799.546:794): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 423.904642][ T9708] mkiss: ax0: crc mode is auto. [ 424.107311][ T792] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 424.131889][ T9712] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 424.299098][ T792] usb 5-1: Using ep0 maxpacket: 16 [ 424.324289][ T792] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 424.333085][ T792] usb 5-1: config 0 has no interface number 0 [ 424.354444][ T792] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 424.363613][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.371929][ T792] usb 5-1: Product: syz [ 424.379466][ T792] usb 5-1: Manufacturer: syz [ 424.395218][ T29] audit: type=1400 audit(1771550800.376:795): avc: denied { connect } for pid=9692 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 424.421414][ T792] usb 5-1: SerialNumber: syz [ 424.446453][ T792] usb 5-1: config 0 descriptor?? [ 424.468303][ T792] hub 5-1:0.132: bad descriptor, ignoring hub [ 424.488050][ T792] hub 5-1:0.132: probe with driver hub failed with error -5 [ 424.512149][ T792] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input64 [ 424.534190][ T9717] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 424.722912][ T9722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.732545][ T9722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.085391][ T29] audit: type=1400 audit(1771550800.897:796): avc: denied { read } for pid=9720 comm="syz.5.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 425.204587][ T29] audit: type=1400 audit(1771550801.147:797): avc: denied { bind } for pid=9725 comm="syz.3.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 425.248715][ T29] audit: type=1400 audit(1771550801.147:798): avc: denied { connect } for pid=9725 comm="syz.3.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 426.172529][ T29] audit: type=1400 audit(1771550802.177:799): avc: denied { ioctl } for pid=9740 comm="syz.3.978" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 426.272976][ T29] audit: type=1400 audit(1771550802.277:800): avc: denied { append } for pid=9738 comm="syz.5.977" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 426.296306][ T29] audit: type=1400 audit(1771550802.287:801): avc: denied { map } for pid=9738 comm="syz.5.977" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 426.343898][ T9752] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 426.890469][ T9761] openvswitch: netlink: Message has 220 unknown bytes. [ 426.941254][ T9761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.705508][ T5912] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 427.780081][ T5915] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 427.876722][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.888416][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.900305][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 427.924588][ T5912] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 428.175490][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 428.181405][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.193633][ T5915] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 428.209818][ T5915] usb 1-1: config 0 has no interface number 0 [ 428.627297][ T5878] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 428.647368][ T5912] usb 6-1: config 0 descriptor?? [ 428.732955][ T5915] usb 1-1: config 0 interface 12 has no altsetting 0 [ 428.885208][ T5160] usb 5-1: reset high-speed USB device number 41 using dummy_hcd [ 428.924881][ T5915] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 428.935108][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.994740][ T5160] usb 5-1: device reset changed ep0 maxpacket size! [ 429.005438][ T5915] usb 1-1: Product: syz [ 429.009790][ T10] usb 5-1: USB disconnect, device number 41 [ 429.017423][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 429.023340][ T5915] usb 1-1: Manufacturer: syz [ 429.032575][ T5915] usb 1-1: SerialNumber: syz [ 429.039359][ T5878] usb 4-1: config 0 interface 0 has no altsetting 0 [ 429.049441][ T5878] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 429.058951][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.068322][ T5878] usb 4-1: Product: syz [ 429.073000][ T5915] usb 1-1: config 0 descriptor?? [ 429.079273][ T5878] usb 4-1: Manufacturer: syz [ 429.083964][ T5878] usb 4-1: SerialNumber: syz [ 429.097639][ T5878] usb 4-1: config 0 descriptor?? [ 429.113096][ T5878] gs_usb 4-1:0.0: Required endpoints not found [ 429.184803][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 429.310914][ T9777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.321317][ T9777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.345019][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 429.353281][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 429.362095][ T10] usb 5-1: config 0 has no interface number 0 [ 429.372410][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 429.381548][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.389701][ T10] usb 5-1: Product: syz [ 429.394572][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 430.350343][ T5912] usbhid 6-1:0.0: can't add hid device: -71 [ 430.365981][ T5912] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 430.373734][ T10] usb 5-1: Manufacturer: syz [ 430.378379][ T10] usb 5-1: SerialNumber: syz [ 430.379751][ T29] audit: type=1400 audit(1771550805.399:805): avc: denied { create } for pid=9765 comm="syz.5.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 430.390817][ T5912] usb 6-1: USB disconnect, device number 12 [ 430.414549][ T10] usb 5-1: config 0 descriptor?? [ 430.475426][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 430.534243][ T29] audit: type=1400 audit(1771550805.409:806): avc: denied { connect } for pid=9765 comm="syz.5.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 430.685123][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 430.706047][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 431.004537][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 11 [ 431.164528][ T29] audit: type=1400 audit(1771550807.170:807): avc: denied { watch_reads } for pid=9771 comm="syz.0.989" path="/202" dev="tmpfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 431.367490][ T84] wlan0: Trigger new scan to find an IBSS to join [ 431.652868][ T29] audit: type=1400 audit(1771550807.650:808): avc: denied { create } for pid=9803 comm="syz.5.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 431.862635][ T29] audit: type=1400 audit(1771550807.860:809): avc: denied { read write } for pid=9808 comm="syz.1.998" name="sg0" dev="devtmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 431.888527][ T29] audit: type=1400 audit(1771550807.860:810): avc: denied { open } for pid=9808 comm="syz.1.998" path="/dev/sg0" dev="devtmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 432.501375][ T5894] usb 4-1: USB disconnect, device number 39 [ 432.602217][ T29] audit: type=1400 audit(1771550808.600:811): avc: denied { open } for pid=9815 comm="syz.1.999" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 432.608717][ T5915] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 432.635196][ T5915] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 432.647108][ T29] audit: type=1400 audit(1771550808.640:812): avc: denied { ioctl } for pid=9815 comm="syz.1.999" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 432.660603][ T5915] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 432.711095][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 432.723771][ T10] usb 5-1: USB disconnect, device number 42 [ 432.750733][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 432.772087][ T5915] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 432.924312][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 433.417625][ T10] quatech2 5-1:0.51: device disconnected [ 433.423783][ T5915] usb 1-1: USB disconnect, device number 39 [ 433.462632][ T5912] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 433.535485][ T29] audit: type=1400 audit(1771550809.531:813): avc: denied { write } for pid=9833 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 433.580994][ T29] audit: type=1400 audit(1771550809.541:814): avc: denied { ioctl } for pid=9833 comm="syz.3.1005" path="/dev/sg0" dev="devtmpfs" ino=800 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 433.615704][ T5912] usb 6-1: device descriptor read/64, error -71 [ 433.942555][ T5912] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 434.202481][ T5912] usb 6-1: device descriptor read/64, error -71 [ 434.405153][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.412304][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.420029][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 434.426071][ T5912] usb usb6-port1: attempt power cycle [ 434.518285][ T9857] binder: BINDER_SET_CONTEXT_MGR already set [ 434.542109][ T9857] binder: 9856:9857 ioctl 4018620d 200000004a80 returned -16 [ 434.889324][ T5912] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 434.983094][ T5912] usb 6-1: device descriptor read/8, error -71 [ 435.381832][ T152] wlan0: Trigger new scan to find an IBSS to join [ 435.419308][ T5912] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 435.621595][ T5912] usb 6-1: device descriptor read/8, error -71 [ 435.721734][ T5915] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 435.741832][ T5912] usb usb6-port1: unable to enumerate USB device [ 435.770015][ T29] audit: type=1400 audit(1771550811.772:815): avc: denied { getopt } for pid=9862 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 435.883118][ T9884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44172 sclass=netlink_route_socket pid=9884 comm=syz.5.1019 [ 436.241248][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 436.247744][ T5915] usb 5-1: config 222 has an invalid interface number: 31 but max is 0 [ 436.280815][ T5915] usb 5-1: config 222 has no interface number 0 [ 436.306724][ T5915] usb 5-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 436.349282][ T5915] usb 5-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 436.379042][ T5915] usb 5-1: config 222 interface 31 has no altsetting 0 [ 436.412294][ T5915] usb 5-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 436.431257][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.445692][ T5915] usb 5-1: Product: syz [ 436.450856][ T5915] usb 5-1: Manufacturer: syz [ 436.457049][ T5915] usb 5-1: SerialNumber: syz [ 436.483134][ T29] audit: type=1400 audit(1771550812.472:816): avc: denied { bind } for pid=9862 comm="syz.0.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 436.503880][ T9873] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 436.586170][ T29] audit: type=1400 audit(1771550812.472:817): avc: denied { name_bind } for pid=9862 comm="syz.0.1013" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 436.636219][ T29] audit: type=1400 audit(1771550812.472:818): avc: denied { node_bind } for pid=9862 comm="syz.0.1013" saddr=ff01::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 436.681989][ T29] audit: type=1400 audit(1771550812.592:819): avc: denied { execute } for pid=9891 comm="syz.3.1023" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 436.711014][ T5894] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 436.731027][ T29] audit: type=1400 audit(1771550812.692:820): avc: denied { create } for pid=9891 comm="syz.3.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 436.787264][ T29] audit: type=1400 audit(1771550812.692:821): avc: denied { ioctl } for pid=9891 comm="syz.3.1023" path="socket:[28377]" dev="sockfs" ino=28377 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 436.789494][ T9873] binder_alloc: 9869: binder_alloc_buf size 8 failed, no address space [ 436.838564][ T9873] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 437.026883][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 437.128012][ T5894] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 437.137499][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.145744][ T5894] usb 2-1: Product: syz [ 437.149969][ T5894] usb 2-1: Manufacturer: syz [ 437.594244][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.595367][ T5915] ldusb 5-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 437.618288][ T29] audit: type=1400 audit(1771550813.623:822): avc: denied { write } for pid=9895 comm="syz.5.1025" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 437.644613][ T5894] usb 2-1: SerialNumber: syz [ 437.645016][ T9900] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1026'. [ 437.650304][ T29] audit: type=1400 audit(1771550813.653:823): avc: denied { ioctl } for pid=9899 comm="syz.3.1026" path="socket:[28392]" dev="sockfs" ino=28392 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 437.678848][ T5915] usb 5-1: USB disconnect, device number 43 [ 437.685899][ T5894] r8152-cfgselector 2-1: Unknown version 0x0000 [ 437.695459][ T5894] r8152-cfgselector 2-1: config 0 descriptor?? [ 437.745262][ T5915] ldusb 5-1:222.31: LD USB Device #0 now disconnected [ 437.895222][ T9906] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 437.964799][ T29] audit: type=1400 audit(1771550813.973:824): avc: denied { setopt } for pid=9903 comm="syz.3.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 437.991494][ T9905] netlink: 'syz.3.1028': attribute type 7 has an invalid length. [ 438.038996][ T9905] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 438.050601][ T152] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.081614][ T152] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.103555][ T152] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.132465][ T5894] r8152-cfgselector 2-1: Unknown version 0x0000 [ 438.146719][ T152] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.159929][ T5894] r8152-cfgselector 2-1: bad CDC descriptors [ 438.174474][ T5894] r8152-cfgselector 2-1: USB disconnect, device number 43 [ 438.490226][ T5894] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 438.603510][ T9916] netlink: 'syz.0.1032': attribute type 11 has an invalid length. [ 438.650168][ T9916] netlink: 'syz.0.1032': attribute type 4 has an invalid length. [ 438.670008][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 438.670034][ T9916] netlink: 'syz.0.1032': attribute type 5 has an invalid length. [ 438.683077][ T9916] netlink: 'syz.0.1032': attribute type 6 has an invalid length. [ 438.700275][ T9916] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.1032'. [ 438.700467][ T5894] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 438.729979][ T5894] usb 4-1: config 0 has no interface number 0 [ 438.742588][ T5894] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 438.753336][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.768690][ T5894] usb 4-1: Product: syz [ 438.776349][ T5894] usb 4-1: Manufacturer: syz [ 438.800247][ T5894] usb 4-1: SerialNumber: syz [ 438.811323][ T5894] usb 4-1: config 0 descriptor?? [ 438.841639][ T5894] hub 4-1:0.132: bad descriptor, ignoring hub [ 438.847747][ T5894] hub 4-1:0.132: probe with driver hub failed with error -5 [ 438.892706][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input65 [ 439.429593][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 439.437610][ C0] lec:lec_tx_timeout: lec0 [ 439.518459][ T5912] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 439.525376][ T9927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.541260][ T9927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.869638][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 439.910421][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 439.933108][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 440.075747][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 440.092283][ T9936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.116000][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 440.174650][ T5912] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 440.184712][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 440.196924][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 440.206632][ T5912] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 440.218188][ T5912] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 440.227343][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.307667][ T5912] usb 1-1: Product: syz [ 440.324476][ T5912] usb 1-1: Manufacturer: syz [ 440.333966][ T5912] usb 1-1: SerialNumber: syz [ 440.448730][ T9941] netlink: 'syz.5.1037': attribute type 21 has an invalid length. [ 440.456583][ T9941] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1037'. [ 440.465677][ T9941] netlink: 'syz.5.1037': attribute type 4 has an invalid length. [ 440.473408][ T9941] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1037'. [ 440.488174][ T5912] usb 1-1: config 0 descriptor?? [ 440.507126][ T9922] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 440.533149][ T9942] netlink: 'syz.5.1037': attribute type 1 has an invalid length. [ 440.535744][ T5912] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 440.541526][ T9942] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1037'. [ 440.764988][ T5912] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 440.789805][ T5912] usb 1-1: USB disconnect, device number 40 [ 440.813860][ T7084] udevd[7084]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.034204][ T9953] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 441.207249][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 441.207287][ T29] audit: type=1400 audit(1771550817.215:828): avc: denied { append } for pid=9955 comm="syz.3.1041" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 441.501239][ T29] audit: type=1400 audit(1771550817.515:829): avc: denied { name_bind } for pid=9954 comm="syz.5.1040" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 441.512507][ T29] audit: type=1400 audit(1771550817.525:830): avc: denied { map } for pid=9954 comm="syz.5.1040" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 442.070945][ T9975] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 442.164722][ T9978] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 443.047844][ T5912] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 443.227751][ T5912] usb 2-1: device descriptor read/64, error -71 [ 443.337743][ T5160] usb 4-1: reset high-speed USB device number 40 using dummy_hcd [ 443.354460][ T5160] usb 4-1: device reset changed ep0 maxpacket size! [ 443.377060][ T10] usb 4-1: USB disconnect, device number 40 [ 443.543744][ T5912] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 443.607807][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 443.697624][ T5912] usb 2-1: device descriptor read/64, error -71 [ 443.777461][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 443.788618][ T10] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 443.806190][ T10] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 443.821150][ T5912] usb usb2-port1: attempt power cycle [ 443.836858][ T10] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 443.869116][ T10] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 443.966546][ T5894] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 444.050547][ T10] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 444.060466][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.068538][ T10] usb 4-1: Product: syz [ 444.072752][ T10] usb 4-1: Manufacturer: syz [ 444.080022][ T10] usb 4-1: SerialNumber: syz [ 444.099141][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 444.108532][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input66 [ 444.167315][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 444.184037][ T5894] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 444.205731][ T5894] usb 5-1: config 0 has no interface number 0 [ 444.215842][ T5894] usb 5-1: config 0 interface 184 has no altsetting 0 [ 444.224840][ T5894] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 444.234401][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.242759][ T5894] usb 5-1: Product: syz [ 444.249531][ T29] audit: type=1400 audit(1771550820.266:831): avc: denied { setopt } for pid=10010 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 444.257259][ T5894] usb 5-1: Manufacturer: syz [ 444.281949][ T5894] usb 5-1: SerialNumber: syz [ 444.297412][ T5912] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 444.305110][ T29] audit: type=1400 audit(1771550820.306:832): avc: denied { bind } for pid=10010 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 444.328352][ T5894] usb 5-1: config 0 descriptor?? [ 444.348802][ T5912] usb 2-1: device descriptor read/8, error -71 [ 444.357224][T10012] input: syz0 as /devices/virtual/input/input68 [ 444.357242][ T10] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 444.387179][ T10] (id 0x00) [ 444.477293][ T10] rc_core: IR keymap rc-imon-pad not found [ 444.483192][ T10] Registered IR keymap rc-empty [ 444.488856][ T10] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 444.499330][ T10] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 444.565547][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 444.628379][ T5912] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 444.665690][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input67 [ 444.677781][ T5912] usb 2-1: device descriptor read/8, error -71 [ 444.696772][ T10] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:41> initialized [ 444.787321][ T5912] usb usb2-port1: unable to enumerate USB device [ 444.910258][T10023] loop9: detected capacity change from 0 to 7 [ 444.920226][T10023] Dev loop9: unable to read RDB block 7 [ 444.926260][T10023] loop9: AHDI p1 p2 p3 [ 444.935760][T10023] loop9: partition table partially beyond EOD, truncated [ 444.949862][T10027] fuse: Bad value for 'fd' [ 444.961693][ T5912] usb 4-1: USB disconnect, device number 41 [ 444.968336][ T5894] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 444.969279][ T9995] imon:send_packet: packet tx failed (-71) [ 444.987585][T10023] loop9: p1 start 1601398130 is beyond EOD, truncated [ 444.998494][T10023] loop9: p2 start 1702059890 is beyond EOD, truncated [ 445.002194][ T5894] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 445.016967][ T9995] imon:vfd_write: send packet #0 failed [ 445.186764][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 445.338726][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 445.347446][ T10] usb 6-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 445.358579][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 445.367977][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 445.378961][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 445.391361][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 445.400514][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 445.408538][ T10] usb 6-1: Product: syz [ 445.412688][ T10] usb 6-1: Manufacturer: syz [ 445.421674][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 445.428001][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 445.434314][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 445.440285][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 445.632836][ T29] audit: type=1400 audit(1771550821.647:833): avc: denied { read write } for pid=10025 comm="syz.5.1061" name="cdc-wdm0" dev="devtmpfs" ino=3705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 445.723941][ T29] audit: type=1400 audit(1771550821.647:834): avc: denied { open } for pid=10025 comm="syz.5.1061" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 445.839104][ T5912] usb 6-1: USB disconnect, device number 17 [ 445.871221][ T5894] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 445.882433][ T5894] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 445.892460][ T5894] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 445.903447][ T5894] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 445.966593][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 446.137550][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.146357][ T10] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 446.160959][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.169993][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 446.181593][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 446.194252][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 446.247567][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.256862][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.264881][ T10] usb 2-1: Product: syz [ 446.271930][ T10] usb 2-1: Manufacturer: syz [ 446.283652][T10035] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 446.303389][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 446.316294][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 446.323548][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 446.329529][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 446.572117][T10053] mkiss: ax0: crc mode is auto. [ 446.930562][ T29] audit: type=1400 audit(1771550822.717:835): avc: denied { setopt } for pid=10034 comm="syz.1.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 447.346250][ T5912] usb 2-1: USB disconnect, device number 48 [ 447.401124][ T29] audit: type=1400 audit(1771550822.717:836): avc: denied { watch } for pid=10034 comm="syz.1.1064" path="/201/file0" dev="tmpfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 447.428496][ T5894] usb 5-1: USB disconnect, device number 44 [ 447.590243][ T29] audit: type=1400 audit(1771550822.717:837): avc: denied { watch_sb watch_reads } for pid=10034 comm="syz.1.1064" path="/201/file0" dev="tmpfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 448.349714][ T29] audit: type=1400 audit(1771550824.368:838): avc: denied { read } for pid=10074 comm="syz.0.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 448.754208][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'. [ 449.571170][ T29] audit: type=1400 audit(1771550825.589:839): avc: denied { watch watch_reads } for pid=10065 comm="syz.4.1072" path="/proc/779/net/dev_mcast" dev="proc" ino=4026532837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 449.691869][ T29] audit: type=1400 audit(1771550825.709:840): avc: denied { getopt } for pid=10090 comm="syz.0.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 451.534885][ T29] audit: type=1400 audit(1771550827.540:841): avc: denied { block_suspend } for pid=10116 comm="syz.3.1085" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 451.816146][ T29] audit: type=1400 audit(1771550827.830:842): avc: denied { read } for pid=10125 comm="syz.1.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 451.843456][ T5817] Bluetooth: hci5: command 0x0406 tx timeout [ 451.874598][T10127] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 453.052940][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 453.103055][ T5851] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 453.247265][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 453.265108][ T24] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 453.275044][ T5851] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 453.284208][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.293227][ T24] usb 6-1: config 0 has no interface number 0 [ 453.299778][ T5851] usb 2-1: Product: syz [ 453.309459][ T5851] usb 2-1: Manufacturer: syz [ 453.316131][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 453.332769][ T5851] usb 2-1: SerialNumber: syz [ 453.338852][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.347939][ T5851] usb 2-1: config 0 descriptor?? [ 453.363397][ T24] usb 6-1: Product: syz [ 453.368587][ T5851] hub 2-1:0.0: bad descriptor, ignoring hub [ 453.382667][ T24] usb 6-1: Manufacturer: syz [ 453.387339][ T5851] hub 2-1:0.0: probe with driver hub failed with error -5 [ 453.394761][ T24] usb 6-1: SerialNumber: syz [ 453.414110][ T24] usb 6-1: config 0 descriptor?? [ 453.424331][ T24] hub 6-1:0.132: bad descriptor, ignoring hub [ 453.440610][ T24] hub 6-1:0.132: probe with driver hub failed with error -5 [ 453.465283][ T24] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input69 [ 453.572118][ T5851] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 453.615866][ T5851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 453.636820][ T5851] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 453.658272][ T5851] usb 2-1: media controller created [ 453.753355][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.787347][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 453.854629][T10154] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1095'. [ 453.858764][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.889153][T10154] usb usb8: usbfs: process 10154 (syz.0.1095) did not claim interface 0 before use [ 454.232252][ T5912] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 454.315680][ T29] audit: type=1400 audit(1771550830.331:843): avc: denied { execute } for pid=10149 comm="syz.0.1095" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 454.343121][ T29] audit: type=1400 audit(1771550830.351:844): avc: denied { execute_no_trans } for pid=10149 comm="syz.0.1095" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 454.444462][ T5851] DVB: Unable to find symbol dib7000p_attach() [ 454.451016][ T5851] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 454.572075][ T5851] rc_core: IR keymap rc-dib0700-rc5 not found [ 454.588513][ T5912] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 454.596801][ T5912] usb 5-1: config 0 has no interface number 0 [ 454.612115][ T5912] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 454.628944][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.647510][ T5912] usb 5-1: Product: syz [ 454.657348][ T5851] Registered IR keymap rc-empty [ 454.657653][ T5912] usb 5-1: Manufacturer: syz [ 454.681285][ T5912] usb 5-1: SerialNumber: syz [ 454.693826][ T5912] usb 5-1: config 0 descriptor?? [ 454.732596][ T29] audit: type=1400 audit(1771550830.751:845): avc: denied { ioctl } for pid=10163 comm="syz.3.1096" path="socket:[28910]" dev="sockfs" ino=28910 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 454.855303][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 455.167047][ T5912] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 455.188397][ T29] audit: type=1400 audit(1771550830.771:846): avc: denied { connect } for pid=10163 comm="syz.3.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 455.289049][ T29] audit: type=1400 audit(1771550830.781:847): avc: denied { setopt } for pid=10163 comm="syz.3.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 456.621661][ T5912] usb 6-1: USB disconnect, device number 18 [ 456.995955][ T5912] usb 5-1: USB disconnect, device number 45 [ 457.073812][T10181] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 457.370767][ T5915] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 457.380722][ T5912] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 457.520601][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 457.528335][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 457.540064][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 457.545277][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 457.559690][ T5915] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 457.569158][ T5915] usb 4-1: New USB device strings: Mfr=140, Product=215, SerialNumber=3 [ 457.578003][ T5915] usb 4-1: Product: syz [ 457.583617][ T5912] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 457.594572][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.603451][ T5915] usb 4-1: Manufacturer: syz [ 457.608409][ T5915] usb 4-1: SerialNumber: syz [ 457.613224][ T5912] usb 5-1: Product: syz [ 457.618225][ T5912] usb 5-1: Manufacturer: syz [ 457.624756][ T5915] usb 4-1: config 0 descriptor?? [ 457.629854][ T5912] usb 5-1: SerialNumber: syz [ 457.664455][ T5915] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input71 [ 457.681042][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.689042][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.696541][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.703903][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.711284][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.718571][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.725852][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.733125][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.740417][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.747700][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.750364][ T6108] lec:lec_start_xmit: lec0:No lecd attached [ 457.755811][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.768549][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.780474][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.787793][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.800451][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.807770][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.820445][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.827757][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.835130][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.850426][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.857741][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.870550][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.877872][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.888622][ T5160] usb 4-1: control msg error: -71 [ 457.889060][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.901038][ C0] usb 4-1: pegasus_irq - usb_submit_urb failed with result -1 [ 457.911932][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.919240][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.927897][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.936190][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.943878][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.951168][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.958439][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.965770][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.973042][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.980344][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.987619][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 457.995316][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.002590][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.009859][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.017132][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.024402][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.032265][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.039538][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.047152][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.055136][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.062532][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.069808][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.078090][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.082496][ T5160] usb 4-1: control msg error: -71 [ 458.087232][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.097731][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.105055][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.112360][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.115907][ T5912] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 458.119643][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.136027][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.144040][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.151661][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.159097][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.166253][ C1] usb 4-1: pegasus_irq - usb_submit_urb failed with result -1 [ 458.193995][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.201927][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.209231][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.216527][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.224133][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.232563][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.239877][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.247203][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.254502][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.261813][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.269099][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.276385][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.283676][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.290970][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.298292][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.305605][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.312876][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.320190][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.327472][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.334765][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.342063][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.349346][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.356632][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.363911][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.372114][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.372172][ T5160] usb 4-1: control msg error: -71 [ 458.379376][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.400193][ C0] usb 4-1: pegasus_irq - urb shutting down with status: -2 [ 458.408023][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 458.414184][ T5915] usb 4-1: USB disconnect, device number 42 [ 458.415145][ C1] usb 4-1: pegasus_irq - usb_submit_urb failed with result -19 [ 458.428972][ T5160] usb 4-1: control msg error: -71 [ 458.496985][ T5912] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 458.509740][ T5912] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 458.520256][ T5912] usb 5-1: media controller created [ 458.539783][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.780706][ T5912] zl10353_read_register: readreg error (reg=127, ret==-110) [ 458.882188][ T5912] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 458.890737][ T5851] dvb-usb: could not initialize remote control. [ 458.897500][ T5851] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 458.964874][ T5912] usb 5-1: USB disconnect, device number 46 [ 458.966164][ T5851] usb 2-1: USB disconnect, device number 49 [ 459.116895][T10212] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 459.361339][ T5851] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 459.468025][ T29] audit: type=1400 audit(1771550835.474:848): avc: denied { ioctl } for pid=10213 comm="syz.1.1109" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 460.831182][ T29] audit: type=1400 audit(1771550836.855:849): avc: denied { read } for pid=10223 comm="syz.3.1113" path="socket:[30053]" dev="sockfs" ino=30053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 460.960847][ T29] audit: type=1400 audit(1771550836.985:850): avc: denied { shutdown } for pid=10235 comm="syz.4.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 461.039002][T10238] FAULT_INJECTION: forcing a failure. [ 461.039002][T10238] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 461.052384][T10238] CPU: 0 UID: 0 PID: 10238 Comm: syz.4.1117 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.052411][T10238] Tainted: [L]=SOFTLOCKUP [ 461.052416][T10238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.052426][T10238] Call Trace: [ 461.052432][T10238] [ 461.052438][T10238] dump_stack_lvl+0x100/0x190 [ 461.052477][T10238] should_fail_ex.cold+0x5/0xa [ 461.052495][T10238] ? prepare_alloc_pages+0x16d/0x5f0 [ 461.052516][T10238] should_fail_alloc_page+0xeb/0x140 [ 461.052545][T10238] prepare_alloc_pages+0x1f0/0x5f0 [ 461.052566][T10238] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 461.052590][T10238] ? is_bpf_text_address+0x8a/0x1a0 [ 461.052615][T10238] ? bpf_ksym_find+0x128/0x1c0 [ 461.052641][T10238] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 461.052665][T10238] ? is_bpf_text_address+0x94/0x1a0 [ 461.052690][T10238] ? kernel_text_address+0x8d/0x100 [ 461.052713][T10238] ? __kernel_text_address+0xd/0x30 [ 461.052731][T10238] ? unwind_get_return_address+0x59/0xa0 [ 461.052756][T10238] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 461.052780][T10238] ? register_lock_class+0x40/0x560 [ 461.052819][T10238] ? __lock_acquire+0x4a5/0x2630 [ 461.052848][T10238] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 461.052874][T10238] ? policy_nodemask+0xed/0x4f0 [ 461.052902][T10238] alloc_pages_mpol+0x1fb/0x550 [ 461.052931][T10238] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 461.052964][T10238] alloc_pages_noprof+0x131/0x390 [ 461.052993][T10238] get_free_pages_noprof+0x10/0xb0 [ 461.053019][T10238] __pollwait+0x29a/0x470 [ 461.053046][T10238] ? __pfx___pollwait+0x10/0x10 [ 461.053071][T10238] sg_poll+0xc7/0x400 [ 461.053091][T10238] ? __pfx_sg_poll+0x10/0x10 [ 461.053107][T10238] do_select+0xd54/0x1850 [ 461.053151][T10238] ? __pfx_do_select+0x10/0x10 [ 461.053179][T10238] ? __pfx___pollwait+0x10/0x10 [ 461.053207][T10238] ? __pfx_pollwake+0x10/0x10 [ 461.053234][T10238] ? __pfx_pollwake+0x10/0x10 [ 461.053261][T10238] ? __pfx_pollwake+0x10/0x10 [ 461.053288][T10238] ? __pfx_pollwake+0x10/0x10 [ 461.053315][T10238] ? __pfx_pollwake+0x10/0x10 [ 461.053342][T10238] ? __pfx_pollwake+0x10/0x10 [ 461.053369][T10238] ? __pfx_pollwake+0x10/0x10 [ 461.053396][T10238] ? __pfx_pollwake+0x10/0x10 [ 461.053423][T10238] ? __pfx_pollwake+0x10/0x10 [ 461.053454][T10238] ? find_held_lock+0x2b/0x80 [ 461.053475][T10238] ? __might_fault+0xc5/0x140 [ 461.053496][T10238] ? __might_fault+0xc5/0x140 [ 461.053527][T10238] ? core_sys_select+0x55b/0xbb0 [ 461.053551][T10238] core_sys_select+0x55b/0xbb0 [ 461.053583][T10238] ? __pfx_core_sys_select+0x10/0x10 [ 461.053607][T10238] ? find_held_lock+0x2b/0x80 [ 461.053627][T10238] ? get_pid_task+0xfc/0x250 [ 461.053676][T10238] ? __pfx_set_user_sigmask+0x10/0x10 [ 461.053694][T10238] ? __mutex_unlock_slowpath+0x15c/0x790 [ 461.053715][T10238] ? __fget_files+0x215/0x3d0 [ 461.053737][T10238] do_pselect.constprop.0+0x238/0x270 [ 461.053767][T10238] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 461.053798][T10238] ? ksys_write+0x1ac/0x250 [ 461.053826][T10238] __x64_sys_pselect6+0x149/0x1c0 [ 461.053857][T10238] do_syscall_64+0x106/0xf80 [ 461.053875][T10238] ? clear_bhb_loop+0x40/0x90 [ 461.053897][T10238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.053915][T10238] RIP: 0033:0x7fa27a39c629 [ 461.053930][T10238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.053946][T10238] RSP: 002b:00007fa2785d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 461.053963][T10238] RAX: ffffffffffffffda RBX: 00007fa27a616090 RCX: 00007fa27a39c629 [ 461.053974][T10238] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 461.053984][T10238] RBP: 00007fa2785d5090 R08: 0000000000000000 R09: 0000000000000000 [ 461.053994][T10238] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 461.054004][T10238] R13: 00007fa27a616128 R14: 00007fa27a616090 R15: 00007ffc6bb87d48 [ 461.054028][T10238] [ 461.808668][ T5851] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 461.859484][T10239] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 462.149088][ T5851] usb 1-1: Using ep0 maxpacket: 32 [ 462.160575][ T5851] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 462.168932][ T5851] usb 1-1: config 0 has no interface number 0 [ 462.640422][ T5851] usb 1-1: config 0 interface 230 has no altsetting 0 [ 462.649104][ T5915] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 462.665928][ T5851] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 462.675619][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.741229][ T5851] usb 1-1: Product: syz [ 462.837997][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 462.844695][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.865134][ T5915] usb 4-1: config 0 has no interfaces? [ 462.908055][ T5851] usb 1-1: Manufacturer: syz [ 462.912784][ T5851] usb 1-1: SerialNumber: syz [ 462.940818][ T5851] usb 1-1: config 0 descriptor?? [ 462.997047][ T5851] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 462.998515][ T5915] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 463.019885][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.028809][ T5915] usb 4-1: Product: syz [ 463.032973][ T5915] usb 4-1: Manufacturer: syz [ 463.037553][ T5915] usb 4-1: SerialNumber: syz [ 463.048175][ T5915] usb 4-1: config 0 descriptor?? [ 463.060558][ T5851] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 463.347640][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 463.355711][ C0] lec:lec_tx_timeout: lec0 [ 463.737492][ T5915] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 463.771387][ T29] audit: type=1400 audit(1771550839.796:851): avc: denied { watch } for pid=10262 comm="syz.4.1124" path=2F6D656D66643A3C5A323E4A3D09EBF8A7049FE1684F8ED7B5937D8DED014C6093CD5E3250202864656C6574656429 dev="tmpfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 463.898852][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.910212][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 463.940180][ T5915] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 463.954634][ T5915] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 463.977820][ T5915] usb 2-1: Manufacturer: syz [ 463.983841][ T5915] usb 2-1: config 0 descriptor?? [ 463.991880][ T5915] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 464.107342][ T5912] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 464.257307][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 464.269248][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.291141][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 464.313477][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 464.397552][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 464.407458][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.433586][T10274] bridge0: port 3(syz_tun) entered blocking state [ 464.440581][T10274] bridge0: port 3(syz_tun) entered disabled state [ 464.450235][ T5912] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 464.462659][ T29] audit: type=1400 audit(1771550840.416:852): avc: denied { create } for pid=10260 comm="syz.1.1123" name="#19" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 464.490783][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 464.505464][ T5912] usb 5-1: Product: syz [ 464.533431][T10274] syz_tun: entered allmulticast mode [ 464.545754][T10274] syz_tun: entered promiscuous mode [ 464.555600][ T29] audit: type=1400 audit(1771550840.426:853): avc: denied { link } for pid=10260 comm="syz.1.1123" name="#19" dev="tmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 464.555856][ T5912] usb 5-1: SerialNumber: syz [ 464.691979][ T5912] usb 5-1: config 0 descriptor?? [ 464.704580][ T5912] xbox_remote_probe: endpoint_in message size==0? [ 464.749471][ T29] audit: type=1400 audit(1771550840.446:854): avc: denied { rename } for pid=10260 comm="syz.1.1123" name="#1a" dev="tmpfs" ino=1177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 465.042668][ T5894] usb 4-1: USB disconnect, device number 43 [ 465.657568][ T5851] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 465.670727][ T5851] usb 1-1: USB disconnect, device number 41 [ 466.268646][ T29] audit: type=1400 audit(1771550842.297:855): avc: denied { setopt } for pid=10299 comm="syz.5.1132" lport=38046 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 466.503046][ T29] audit: type=1400 audit(1771550842.327:856): avc: denied { accept } for pid=10299 comm="syz.5.1132" lport=38046 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 466.758991][ T5915] usb 5-1: USB disconnect, device number 47 [ 466.978855][ T5851] usb 2-1: USB disconnect, device number 50 [ 467.046168][ T5912] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 467.205875][ T5912] usb 6-1: device descriptor read/64, error -71 [ 467.255820][ T5894] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 467.512003][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.577590][ T5894] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 467.609115][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.649849][ T5894] usb 4-1: Product: syz [ 467.659302][ T5894] usb 4-1: Manufacturer: syz [ 467.663942][ T5894] usb 4-1: SerialNumber: syz [ 467.676570][ T5894] usb 4-1: config 0 descriptor?? [ 467.687841][ T5894] asix 4-1:0.0: probe with driver asix failed with error -22 [ 467.763955][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 467.829533][ T5912] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 467.888559][ T29] audit: type=1400 audit(1771550843.918:857): avc: denied { execute } for pid=10311 comm="syz.3.1136" path="/dev/v4l-subdev5" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 467.915401][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 467.926031][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.938687][ T5878] usb 4-1: USB disconnect, device number 44 [ 467.947621][ T10] usb 5-1: config 0 has no interfaces? [ 467.956400][ T10] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 467.975431][ T5912] usb 6-1: device descriptor read/64, error -71 [ 467.993209][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.010739][ T10] usb 5-1: Product: syz [ 468.023713][ T10] usb 5-1: Manufacturer: syz [ 468.031099][ T10] usb 5-1: SerialNumber: syz [ 468.038272][ T10] usb 5-1: config 0 descriptor?? [ 468.187707][ T5912] usb usb6-port1: attempt power cycle [ 469.297926][ T29] audit: type=1400 audit(1771550845.329:858): avc: denied { create } for pid=10333 comm="syz.3.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 469.328058][ T5912] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 469.801812][ T5912] usb 6-1: device descriptor read/8, error -71 [ 470.451497][T10355] overlayfs: failed to resolve './file1': -2 [ 470.501986][ T5878] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 470.504169][ T5851] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 470.690224][ T5878] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 470.699174][ T5878] usb 1-1: config 0 has no interface number 0 [ 470.714290][ T5878] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 471.178393][ T84] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 471.210674][ T5851] usb 2-1: no configurations [ 471.235314][ T5851] usb 2-1: can't read configurations, error -22 [ 471.249489][ T5878] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 471.400455][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.439019][ T5851] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 471.462509][ T10] usb 5-1: USB disconnect, device number 48 [ 471.499373][ T5878] usb 1-1: Product: syz [ 471.511057][ T5878] usb 1-1: Manufacturer: syz [ 471.608256][ T5878] usb 1-1: SerialNumber: syz [ 472.366331][ T5851] usb 2-1: no configurations [ 472.371487][ T5851] usb 2-1: can't read configurations, error -22 [ 472.379243][ T5851] usb usb2-port1: attempt power cycle [ 472.601544][ T5878] usb 1-1: config 0 descriptor?? [ 472.611881][ T5878] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 473.272934][ T5851] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 473.378186][ T5851] usb 2-1: device descriptor read/8, error -71 [ 473.409472][ T24] usb 1-1: USB disconnect, device number 42 [ 473.442778][ T24] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 473.782704][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 473.842646][ T5851] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 473.885235][ T5851] usb 2-1: Using ep0 maxpacket: 16 [ 473.919360][ T5851] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 473.957634][ T5851] usb 2-1: config 0 has no interface number 0 [ 473.972849][ T5851] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 473.992510][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 474.001076][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.016973][ T5851] usb 2-1: Product: syz [ 474.021576][ T24] usb 5-1: config 0 has no interfaces? [ 474.028522][ T5851] usb 2-1: Manufacturer: syz [ 474.033604][ T24] usb 5-1: language id specifier not provided by device, defaulting to English [ 474.042563][ T5851] usb 2-1: SerialNumber: syz [ 474.048640][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 474.057998][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.066768][ T5851] usb 2-1: config 0 descriptor?? [ 474.071839][ T24] usb 5-1: Product: syz [ 474.076414][ T24] usb 5-1: Manufacturer: 띧埏趀긵䪇綡쟼镶쑗꟏釗倿酦◇購耫㱿闶瓌乊㸃똮톙◬ꂰ鸁틟덻鸡繱콅 [ 474.090853][ T5851] hub 2-1:0.132: bad descriptor, ignoring hub [ 474.097495][ T5851] hub 2-1:0.132: probe with driver hub failed with error -5 [ 474.104842][ T24] usb 5-1: SerialNumber: syz [ 474.111999][ T24] usb 5-1: config 0 descriptor?? [ 474.119391][ T5851] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input72 [ 474.334666][ T10] usb 5-1: USB disconnect, device number 49 [ 474.417253][ T5878] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 474.534829][T10397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.572467][T10397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.891939][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 474.899806][ T5878] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 474.921924][ T5878] usb 1-1: config 0 has no interface number 0 [ 474.928913][ T5878] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 474.943747][ T5878] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 474.964141][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.975637][ T5878] usb 1-1: Product: syz [ 474.979850][ T5878] usb 1-1: Manufacturer: syz [ 474.994542][ T5878] usb 1-1: SerialNumber: syz [ 475.042670][T10403] FAULT_INJECTION: forcing a failure. [ 475.042670][T10403] name failslab, interval 1, probability 0, space 0, times 0 [ 475.112276][ T29] audit: type=1400 audit(1771550851.062:859): avc: denied { write } for pid=10402 comm="syz.4.1163" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 475.151983][ T10] usb 2-1: USB disconnect, device number 54 [ 475.175419][ T5878] usb 1-1: config 0 descriptor?? [ 475.278237][T10391] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 475.292014][T10403] CPU: 0 UID: 0 PID: 10403 Comm: syz.4.1163 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.292046][T10403] Tainted: [L]=SOFTLOCKUP [ 475.292052][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 475.292062][T10403] Call Trace: [ 475.292068][T10403] [ 475.292075][T10403] dump_stack_lvl+0x100/0x190 [ 475.292110][T10403] should_fail_ex.cold+0x5/0xa [ 475.292131][T10403] ? tomoyo_encode2+0xfb/0x3c0 [ 475.292150][T10403] should_failslab+0xc2/0x120 [ 475.292176][T10403] __kmalloc_noprof+0xe0/0x850 [ 475.292198][T10403] ? d_absolute_path+0x136/0x1b0 [ 475.292225][T10403] tomoyo_encode2+0xfb/0x3c0 [ 475.292248][T10403] tomoyo_encode+0x29/0x50 [ 475.292266][T10403] tomoyo_realpath_from_path+0x18c/0x690 [ 475.292292][T10403] tomoyo_path_number_perm+0x23c/0x580 [ 475.292318][T10403] ? tomoyo_path_number_perm+0x22e/0x580 [ 475.292343][T10403] ? finish_task_switch.isra.0+0x1c4/0xb80 [ 475.292365][T10403] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 475.292417][T10403] ? find_held_lock+0x2b/0x80 [ 475.292436][T10403] ? __fget_files+0x215/0x3d0 [ 475.292450][T10403] ? hook_file_ioctl_common+0x146/0x410 [ 475.292476][T10403] ? __fget_files+0x21f/0x3d0 [ 475.292493][T10403] security_file_ioctl+0xd3/0x230 [ 475.292510][T10403] __x64_sys_ioctl+0xb7/0x210 [ 475.292533][T10403] do_syscall_64+0x106/0xf80 [ 475.292548][T10403] ? clear_bhb_loop+0x40/0x90 [ 475.292562][T10403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.292573][T10403] RIP: 0033:0x7fa27a39c629 [ 475.292583][T10403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.292594][T10403] RSP: 002b:00007fa2785f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.292605][T10403] RAX: ffffffffffffffda RBX: 00007fa27a615fa0 RCX: 00007fa27a39c629 [ 475.292612][T10403] RDX: 0000000000000000 RSI: 00000000400c4d19 RDI: 0000000000000004 [ 475.292618][T10403] RBP: 00007fa2785f6090 R08: 0000000000000000 R09: 0000000000000000 [ 475.292624][T10403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.292631][T10403] R13: 00007fa27a616038 R14: 00007fa27a615fa0 R15: 00007ffc6bb87d48 [ 475.292644][T10403] [ 475.292695][T10403] ERROR: Out of memory at tomoyo_realpath_from_path. [ 475.311760][ T29] audit: type=1400 audit(1771550851.062:860): avc: denied { open } for pid=10402 comm="syz.4.1163" path="/241/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 475.555556][ T29] audit: type=1400 audit(1771550851.402:861): avc: denied { ioctl } for pid=10402 comm="syz.4.1163" path="/241/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 475.596817][T10391] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 475.880849][T10391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.000043][T10391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.038409][ T5878] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 476.049725][ T5878] asix 1-1:0.188: probe with driver asix failed with error -61 [ 476.381171][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1170'. [ 477.400521][ T10] usb 1-1: USB disconnect, device number 43 [ 477.803359][T10446] overlay: filesystem on ./file0 not supported as upperdir [ 479.044998][ T29] audit: type=1400 audit(1771550854.924:862): avc: denied { write } for pid=10467 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 479.399971][T10480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1181'. [ 479.413832][T10480] overlayfs: missing 'lowerdir' [ 479.531232][ T5811] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 480.289253][ T5851] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 480.329458][ T5878] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 480.469123][ T5851] usb 5-1: Using ep0 maxpacket: 16 [ 480.482272][ T5851] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 480.496178][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.511262][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 480.514366][ T5851] usb 5-1: Product: syz [ 480.524469][ T5851] usb 5-1: Manufacturer: syz [ 480.537182][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 480.538182][ T5851] usb 5-1: SerialNumber: syz [ 480.564582][ T5851] r8152-cfgselector 5-1: Unknown version 0x0000 [ 480.573811][ T5851] r8152-cfgselector 5-1: config 0 descriptor?? [ 480.579448][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 480.601848][ T5878] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 480.611123][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.632458][ T5878] usb 4-1: Product: syz [ 480.636644][ T5878] usb 4-1: Manufacturer: syz [ 480.649042][ T5878] usb 4-1: SerialNumber: syz [ 480.689917][ T5878] usb 4-1: config 0 descriptor?? [ 480.713603][ T5878] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 480.732862][T10505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.758281][ T5878] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 480.898952][ T5851] r8152-cfgselector 5-1: Unknown version 0x0000 [ 480.905588][ T5851] r8152-cfgselector 5-1: bad CDC descriptors [ 480.989363][T10510] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 481.171549][ T5851] r8152-cfgselector 5-1: USB disconnect, device number 50 [ 481.250991][T10514] mkiss: ax0: crc mode is auto. [ 481.309739][ T5878] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 481.316368][ T5878] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 481.985912][ T29] audit: type=1400 audit(1771550858.015:863): avc: denied { connect } for pid=10521 comm="syz.4.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 482.024932][ T5878] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 482.068380][ T5878] em28xx 4-1:0.0: No AC97 audio processor [ 482.084512][ T29] audit: type=1400 audit(1771550858.015:864): avc: denied { write } for pid=10521 comm="syz.4.1195" lport=58165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 482.172758][ T5878] usb 4-1: USB disconnect, device number 45 [ 482.198079][ T5878] em28xx 4-1:0.0: Disconnecting em28xx [ 482.612604][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 482.646763][ T5878] em28xx 4-1:0.0: Freeing device [ 482.798058][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 482.806293][ T10] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 482.873012][ T10] usb 6-1: config 0 has no interface number 0 [ 482.959109][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 482.976286][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.994563][ T10] usb 6-1: Product: syz [ 483.004659][ T10] usb 6-1: Manufacturer: syz [ 483.230079][ T10] usb 6-1: SerialNumber: syz [ 483.237788][ T10] usb 6-1: config 0 descriptor?? [ 483.248686][ T10] hub 6-1:0.132: bad descriptor, ignoring hub [ 483.254808][ T10] hub 6-1:0.132: probe with driver hub failed with error -5 [ 483.275686][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input73 [ 483.285897][ T5878] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 483.416139][T10539] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 483.668818][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 483.675311][T10540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.687850][T10540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.688259][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 483.705381][ T5878] usb 2-1: config 255 has an invalid interface number: 81 but max is 0 [ 483.713799][ T5878] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 483.728267][ T5878] usb 2-1: config 255 has no interface number 0 [ 483.737713][ T5878] usb 2-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 483.761275][ T5878] usb 2-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 483.807448][ T5878] usb 2-1: config 255 interface 81 has no altsetting 0 [ 484.010944][ T5878] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 484.020508][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.037759][ T5878] usb 2-1: Product: syz [ 484.044498][ T5878] usb 2-1: SerialNumber: syz [ 484.057641][ T10] usb 6-1: USB disconnect, device number 23 [ 484.441081][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.473790][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.803060][ T5878] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:255.81/input/input74 [ 484.852069][ T5878] usb 2-1: USB disconnect, device number 55 [ 485.286726][ T5878] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 485.456627][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 485.467997][ T5878] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 485.827683][ T5878] usb 1-1: config 0 has no interface number 0 [ 485.846991][ T5878] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 485.865742][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.873921][ T5878] usb 1-1: Product: syz [ 485.878154][ T5878] usb 1-1: Manufacturer: syz [ 485.882798][ T5878] usb 1-1: SerialNumber: syz [ 485.898326][ T5878] usb 1-1: config 0 descriptor?? [ 485.905941][ T5878] hub 1-1:0.132: bad descriptor, ignoring hub [ 485.912494][ T5878] hub 1-1:0.132: probe with driver hub failed with error -5 [ 485.923686][ T5878] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input75 [ 486.029132][T10567] vivid-007: ================= START STATUS ================= [ 486.078705][T10567] vivid-007: Enable Output Cropping: true grabbed [ 486.237413][T10567] vivid-007: Enable Output Composing: true grabbed [ 486.392352][T10567] vivid-007: Enable Output Scaler: true grabbed [ 486.513017][T10567] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 486.546941][T10567] vivid-007: Transmit Mode: HDMI grabbed [ 486.556161][T10567] vivid-007: Hotplug Present: 0x00000000 [ 486.593245][T10567] vivid-007: RxSense Present: 0x00000000 [ 486.607784][T10576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.620027][T10576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.628390][T10567] vivid-007: EDID Present: 0x00000000 [ 486.654171][T10567] vivid-007: ================== END STATUS ================== [ 486.767642][ T29] audit: type=1400 audit(1771550862.807:865): avc: denied { connect } for pid=10577 comm="syz.4.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 486.788372][ T29] audit: type=1400 audit(1771550862.807:866): avc: denied { bind } for pid=10577 comm="syz.4.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 487.185922][ T5894] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 487.365695][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 487.404660][ T5894] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 487.423072][ T5894] usb 2-1: config 0 has no interface number 0 [ 487.441690][ T5894] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 487.455581][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.473753][ T5894] usb 2-1: Product: syz [ 487.478515][ T5894] usb 2-1: Manufacturer: syz [ 487.483119][ T5894] usb 2-1: SerialNumber: syz [ 487.506092][ T5894] usb 2-1: config 0 descriptor?? [ 487.521729][ T5894] hub 2-1:0.132: bad descriptor, ignoring hub [ 487.536364][ T5894] hub 2-1:0.132: probe with driver hub failed with error -5 [ 487.556738][ T5894] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input76 [ 487.777115][T10609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.807457][T10609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.615011][T10672] syzkaller0: entered promiscuous mode [ 490.620603][T10672] syzkaller0: entered allmulticast mode [ 490.634235][ T5894] usb 2-1: USB disconnect, device number 56 [ 492.454487][ T29] audit: type=1400 audit(1771550868.490:867): avc: denied { listen } for pid=10695 comm="syz.3.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 492.490217][ T24] usb 1-1: USB disconnect, device number 44 [ 492.508928][T10705] xt_ecn: cannot match TCP bits for non-tcp packets [ 492.572258][ T29] audit: type=1400 audit(1771550868.520:868): avc: denied { accept } for pid=10695 comm="syz.3.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 493.253224][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 493.542612][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 493.554018][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 493.562380][ T24] usb 4-1: config 0 has no interface number 0 [ 493.861252][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 493.870700][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.879875][T10723] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 493.893740][ T24] usb 4-1: Product: syz [ 493.907637][ T24] usb 4-1: Manufacturer: syz [ 493.922392][ T24] usb 4-1: SerialNumber: syz [ 493.929910][ T24] usb 4-1: config 0 descriptor?? [ 493.941163][ T24] hub 4-1:0.132: bad descriptor, ignoring hub [ 493.949842][ T24] hub 4-1:0.132: probe with driver hub failed with error -5 [ 493.971634][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input77 [ 494.009171][ T29] audit: type=1400 audit(1771550870.041:869): avc: denied { create } for pid=10724 comm="syz.4.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 494.081569][ T29] audit: type=1400 audit(1771550870.041:870): avc: denied { read } for pid=10724 comm="syz.4.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 494.400481][ T29] audit: type=1400 audit(1771550870.371:871): avc: denied { write } for pid=10724 comm="syz.4.1237" path="socket:[32502]" dev="sockfs" ino=32502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 494.591218][T10729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.618886][T10729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.663734][T10738] No control pipe specified [ 495.672137][ T29] audit: type=1400 audit(1771550871.712:872): avc: denied { setopt } for pid=10734 comm="syz.4.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 495.775937][T10741] FAULT_INJECTION: forcing a failure. [ 495.775937][T10741] name failslab, interval 1, probability 0, space 0, times 0 [ 495.811245][T10741] CPU: 1 UID: 0 PID: 10741 Comm: syz.0.1241 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.811275][T10741] Tainted: [L]=SOFTLOCKUP [ 495.811281][T10741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.811290][T10741] Call Trace: [ 495.811296][T10741] [ 495.811302][T10741] dump_stack_lvl+0x100/0x190 [ 495.811335][T10741] should_fail_ex.cold+0x5/0xa [ 495.811359][T10741] should_failslab+0xc2/0x120 [ 495.811387][T10741] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 495.811409][T10741] ? do_getname+0x35/0x390 [ 495.811433][T10741] do_getname+0x35/0x390 [ 495.811455][T10741] user_path_at+0x26/0x60 [ 495.811479][T10741] __x64_sys_mount+0x1fb/0x310 [ 495.811499][T10741] ? __pfx___x64_sys_mount+0x10/0x10 [ 495.811526][T10741] do_syscall_64+0x106/0xf80 [ 495.811545][T10741] ? clear_bhb_loop+0x40/0x90 [ 495.811566][T10741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.811582][T10741] RIP: 0033:0x7fdbffd9c629 [ 495.811596][T10741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.811611][T10741] RSP: 002b:00007fdc00c8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 495.811627][T10741] RAX: ffffffffffffffda RBX: 00007fdc00015fa0 RCX: 00007fdbffd9c629 [ 495.811637][T10741] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 495.811647][T10741] RBP: 00007fdc00c8a090 R08: 0000200000000400 R09: 0000000000000000 [ 495.811656][T10741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.811665][T10741] R13: 00007fdc00016038 R14: 00007fdc00015fa0 R15: 00007ffe8e091808 [ 495.811686][T10741] [ 496.169067][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.183143][ T1295] lec:lec_start_xmit: lec0:No lecd attached [ 496.268623][ T29] audit: type=1400 audit(1771550872.302:873): avc: denied { connect } for pid=10745 comm="syz.1.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 496.301195][ T29] audit: type=1400 audit(1771550872.302:874): avc: denied { ioctl } for pid=10745 comm="syz.1.1243" path="socket:[31142]" dev="sockfs" ino=31142 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 496.394245][ T29] audit: type=1400 audit(1771550872.302:875): avc: denied { getopt } for pid=10745 comm="syz.1.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 496.572709][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 496.645331][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1245'. [ 496.738531][ T5878] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 496.890868][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 496.906611][ T10] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 496.923189][ T10] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 496.932336][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.942438][ T5878] usb 2-1: device descriptor read/64, error -71 [ 496.968694][ T10] usb 6-1: Product: syz [ 496.975970][ T10] usb 6-1: Manufacturer: syz [ 496.988899][ T10] usb 6-1: SerialNumber: syz [ 496.998763][ T10] usb 6-1: config 0 descriptor?? [ 497.091945][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 497.100445][ T10] usb 6-1: setting power ON [ 497.106908][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 497.138718][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 497.148783][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 497.194885][ T10] usb 6-1: media controller created [ 497.216121][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 497.224614][ T5878] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 497.248884][ T10] usb 6-1: selecting invalid altsetting 6 [ 497.256892][ T10] usb 6-1: digital interface selection failed (-22) [ 497.298402][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 497.360686][ T5878] usb 2-1: device descriptor read/64, error -71 [ 497.388224][ T5915] usb 4-1: reset high-speed USB device number 46 using dummy_hcd [ 497.398600][ T10] usb 6-1: setting power OFF [ 497.410803][ T5915] usb 4-1: device reset changed ep0 maxpacket size! [ 497.417501][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 497.430709][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 497.462352][ T5915] usb 4-1: USB disconnect, device number 46 [ 497.471424][ T10] (NULL device *): no alternate interface [ 497.500801][ T5878] usb usb2-port1: attempt power cycle [ 498.100305][ T5878] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 498.120913][ T5878] usb 2-1: device descriptor read/8, error -71 [ 498.170304][ T5915] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 498.320184][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 498.329204][ T5915] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 498.338713][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 498.347156][ T5915] usb 4-1: Product: syz [ 498.351610][ T5915] usb 4-1: Manufacturer: syz [ 498.356306][ T5915] usb 4-1: SerialNumber: syz [ 498.362152][ T5878] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 498.378173][ T5915] usb 4-1: config 0 descriptor?? [ 498.390664][ T5878] usb 2-1: device descriptor read/8, error -71 [ 498.500616][ T5878] usb usb2-port1: unable to enumerate USB device [ 498.556654][T10768] mkiss: ax0: crc mode is auto. [ 498.891486][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 498.977833][ T10] usb 6-1: USB disconnect, device number 24 [ 499.045704][ T5915] usb 4-1: USB disconnect, device number 47 [ 500.309422][T10782] fuse: Unknown parameter '000000000000000000006150x000000000000018d' [ 501.208758][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 501.226591][ T29] audit: type=1400 audit(1771550877.265:876): avc: denied { connect } for pid=10797 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 501.249166][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1258'. [ 501.289737][ T29] audit: type=1400 audit(1771550877.325:877): avc: denied { mount } for pid=10799 comm="syz.5.1255" name="/" dev="autofs" ino=31232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 501.328643][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms [ 501.336701][ C0] lec:lec_tx_timeout: lec0 [ 501.370176][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 501.380270][ T24] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 501.392413][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 501.401749][ T24] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 501.413662][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 501.425665][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 501.442937][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 501.454299][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 501.474930][ T24] usb 1-1: Product: syz [ 501.479438][ T24] usb 1-1: Manufacturer: syz [ 501.494710][T10791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 501.510152][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 501.515527][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 501.615056][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 501.625391][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 502.298223][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 502.305023][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 502.311324][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 502.317926][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 502.324189][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 502.330784][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 502.337092][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 502.343684][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 502.349953][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 502.356544][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 502.363444][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 502.370048][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 502.376342][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 502.382938][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 502.389251][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 502.395847][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 502.402102][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 502.408689][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 502.414942][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 502.421531][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 502.714739][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 502.878375][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 502.911120][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 502.936532][ T24] usb 4-1: config 255 has an invalid interface number: 81 but max is 0 [ 502.966100][ T24] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 502.997723][ T24] usb 4-1: config 255 has no interface number 0 [ 503.014471][ T24] usb 4-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 503.038149][ T5894] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 503.079425][ T10] usb 1-1: USB disconnect, device number 45 [ 503.079504][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 503.100440][ T29] audit: type=1400 audit(1771550879.146:878): avc: denied { read } for pid=10804 comm="syz.1.1260" dev="sockfs" ino=32712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 503.124658][ T24] usb 4-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 503.135021][ T24] usb 4-1: config 255 interface 81 has no altsetting 0 [ 503.149035][ T24] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 503.159591][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.167585][ T24] usb 4-1: Product: syz [ 503.172827][ T24] usb 4-1: SerialNumber: syz [ 503.248122][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 503.255154][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 503.264437][ T5894] usb 5-1: config 255 has an invalid interface number: 81 but max is 0 [ 503.272813][ T5894] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 503.284505][ T5894] usb 5-1: config 255 has no interface number 0 [ 503.296003][ T5894] usb 5-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 503.308027][ T5894] usb 5-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 503.319040][ T5894] usb 5-1: config 255 interface 81 has no altsetting 0 [ 503.330105][ T5894] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 503.339238][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.347210][ T5894] usb 5-1: Product: syz [ 503.351827][ T5894] usb 5-1: SerialNumber: syz [ 503.394667][T10812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.411524][T10812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.433050][ T24] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:255.81/input/input78 [ 503.474365][ T24] usb 4-1: USB disconnect, device number 48 [ 503.567262][T10817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.575967][T10817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.594298][ T5894] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:255.81/input/input79 [ 503.627843][ T5894] usb 5-1: USB disconnect, device number 51 [ 504.047361][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 504.233656][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1265'. [ 504.311088][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 504.508067][ T10] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 504.522651][ T10] usb 2-1: config 0 has no interface number 0 [ 504.532631][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 504.545764][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.554932][ T10] usb 2-1: Product: syz [ 504.560211][ T10] usb 2-1: Manufacturer: syz [ 504.565910][ T10] usb 2-1: SerialNumber: syz [ 504.575259][T10837] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 504.577662][ T10] usb 2-1: config 0 descriptor?? [ 504.595260][ T10] hub 2-1:0.132: bad descriptor, ignoring hub [ 504.610189][ T10] hub 2-1:0.132: probe with driver hub failed with error -5 [ 504.628732][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input80 [ 504.661366][T10843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10843 comm=syz.4.1271 [ 504.728482][T10843] netlink: 'syz.4.1271': attribute type 1 has an invalid length. [ 504.767614][T10661] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 504.866158][T10844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.877191][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 504.877750][T10844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.128731][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 505.138100][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 505.147446][ T10] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 505.161013][ T10] usb 1-1: config 1 interface 0 has no altsetting 1 [ 505.294839][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 505.306129][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.318441][ T10] usb 1-1: Product: syz [ 505.323718][ T10] usb 1-1: Manufacturer: syz [ 505.330641][ T10] usb 1-1: SerialNumber: syz [ 505.346674][ T24] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 505.348560][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 505.498134][ T24] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 505.507812][ T24] usb 5-1: config 0 has no interface number 0 [ 505.513945][ T24] usb 5-1: config 0 interface 29 has no altsetting 0 [ 505.524482][ T24] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 505.534197][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.542303][ T24] usb 5-1: Product: syz [ 505.547422][ T24] usb 5-1: Manufacturer: syz [ 505.552361][ T24] usb 5-1: SerialNumber: syz [ 505.563967][ T10] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 505.574476][ T24] usb 5-1: config 0 descriptor?? [ 505.593520][ T10] smsusb 1-1:1.0: probe with driver smsusb failed with error -71 [ 505.610735][T10853] Invalid source name [ 505.611135][ T29] audit: type=1400 audit(1771550881.657:879): avc: denied { mounton } for pid=10852 comm="syz.3.1274" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 505.623866][T10853] tmpfs: Bad value for 'mpol' [ 505.639431][ T10] usb 1-1: USB disconnect, device number 46 [ 505.700444][ T29] audit: type=1400 audit(1771550881.747:880): avc: denied { connect } for pid=10854 comm="syz.1.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 505.795167][ T29] audit: type=1400 audit(1771550881.837:881): avc: denied { write } for pid=10854 comm="syz.1.1275" path="socket:[31366]" dev="sockfs" ino=31366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 505.936384][ T24] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 506.503867][ T24] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 506.530926][ T24] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 506.586771][T10871] netlink: 'syz.0.1280': attribute type 1 has an invalid length. [ 506.633624][ T24] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 506.689478][ T24] usb 5-1: USB disconnect, device number 52 [ 506.697438][ T5160] usb 2-1: reset high-speed USB device number 61 using dummy_hcd [ 506.793700][T10871] bond1: (slave geneve2): making interface the new active one [ 506.836798][T10871] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 506.870083][ T5160] usb 2-1: device firmware changed [ 506.877919][T10670] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 506.916935][ T5915] usb 2-1: USB disconnect, device number 61 [ 506.922983][T10670] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 506.947672][T10670] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 506.957373][T10670] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 507.195821][ T29] audit: type=1400 audit(1771550883.238:882): avc: denied { setopt } for pid=10878 comm="syz.3.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 507.205761][ T5915] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 507.495811][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 507.825629][ T5915] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 507.861179][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.942857][ T5915] usb 2-1: Product: syz [ 507.973273][ T5915] usb 2-1: Manufacturer: syz [ 507.983190][ T5915] usb 2-1: SerialNumber: syz [ 508.315815][ T5915] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 508.368462][ T5915] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 508.388762][ T5915] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 508.397681][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 508.413644][ T5915] usb 2-1: media controller created [ 508.451107][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.561069][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 508.582442][ T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 508.597224][ T10] usb 5-1: config 0 has no interface number 0 [ 508.612625][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 508.625052][ T5940] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 508.652897][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.667832][ T10] usb 5-1: Product: syz [ 508.674682][ T10] usb 5-1: Manufacturer: syz [ 508.684833][ T10] usb 5-1: SerialNumber: syz [ 508.698257][ T10] usb 5-1: config 0 descriptor?? [ 508.708580][ T5915] zl10353_read_register: readreg error (reg=127, ret==-110) [ 508.721240][ T10] hub 5-1:0.132: bad descriptor, ignoring hub [ 508.737551][ T10] hub 5-1:0.132: probe with driver hub failed with error -5 [ 508.761479][ T5915] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 508.770886][ T10] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input81 [ 508.793323][ T5915] usb 2-1: USB disconnect, device number 62 [ 508.800220][ T5940] usb 4-1: Using ep0 maxpacket: 16 [ 508.813703][ T5940] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 508.842253][ T5940] usb 4-1: config 0 has no interface number 0 [ 508.872830][ T5940] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 508.903581][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.937861][ T5940] usb 4-1: Product: syz [ 508.942042][ T5940] usb 4-1: Manufacturer: syz [ 508.954224][ T5940] usb 4-1: SerialNumber: syz [ 508.967986][T10895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.987416][ T5940] usb 4-1: config 0 descriptor?? [ 508.993393][T10895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.004205][ T5940] hub 4-1:0.132: bad descriptor, ignoring hub [ 509.012281][ T5940] hub 4-1:0.132: probe with driver hub failed with error -5 [ 509.102280][ T5940] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input82 [ 509.268370][T10899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.379172][T10899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.642782][ T5940] input: failed to attach handler mousedev to device input82, error: -2 [ 509.655502][ T24] usb 5-1: USB disconnect, device number 53 [ 509.676799][ T5940] usb 4-1: USB disconnect, device number 49 [ 510.068831][ T29] audit: type=1400 audit(1771550886.119:883): avc: denied { ioctl } for pid=10914 comm="syz.0.1293" path="socket:[32995]" dev="sockfs" ino=32995 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 511.713962][ T29] audit: type=1400 audit(1771550887.750:884): avc: denied { ioctl } for pid=10939 comm="syz.0.1298" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 512.003377][ T5894] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 512.033682][T10947] syzkaller0: entered promiscuous mode [ 512.039147][T10947] syzkaller0: entered allmulticast mode [ 512.123624][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 512.132259][ T7273] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 512.151707][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1300'. [ 512.185595][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 512.204169][ T5894] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 512.214344][ T5894] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 512.214474][T10951] FAULT_INJECTION: forcing a failure. [ 512.214474][T10951] name failslab, interval 1, probability 0, space 0, times 0 [ 512.242871][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1300'. [ 512.254970][ T5894] usb 1-1: config 8 has no interface number 0 [ 512.261179][ T5894] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 512.292753][ T5894] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 512.292779][T10951] CPU: 0 UID: 0 PID: 10951 Comm: syz.1.1301 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.292807][T10951] Tainted: [L]=SOFTLOCKUP [ 512.292813][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.292823][T10951] Call Trace: [ 512.292828][T10951] [ 512.292834][T10951] dump_stack_lvl+0x100/0x190 [ 512.292862][T10951] should_fail_ex.cold+0x5/0xa [ 512.292882][T10951] should_failslab+0xc2/0x120 [ 512.292907][T10951] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 512.292927][T10951] ? __d_alloc+0x34/0xa80 [ 512.292948][T10951] __d_alloc+0x34/0xa80 [ 512.292967][T10951] d_alloc_pseudo+0x1c/0xc0 [ 512.292988][T10951] alloc_file_pseudo+0xcf/0x230 [ 512.293011][T10951] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 512.293031][T10951] ? _raw_spin_unlock+0x28/0x50 [ 512.293053][T10951] ? alloc_fd+0x476/0x790 [ 512.293070][T10951] __anon_inode_getfile+0xe8/0x280 [ 512.293092][T10951] __anon_inode_getfd+0x5c/0xe0 [ 512.293117][T10951] __x64_sys_fsopen+0x190/0x220 [ 512.293138][T10951] do_syscall_64+0x106/0xf80 [ 512.293154][T10951] ? clear_bhb_loop+0x40/0x90 [ 512.293173][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.293189][T10951] RIP: 0033:0x7f4f95f9c629 [ 512.293202][T10951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.293216][T10951] RSP: 002b:00007f4f96efe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 512.293231][T10951] RAX: ffffffffffffffda RBX: 00007f4f96215fa0 RCX: 00007f4f95f9c629 [ 512.293241][T10951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 512.293250][T10951] RBP: 00007f4f96efe090 R08: 0000000000000000 R09: 0000000000000000 [ 512.293259][T10951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.293268][T10951] R13: 00007f4f96216038 R14: 00007f4f96215fa0 R15: 00007ffc2d062258 [ 512.293288][T10951] [ 512.494274][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 512.499351][ T7273] usb 4-1: Using ep0 maxpacket: 32 [ 512.523825][ T24] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 512.539917][ T24] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 512.554367][ T7273] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 512.562562][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.572700][ T7273] usb 4-1: config 0 has no interface number 0 [ 512.578820][ T24] usb 5-1: Product: syz [ 512.583153][ T24] usb 5-1: Manufacturer: syz [ 512.587729][ T24] usb 5-1: SerialNumber: syz [ 512.603028][ T7273] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 512.704426][ T24] usb 5-1: config 0 descriptor?? [ 512.716825][ T7273] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 512.733077][ T7273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.741770][ T7273] usb 4-1: Product: syz [ 512.748541][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 512.756726][ T5894] usb 1-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 512.887528][ T7273] usb 4-1: Manufacturer: syz [ 512.892163][ T7273] usb 4-1: SerialNumber: syz [ 512.896813][ T24] usb 5-1: setting power ON [ 512.901297][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 512.908640][ T7273] usb 4-1: config 0 descriptor?? [ 512.913618][ T5894] usb 1-1: config 8 interface 206 has no altsetting 0 [ 512.921930][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 512.933821][ T7273] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 512.943772][ T7273] em28xx 4-1:0.132: Video interface 132 found: [ 512.952064][ T5894] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 512.961834][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.970249][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 513.000530][ T5894] usb 1-1: Product: syz [ 513.009462][ T5894] usb 1-1: Manufacturer: syz [ 513.019550][ T24] usb 5-1: media controller created [ 513.025691][ T5894] usb 1-1: SerialNumber: syz [ 513.037021][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 513.065075][ T24] usb 5-1: selecting invalid altsetting 6 [ 513.087520][ T24] usb 5-1: digital interface selection failed (-22) [ 513.094760][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 513.104136][ T24] usb 5-1: setting power OFF [ 513.109909][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 513.120180][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 513.200039][ T24] (NULL device *): no alternate interface [ 513.263817][ T5894] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 513.303863][ T5894] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 513.322882][ T5940] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 513.336449][ T5894] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 513.344952][ T7273] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 513.408828][ T5894] usb 1-1: USB disconnect, device number 47 [ 513.498913][ T5894] garmin_gps 1-1:8.206: device disconnected [ 513.533115][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 513.827380][ T5940] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 513.865600][ T5940] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 513.919081][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.951321][ T5940] usb 2-1: Product: syz [ 513.976924][ T5940] usb 2-1: Manufacturer: syz [ 513.990922][ T5940] usb 2-1: SerialNumber: syz [ 514.008978][ T5940] usb 2-1: config 0 descriptor?? [ 514.033927][ T5940] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 514.056438][ T5940] usb 2-1: setting power ON [ 514.090227][ T5940] dvb-usb: bulk message failed: -22 (2/0) [ 514.166720][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 514.211664][ T5940] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 514.236124][ T5940] usb 2-1: media controller created [ 514.384686][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 514.406170][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 514.437908][ T5940] usb 2-1: selecting invalid altsetting 6 [ 514.444594][ T5940] usb 2-1: digital interface selection failed (-22) [ 514.460668][ T24] usb 5-1: USB disconnect, device number 54 [ 514.488194][ T5940] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 514.552093][ T5915] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 514.613457][ T7273] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 514.624024][ T7273] em28xx 4-1:0.132: board has no eeprom [ 514.668567][ T5940] usb 2-1: setting power OFF [ 514.692264][ T7273] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 515.095430][ T5940] dvb-usb: bulk message failed: -22 (2/0) [ 515.101344][ T5940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 515.101969][ T7273] em28xx 4-1:0.132: analog set to bulk mode. [ 515.110672][ T5940] (NULL device *): no alternate interface [ 515.116715][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 515.141889][ T792] em28xx 4-1:0.132: Registering V4L2 extension [ 515.162971][ T5915] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 515.188642][ T5915] usb 1-1: config 0 has no interface number 0 [ 515.215809][ T5915] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 515.240467][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.252190][ T5940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 515.254231][ T792] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 515.272329][ T5915] usb 1-1: Product: syz [ 515.283007][ T5915] usb 1-1: Manufacturer: syz [ 515.295965][ T5915] usb 1-1: SerialNumber: syz [ 515.366995][ T792] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 515.394470][ T5915] usb 1-1: config 0 descriptor?? [ 515.403576][ T792] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 515.404024][ T5915] hub 1-1:0.132: bad descriptor, ignoring hub [ 515.440012][ T5915] hub 1-1:0.132: probe with driver hub failed with error -5 [ 515.492508][ T792] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 515.517963][ T5940] usb 4-1: USB disconnect, device number 50 [ 515.526180][ T5940] em28xx 4-1:0.132: Disconnecting em28xx [ 515.542422][ T5915] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input83 [ 515.621905][ T24] usb 2-1: USB disconnect, device number 63 [ 515.624534][T10973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.650780][T10973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.763580][ T5915] input: failed to attach handler mousedev to device input83, error: -2 [ 517.928096][ T792] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 517.971145][ T792] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 518.002474][ T792] em28xx 4-1:0.132: No AC97 audio processor [ 518.379314][ T792] usb 4-1: Decoder not found [ 518.395502][ T792] em28xx 4-1:0.132: failed to create media graph [ 518.413432][ T792] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 518.437720][ T792] em28xx 4-1:0.132: Remote control support is not available for this card. [ 518.437759][T11001] ================================================================== [ 518.454366][T11001] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 518.461825][T11001] Read of size 8 at addr ffff88803102c748 by task v4l_id/11001 [ 518.469339][T11001] [ 518.471640][T11001] CPU: 0 UID: 0 PID: 11001 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 518.471656][T11001] Tainted: [L]=SOFTLOCKUP [ 518.471660][T11001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.471667][T11001] Call Trace: [ 518.471672][T11001] [ 518.471676][T11001] dump_stack_lvl+0x100/0x190 [ 518.471696][T11001] print_report+0x156/0x4c9 [ 518.471711][T11001] ? __virt_addr_valid+0x81/0x620 [ 518.471727][T11001] ? __phys_addr+0xe8/0x180 [ 518.471742][T11001] ? v4l2_fh_init+0x27d/0x2c0 [ 518.471755][T11001] kasan_report+0xdf/0x1e0 [ 518.471772][T11001] ? v4l2_fh_init+0x27d/0x2c0 [ 518.471784][T11001] v4l2_fh_init+0x27d/0x2c0 [ 518.471795][T11001] v4l2_fh_open+0x64/0xa0 [ 518.471806][T11001] em28xx_v4l2_open+0x11e/0x570 [ 518.471824][T11001] v4l2_open+0x1d2/0x490 [ 518.471835][T11001] ? __pfx_v4l2_open+0x10/0x10 [ 518.471846][T11001] chrdev_open+0x234/0x6a0 [ 518.471857][T11001] ? __pfx_chrdev_open+0x10/0x10 [ 518.471867][T11001] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 518.471881][T11001] do_dentry_open+0x6d8/0x1660 [ 518.471897][T11001] ? __pfx_chrdev_open+0x10/0x10 [ 518.471908][T11001] vfs_open+0x82/0x3f0 [ 518.471919][T11001] path_openat+0x208c/0x31a0 [ 518.471932][T11001] ? __pfx_path_openat+0x10/0x10 [ 518.471944][T11001] do_file_open+0x20e/0x430 [ 518.471954][T11001] ? __pfx_do_file_open+0x10/0x10 [ 518.471968][T11001] ? alloc_fd+0x476/0x790 [ 518.471979][T11001] ? do_getname+0x191/0x390 [ 518.471992][T11001] do_sys_openat2+0x10d/0x1e0 [ 518.472007][T11001] ? __pfx_do_sys_openat2+0x10/0x10 [ 518.472022][T11001] __x64_sys_openat+0x12d/0x210 [ 518.472034][T11001] ? __pfx___x64_sys_openat+0x10/0x10 [ 518.472048][T11001] ? do_user_addr_fault+0x8d6/0x12f0 [ 518.472061][T11001] do_syscall_64+0x106/0xf80 [ 518.472074][T11001] ? clear_bhb_loop+0x40/0x90 [ 518.472093][T11001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.472110][T11001] RIP: 0033:0x7fe8c22a7407 [ 518.472124][T11001] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 518.472135][T11001] RSP: 002b:00007ffec9629030 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 518.472146][T11001] RAX: ffffffffffffffda RBX: 00007fe8c29d1880 RCX: 00007fe8c22a7407 [ 518.472153][T11001] RDX: 0000000000000000 RSI: 00007ffec9629f1b RDI: ffffffffffffff9c [ 518.472159][T11001] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 518.472165][T11001] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 518.472171][T11001] R13: 00007ffec9629280 R14: 00007fe8c2b38000 R15: 0000564204dda4d8 [ 518.472182][T11001] [ 518.472185][T11001] [ 518.732175][T11001] Allocated by task 792: [ 518.732187][T11001] kasan_save_stack+0x30/0x50 [ 518.732213][T11001] kasan_save_track+0x14/0x30 [ 518.745933][T11001] __kasan_kmalloc+0xaa/0xb0 [ 518.750498][T11001] em28xx_v4l2_init.cold+0x94/0x3503 [ 518.755759][T11001] em28xx_init_extension+0x13a/0x200 [ 518.761013][T11001] request_module_async+0x61/0x80 [ 518.766009][T11001] process_one_work+0x9d7/0x1920 [ 518.770914][T11001] worker_thread+0x5da/0xe40 [ 518.775472][T11001] kthread+0x370/0x450 [ 518.779507][T11001] ret_from_fork+0x754/0xd80 [ 518.784064][T11001] ret_from_fork_asm+0x1a/0x30 [ 518.788799][T11001] [ 518.791094][T11001] Freed by task 792: [ 518.794966][T11001] kasan_save_stack+0x30/0x50 [ 518.799626][T11001] kasan_save_track+0x14/0x30 [ 518.804273][T11001] kasan_save_free_info+0x3b/0x70 [ 518.809267][T11001] __kasan_slab_free+0x5f/0x80 [ 518.814003][T11001] kfree+0x1f6/0x6b0 [ 518.817866][T11001] kref_put.isra.0+0x56/0x90 [ 518.822439][T11001] em28xx_v4l2_init.cold+0x280/0x3503 [ 518.827786][T11001] em28xx_init_extension+0x13a/0x200 [ 518.833050][T11001] request_module_async+0x61/0x80 [ 518.838057][T11001] process_one_work+0x9d7/0x1920 [ 518.842962][T11001] worker_thread+0x5da/0xe40 [ 518.847520][T11001] kthread+0x370/0x450 [ 518.851567][T11001] ret_from_fork+0x754/0xd80 [ 518.856123][T11001] ret_from_fork_asm+0x1a/0x30 [ 518.860854][T11001] [ 518.863147][T11001] The buggy address belongs to the object at ffff88803102c000 [ 518.863147][T11001] which belongs to the cache kmalloc-8k of size 8192 [ 518.877165][T11001] The buggy address is located 1864 bytes inside of [ 518.877165][T11001] freed 8192-byte region [ffff88803102c000, ffff88803102e000) [ 518.891101][T11001] [ 518.893403][T11001] The buggy address belongs to the physical page: [ 518.899793][T11001] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31028 [ 518.908537][T11001] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 518.917005][T11001] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 518.924518][T11001] page_type: f5(slab) [ 518.928468][T11001] raw: 00fff00000000040 ffff88813fe3b280 dead000000000100 dead000000000122 [ 518.937030][T11001] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 518.945593][T11001] head: 00fff00000000040 ffff88813fe3b280 dead000000000100 dead000000000122 [ 518.954239][T11001] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 518.962877][T11001] head: 00fff00000000003 ffffea0000c40a01 00000000ffffffff 00000000ffffffff [ 518.971515][T11001] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 518.980149][T11001] page dumped because: kasan: bad access detected [ 518.986526][T11001] page_owner tracks the page as allocated [ 518.992207][T11001] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8216, tgid 8214 (syz.1.591), ts 305512555742, free_ts 305508257218 [ 519.013443][T11001] post_alloc_hook+0x153/0x170 [ 519.018179][T11001] get_page_from_freelist+0x111d/0x3140 [ 519.023697][T11001] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 519.029573][T11001] new_slab+0xa6/0x6d0 [ 519.033612][T11001] refill_objects+0x26b/0x400 [ 519.038267][T11001] __pcs_replace_empty_main+0x19f/0x600 [ 519.043782][T11001] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 519.050170][T11001] kmalloc_reserve+0xe8/0x350 [ 519.054816][T11001] __alloc_skb+0x185/0x710 [ 519.059203][T11001] alloc_skb_with_frags+0xe0/0x810 [ 519.064282][T11001] sock_alloc_send_pskb+0x801/0x980 [ 519.069451][T11001] raw_sendmsg+0x19eb/0x3800 [ 519.074012][T11001] inet_sendmsg+0x11c/0x140 [ 519.078500][T11001] sock_sendmsg+0x359/0x430 [ 519.082972][T11001] splice_to_socket+0xb4c/0x11b0 [ 519.087876][T11001] direct_splice_actor+0x192/0x6c0 [ 519.092952][T11001] page last free pid 8216 tgid 8214 stack trace: [ 519.099242][T11001] __free_frozen_pages+0x7e1/0x10d0 [ 519.104406][T11001] qlist_free_all+0x47/0xe0 [ 519.108880][T11001] kasan_quarantine_reduce+0x1a0/0x1f0 [ 519.114308][T11001] __kasan_slab_alloc+0x69/0x90 [ 519.119143][T11001] __kmalloc_noprof+0x2b9/0x850 [ 519.123964][T11001] copy_splice_read+0x1a3/0xb90 [ 519.128787][T11001] do_splice_read+0x285/0x370 [ 519.133436][T11001] splice_direct_to_actor+0x2a1/0xa30 [ 519.138793][T11001] do_splice_direct+0x174/0x240 [ 519.143608][T11001] do_sendfile+0xadc/0xe20 [ 519.147996][T11001] __x64_sys_sendfile64+0x1d8/0x220 [ 519.153161][T11001] do_syscall_64+0x106/0xf80 [ 519.157718][T11001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.163577][T11001] [ 519.165868][T11001] Memory state around the buggy address: [ 519.171463][T11001] ffff88803102c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 519.179490][T11001] ffff88803102c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 519.187519][T11001] >ffff88803102c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 519.195546][T11001] ^ [ 519.201924][T11001] ffff88803102c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 519.209955][T11001] ffff88803102c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 519.217980][T11001] ================================================================== [ 519.249687][ T29] audit: type=1400 audit(1771550895.284:885): avc: denied { read } for pid=5157 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 519.295409][ T5940] em28xx 4-1:0.132: Closing input extension [ 519.317063][T11001] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 519.324276][T11001] CPU: 0 UID: 0 PID: 11001 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 519.334847][T11001] Tainted: [L]=SOFTLOCKUP [ 519.339146][T11001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.349177][T11001] Call Trace: [ 519.352434][T11001] [ 519.355346][T11001] dump_stack_lvl+0x100/0x190 [ 519.360011][T11001] vpanic+0x552/0x970 [ 519.363974][T11001] ? __pfx_vpanic+0x10/0x10 [ 519.368453][T11001] ? v4l2_fh_init+0x27d/0x2c0 [ 519.373108][T11001] panic+0xd1/0xe0 [ 519.376806][T11001] ? __pfx_panic+0x10/0x10 [ 519.381199][T11001] ? v4l2_fh_init+0x27d/0x2c0 [ 519.385854][T11001] ? preempt_schedule_common+0x42/0xc0 [ 519.391290][T11001] ? check_panic_on_warn+0x1f/0x90 [ 519.396389][T11001] check_panic_on_warn.cold+0x19/0x34 [ 519.401742][T11001] end_report.part.0+0x3a/0x90 [ 519.406489][T11001] kasan_report.cold+0xe/0x18 [ 519.411150][T11001] ? v4l2_fh_init+0x27d/0x2c0 [ 519.415807][T11001] v4l2_fh_init+0x27d/0x2c0 [ 519.420286][T11001] v4l2_fh_open+0x64/0xa0 [ 519.424593][T11001] em28xx_v4l2_open+0x11e/0x570 [ 519.429428][T11001] v4l2_open+0x1d2/0x490 [ 519.433649][T11001] ? __pfx_v4l2_open+0x10/0x10 [ 519.438389][T11001] chrdev_open+0x234/0x6a0 [ 519.442781][T11001] ? __pfx_chrdev_open+0x10/0x10 [ 519.447693][T11001] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 519.453999][T11001] do_dentry_open+0x6d8/0x1660 [ 519.458748][T11001] ? __pfx_chrdev_open+0x10/0x10 [ 519.463661][T11001] vfs_open+0x82/0x3f0 [ 519.467708][T11001] path_openat+0x208c/0x31a0 [ 519.472279][T11001] ? __pfx_path_openat+0x10/0x10 [ 519.477194][T11001] do_file_open+0x20e/0x430 [ 519.481679][T11001] ? __pfx_do_file_open+0x10/0x10 [ 519.486685][T11001] ? alloc_fd+0x476/0x790 [ 519.490990][T11001] ? do_getname+0x191/0x390 [ 519.495473][T11001] do_sys_openat2+0x10d/0x1e0 [ 519.500126][T11001] ? __pfx_do_sys_openat2+0x10/0x10 [ 519.505306][T11001] __x64_sys_openat+0x12d/0x210 [ 519.510133][T11001] ? __pfx___x64_sys_openat+0x10/0x10 [ 519.515484][T11001] ? do_user_addr_fault+0x8d6/0x12f0 [ 519.520749][T11001] do_syscall_64+0x106/0xf80 [ 519.525316][T11001] ? clear_bhb_loop+0x40/0x90 [ 519.529973][T11001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.535841][T11001] RIP: 0033:0x7fe8c22a7407 [ 519.540234][T11001] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 519.559818][T11001] RSP: 002b:00007ffec9629030 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 519.568207][T11001] RAX: ffffffffffffffda RBX: 00007fe8c29d1880 RCX: 00007fe8c22a7407 [ 519.576161][T11001] RDX: 0000000000000000 RSI: 00007ffec9629f1b RDI: ffffffffffffff9c [ 519.584126][T11001] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 519.592088][T11001] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 519.600050][T11001] R13: 00007ffec9629280 R14: 00007fe8c2b38000 R15: 0000564204dda4d8 [ 519.608013][T11001] [ 519.611276][T11001] Kernel Offset: disabled [ 519.615571][T11001] Rebooting in 86400 seconds..