last executing test programs: 6m19.836932782s ago: executing program 4 (id=2540): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, &(0x7f0000000080)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x1, &(0x7f00000000c0)) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x7) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000000640)={&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/179, 0xb3}, {&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000300)=""/49, 0x31}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f00000003c0)=""/87, 0x57}, {&(0x7f0000000440)=""/156, 0x9c}], 0x6, &(0x7f0000000580)=""/156, 0x9c}, 0x10001) r3 = syz_open_dev$MSR(&(0x7f0000000680), 0x3, 0x0) process_vm_writev(r0, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/132, 0x84}, {&(0x7f0000000780)=""/82, 0x52}, {&(0x7f0000000800)=""/230, 0xe6}, {&(0x7f0000000900)=""/204, 0xcc}], 0x4, &(0x7f0000000e40)=[{&(0x7f0000000a40)=""/160, 0xa0}, {&(0x7f0000000b00)=""/78, 0x4e}, {&(0x7f0000000b80)=""/80, 0x50}, {&(0x7f0000000c00)=""/62, 0x3e}, {&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000000d40)=""/202, 0xca}], 0x6, 0x0) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000000ec0)="320011b38390652873f631cacf1936cd9b62f40672b080e7a4254d845e9e33a4b52654b4aaf69fb2e5bd0a3470663d44b7c6873472c4a6d3e8a10e112f6c9f530d6b5539e7b2e9a9395de83fac164ef7733382e47fef94d6e2b576850a77eb5ec6810517a2fdbf968af7e199839296b30df40a911cb2c38b3acbf1315e7a666fbb32291610683f3137a4a840b7") r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000f80), 0x8) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000fc0)={0x9, 0x9, 0x706, 0xb90d, '\x00', '\x00', '\x00', 0x8, 0xeed, 0xffffffff, 0x9, "193a3cda7d7c6987e98aa1f36ad0773a"}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001100)={'batadv_slave_0\x00'}) sched_setscheduler(r0, 0x1, &(0x7f0000001140)=0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000001400)={0xbfd, 0x0, &(0x7f0000001340)=[{&(0x7f0000001180)}, {&(0x7f00000011c0)=""/235, 0xeb}, {&(0x7f00000012c0)=""/109, 0x6d}], &(0x7f0000001380)=[0xffff, 0x9, 0x0, 0x1, 0x6, 0x9, 0x8, 0xe1, 0x6], 0x3}, 0x20) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000001440)=[{}, {}], &(0x7f0000001480)=0x10) accept$phonet_pipe(r4, &(0x7f00000014c0), &(0x7f0000001500)=0x10) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0xb0, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x91}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x24}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x110}, 0x40040) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r4, 0x4112, 0x0) syz_io_uring_setup(0x2c70, &(0x7f00000016c0)={0x0, 0x5e2a, 0x80, 0x2, 0x318, 0x0, r4}, &(0x7f0000001740), &(0x7f0000001780)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f00000017c0)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01864c1, &(0x7f0000001800)={r5}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000001840)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000018c0)={&(0x7f0000001880)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000001900)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000001980)={0x7, 0x0, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000001ac0)={&(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x7, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000001b00)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000001c40)={&(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c00)=[0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000002240)={0x200, 0x6, &(0x7f0000001b40)=[r6, r7, r8, r9, r10, r11], &(0x7f0000001b80)=[0x0, 0x4, 0x2, 0xfffffff7, 0x0, 0x5], &(0x7f00000021c0)=[r12, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002200)=[0x8, 0x6a2, 0x9, 0x6]}) 6m18.870448514s ago: executing program 4 (id=2543): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200c01, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f00000001c0)=0xe) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1, 0x9, 0x4) 6m18.76902842s ago: executing program 4 (id=2544): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000a06000/0x2000)=nil, 0x2000, 0x200000c, 0x100030, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) getresuid(0x0, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x80ad}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x6, '\x00', @p_u16=0x0}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007e4c49e0046a3d7098d0e66bd36ac978f7b47cbf9a48d6c70406563ad853b2ea5848de526d646e1a24270d09db549c789205bdead8bbbde05b4b499b87035451285bda2f29607edfad8ebae982179c7f117bc5d1f689f9793e354692a94ccae56ef03e22d1a24aa55cfbacda9dcecc8331b15956da09a2a53af8c7855a14174227f2ee19accbbd1eadf802", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 6m16.833280367s ago: executing program 4 (id=2548): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{0xdddd2000, 0xeeee8000, 0xd, 0xf7, 0x6, 0x5, 0x1, 0xb, 0x0, 0xf8, 0xb, 0x29}, {0xffff1000, 0x1000, 0xe, 0x0, 0x3, 0x0, 0x3, 0x1, 0xa, 0x70, 0xb, 0x1}, {0x0, 0xa002, 0xe, 0x8, 0x29, 0x6, 0xf5, 0x7, 0xf4, 0x6}, {0x4, 0xdddd1000, 0xf, 0xc, 0x1, 0x0, 0x3, 0x9, 0x9, 0x1, 0x3, 0x12}, {0xeeee0000, 0xd000, 0x0, 0x5b, 0x8, 0x4, 0xb, 0xc, 0x8, 0x6, 0x2, 0x14}, {0x4, 0x9000, 0x10, 0x0, 0xdc, 0x3, 0xf8, 0x81, 0x1, 0x8, 0x0, 0x81}, {0x166672000, 0x0, 0x0, 0x5, 0x8, 0xfd, 0x1, 0xee, 0x9, 0xa, 0x80, 0x3}, {0xeeee8000, 0x6000, 0xc, 0x4, 0x5, 0x7, 0x2f, 0x0, 0x4, 0xd, 0x9, 0x3}, {0xd000, 0x5}, {0xeeeeb000, 0x1}, 0x1, 0x0, 0x6000, 0x404, 0x9, 0x9801, 0x1000, [0x9, 0x1, 0x5f, 0x3c4]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x1}, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file1/../file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file1/../file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) (async) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) 6m14.987557008s ago: executing program 4 (id=2552): r0 = socket$inet(0x2, 0x3, 0x100) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRESHEX=r0], 0x54}, 0x1, 0x40030000000000}, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 6m14.090944098s ago: executing program 4 (id=2556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2043, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYRES32=r2], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 6m13.71238985s ago: executing program 32 (id=2556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2043, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYRES32=r2], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 9.812161811s ago: executing program 2 (id=3703): r0 = socket$inet(0xa, 0x801, 0x84) setreuid(0x0, 0xee00) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9}) r2 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="cc", 0x1, 0x4004000, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 9.637878097s ago: executing program 2 (id=3704): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff9, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x9}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="f2f8f06b290eaaaaaaabaa218863"], 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000240)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = syz_io_uring_setup(0x2b06, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f0000ffd000), &(0x7f0000ffe000)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_FILES(r5, 0x14, &(0x7f00000003c0), 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000004c0)={[0xa, 0x806, 0x7000000, 0x2d6c00000000000, 0x8001, 0xfffffffffffffffc, 0xb3, 0x4, 0x80000000000b1d, 0xa, 0x1000000000, 0x81, 0x3, 0x5, 0xe5, 0x8], 0x3000, 0x3837c4}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.286937778s ago: executing program 2 (id=3712): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 6.479110483s ago: executing program 0 (id=3725): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x22, 0x2, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x4b, &(0x7f0000000080)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000014c0)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000480a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a3100000000090001009b3e9f83300e73797a3100000000200003801c0000800c00018006000100d10300000c00044000000000000000011400"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004040) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) read$ptp(0xffffffffffffffff, &(0x7f00000004c0)=""/4096, 0x1000) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0xfffffffffffffffd) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bff000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000740)={"d28cbffc70113aa16b365924c3128c89fe8764c41caa3ec7a095ce3692ae1fe3160c3dd483cc71d285c48c8fa445272281beb44357aa96da39f0ef45a90bfac537ba4c98038e0b871c2ba811d3d568ccdddd1e0e7edef9061d12bdd0fc1c83093613293d1779955c62df6a03c3a539051393b577bb6645c4ed2ddfd06df82c7359de2082e16a4c302d18db9ce698f22b519d55adbbe4881dda46ddbbab0a1ca428e404f0640e62eb7d76c8ca94cff34f26de20c2f44c22228eee44edcbec829ed8b5f24a8259fcc97d67b96441486cf9832274eff5271d3843178cd90827052ef8e6dee13ef4f8e23b8396f5bc4b03b8ee875350ac778233a13551f55cac915ce11f145063ef5b5111272d0859d6cdb62ab72a92f24d83ef5ff87aa8f6eae3986c403add562c0a17839921dea6186d3b71b3d466070a005541677a477392f9a499322ed2f09c6e1b401ad81bb6673274e7c344152c2617edc2f667329b51bcc9d235de56d8642823643e0107339044417e2708d10e7dafefb5b2e72f696e1dc37c48f3c9266c9c8d2e771aabd4b7e4e7c2bccde0345d5d43ad7a4d98e9e1e3e152784ca29d286fe783f3579055a428ab231b9e81d77bd8ca4007607cd2ff60953a2d68353c4cc677124b7431edca5f604841f3baa90d46235ddaa03f158dd78c219be7f0c53dddd4cea58ecac6cef53e7a5b347b0842bb163bd35e19d2ed1b67e63a7e82ac470619ae164c3949884286c101417e6deeff735b8b3b9109e47725bbd5c400b24489fec1afe6771d5c8871f7cd31e7390cef6dce398b8a1dd7213229d282cb581a71c04ca04e9eb516a197583ba8470b0df0b2158a076bf257520500a7bfb42766c883231c1a2a4527dabb5037f9fa00172bc8b9327494b553735a4ebbfb8c9e7f5034b442418c7490919f81308b4a73bd46d57e1ebcc3b6cf7d1ba20e55d06e40e5796e568c206d51adc1be7186cb80962e8dfa41c354acd9ad5fbf4c59b6fa6dd83aa9aa0a23210b057328efa4239b8211b3a5f21ce22a193eb93f69c4d525f53e733b397786d808b928297748a3d54e5bb71bab6139d5e2721d237f4c99896a2e398d049df2e9c63c424606fc73cece699407f3041826cc271a3cb44cc4d76ab77ddb15ef7dda76ddfa4830c5ba28cf7dcc154e88ef9f228a8158d6ae6fdc32ef2af1642e48d5218f10ba7c222e43da4e13f59e96ab4b467283b76d8b0c36665f02d943936041c00d7dbd2a3ab101aa56277b9ec5111428c047fb8b144f260b2fae62db101aad238ee50d222202969ed5929c2f8ab41e6e342ad1b0037be7e2d887f0563a722be94364dfe62482f7862da76fd58827712a1a80f69cc85f2fa9ba92cbfc48f7e4f11b2b87c71e6733a95d8ded91da74913fcf81bb1bb9cb8f380f402abf9df0990e0100750c49f9328238eced88d16068bce90b"}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0xfffffffe, 0x7ffffffd, 0xfffffff5, 0x0, [{0x86, 0x40, 0x3, '\x00', 0x2}, {0x22, 0xff, 0x5, '\x00', 0x10}, {0x35, 0x23, 0xb, '\x00', 0xfe}, {0x8, 0x1, 0x82, '\x00', 0x72}, {0x6, 0x1, 0x27, '\x00', 0x9}, {0x0, 0x8, 0xfd, '\x00', 0xa}, {0xcf, 0x20, 0xe8, '\x00', 0xe6}, {0x6, 0xce, 0x5, '\x00', 0xe}, {0xf2, 0x7f, 0x7, '\x00', 0x4d}, {0xc, 0xd, 0x0, '\x00', 0x3b}, {0x0, 0xe, 0x0, '\x00', 0x8}, {0x2, 0x6, 0x0, '\x00', 0x3}, {0x2, 0xc0, 0xa, '\x00', 0x4}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0x8, 0x5, 0x9, '\x00', 0xa9}, {0x6, 0x4, 0x8}, {0xff, 0x5, 0x6, '\x00', 0xda}, {0x6, 0xfd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0xff, '\x00', 0x6}, {0x9, 0x9, 0x7a, '\x00', 0x2e}, {0x2, 0x9, 0x4, '\x00', 0x5}, {0x2, 0x9, 0xc, '\x00', 0xc4}, {0x3, 0xff, 0x10, '\x00', 0x6}, {0x7, 0xa9, 0x1c, '\x00', 0xa}]}}) fsopen(&(0x7f0000000000)='jfs\x00', 0x0) 6.145237051s ago: executing program 2 (id=3727): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b900000000109021200"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 6.013336336s ago: executing program 1 (id=3730): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x200004) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000240)=r3, 0x1) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) read$FUSE(r4, &(0x7f0000000540)={0x2020}, 0xfffffccf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000547000/0x3000)=nil, 0x3000, 0xe) 5.967546789s ago: executing program 3 (id=3731): socket$packet(0x11, 0x0, 0x300) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x400000bce) madvise(&(0x7f000033d000/0x1000)=nil, 0x1000, 0x17) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}, {}], 0x2, 0x401, 0x0, 0x0, 0x0, 0x59}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) finit_module(r2, 0x0, 0x1) socket(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) close(0x3) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.569408288s ago: executing program 0 (id=3733): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)) (async) read(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r3, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000240)={"9a2435cd", 0xffff, 0x5, 0x3, 0xfffffff1, 0x3, "f9aae3d643fa6327c33b3d2d01d6fd", "1b69767c", "9c92d137", "ba7e420f", ["a823dae9807013bd41b9bbcf", "a7545b2af06550809fccc830", "7db0aa25979c90eca1437296", "b3ac7f43908e8af558413a93"]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x28, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xd}, @typed={0x8, 0x110, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x1}, 0x14008010) 5.5265861s ago: executing program 3 (id=3734): unshare(0x62040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000020ac050a034000010203010902240001012a40f20904000000030100000021000000012200000905810300000000009ae397e1a614af4af95f0ae6e689cd1ffe10b99dde025054d91107966722fa1b1ea32422ee156ada7461bc6de33dd44c9b2bf202a73880350ebba27dbf1d4dc296cd36742244e7c057f768a609b9bfd1eb643fed7717e20031a093ebde7a5e6ce40a74cb35aece87d5f0bef2e988c1e74ae5cf6d29163c383b5727f668ee137e59ada7eb72fbbcb00ffffd67a797f89c7147231cbcb8aa65d2aacb679e7f221c4535bc51e7b89ce620e4ac826fbcd3a96436bb1cb7b8"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2100000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000002c0012800e000100697036677265746170"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) unshare(0x62040200) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000020ac050a034000010203010902240001012a40f20904000000030100000021000000012200000905810300000000009ae397e1a614af4af95f0ae6e689cd1ffe10b99dde025054d91107966722fa1b1ea32422ee156ada7461bc6de33dd44c9b2bf202a73880350ebba27dbf1d4dc296cd36742244e7c057f768a609b9bfd1eb643fed7717e20031a093ebde7a5e6ce40a74cb35aece87d5f0bef2e988c1e74ae5cf6d29163c383b5727f668ee137e59ada7eb72fbbcb00ffffd67a797f89c7147231cbcb8aa65d2aacb679e7f221c4535bc51e7b89ce620e4ac826fbcd3a96436bb1cb7b8"], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2100000000", @ANYRES32=0x0, @ANYBLOB="150c0000000000002c0012800e000100697036677265746170"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) (async) 5.422171913s ago: executing program 0 (id=3736): syz_usb_connect$hid(0xe91dd6fcbee0befc, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0933334000e14b4501990001008a718261456e1a2d1da5b8ad0523613d"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001c40)={0x1c, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req={0x3, 0x1}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) socket$kcm(0x21, 0x2, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfdfffe0000000801, 0x10, 0xffdfffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfdfffe0000000801, 0x10, 0xffdfffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) (async) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="6e657720646566f5ffffffffffffff723a73797a20303030303030303030303030303030303430393300987cd4e88cc95dad46ed25a001000000010000002b39eefefa2bbeccd4a359574b654b750648bca53e332bbf14d09a9d3f1f40e3add555009c1babc7d80f49e2294dd9085195b8fd8467ca634caa79"], 0x2a, 0x0) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) 5.153117756s ago: executing program 0 (id=3738): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000032e000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000280)="0f01df0f01f8420f3066bad10466b8c80066efc4e149fccc66b8a2008ee0c4e1e971e5bc0f01c3c4a13171e3d4660f0d0f", 0x31}], 0x1, 0x24, &(0x7f0000000340), 0x0) 5.000372074s ago: executing program 0 (id=3739): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x8}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x8, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r4, 0xfffffda4) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r4, 0xfffffda4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80800}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x3}, [@generic={0x6, 0x6, 0x5, 0x4, 0x9dc0}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xa0, '\x00', 0x0, 0x0, r5}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x3}, [@generic={0x6, 0x6, 0x5, 0x4, 0x9dc0}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xa0, '\x00', 0x0, 0x0, r5}, 0x94) 4.643166365s ago: executing program 5 (id=3740): socket$nl_rdma(0x10, 0x3, 0x14) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x8b, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 4.524201059s ago: executing program 1 (id=3741): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x8001, 0x4, 0xa100, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (rerun: 32) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x18, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) (async) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) (async) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) (async) unshare(0x2c020400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) (async, rerun: 32) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) (rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) 4.514073149s ago: executing program 5 (id=3742): ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x183c81) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000001c0012800b0001006272696467057d36f86d09fb002a0001000000"], 0x3c}}, 0x0) sendto$packet(r4, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r9, &(0x7f00000007c0)}, 0x20) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x24, r10, 0x1, 0x70bd22, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) 4.385125145s ago: executing program 1 (id=3743): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r4 = eventfd2(0x0, 0x80801) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) io_setup(0x3, &(0x7f00000010c0)) io_submit(0x0, 0x2, &(0x7f0000002140)=[&(0x7f0000001040)={0x0, 0x0, 0x0, 0x5, 0x3871, r2, &(0x7f0000001100)="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", 0x1000, 0x5, 0x0, 0x5}, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x4, 0xcd, r1, &(0x7f0000001080)="e6c9b9879e1e1a09c090afccac5e4d", 0xf, 0xdbc, 0x0, 0x3}]) get_mempolicy(&(0x7f0000000180), &(0x7f0000000200), 0xffffffffb288fb00, &(0x7f0000ffb000/0x4000)=nil, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@acquire={0x178, 0x17, 0x300, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x41}}, @in6=@remote, {@in=@remote, @in=@local, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x20, 0x3a, 0x0, 0xee00}, {0x0, 0x0, 0x10001}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x0, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}]}, @mark={0xc, 0x15, {0x35075b, 0x6}}]}, 0x178}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d4a11beb90799b68"}, 0x2b) 4.306579816s ago: executing program 3 (id=3744): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x22, 0x2, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x4b, &(0x7f0000000080)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000014c0)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000600a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a3100000000090001009b3e9f83300e73797a3100000000200003801c0000800c00018006000100d10300000c00044000000000000000011400"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004040) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) read$ptp(0xffffffffffffffff, &(0x7f00000004c0)=""/4096, 0x1000) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0xfffffffffffffffd) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bff000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0xfffffffe, 0x7ffffffd, 0xfffffff5, 0x0, [{0x86, 0x40, 0x3, '\x00', 0x2}, {0x22, 0xff, 0x5, '\x00', 0x10}, {0x35, 0x23, 0xb, '\x00', 0xfe}, {0x8, 0x1, 0x82, '\x00', 0x72}, {0x6, 0x1, 0x27, '\x00', 0x9}, {0x0, 0x8, 0xfd, '\x00', 0xa}, {0xcf, 0x20, 0xe8, '\x00', 0xe6}, {0x6, 0xce, 0x5, '\x00', 0xe}, {0xf2, 0x7f, 0x7, '\x00', 0x4d}, {0xc, 0xd, 0x0, '\x00', 0x3b}, {0x0, 0xe, 0x0, '\x00', 0x8}, {0x2, 0x6, 0x0, '\x00', 0x3}, {0x2, 0xc0, 0xa, '\x00', 0x4}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0x8, 0x5, 0x9, '\x00', 0xa9}, {0x6, 0x4, 0x8}, {0xff, 0x5, 0x6, '\x00', 0xda}, {0x6, 0xfd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0xff, '\x00', 0x6}, {0x9, 0x9, 0x7a, '\x00', 0x2e}, {0x2, 0x9, 0x4, '\x00', 0x5}, {0x2, 0x9, 0xc, '\x00', 0xc4}, {0x3, 0xff, 0x10, '\x00', 0x6}, {0x7, 0xa9, 0x1c, '\x00', 0xa}]}}) fsopen(&(0x7f0000000000)='jfs\x00', 0x0) 3.449536236s ago: executing program 1 (id=3745): syz_open_procfs(0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtfilter={0x14d0, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xf, 0xc0}}, @filter_kind_options=@f_bpf={{0x8}, {0x148c, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xc, 0xfff0}}, @TCA_BPF_POLICE={0x1470, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x9, 0x846, 0x3, 0xe, 0x3, 0x6, 0x0, 0x7ff, 0x6, 0x5, 0x5, 0x6, 0x2, 0x5, 0x2, 0xec000000, 0x8000, 0x1800, 0x101, 0xffffffff, 0xc, 0x1, 0x7, 0x0, 0x6, 0x6, 0x6, 0xf3af, 0x10000, 0x5, 0x91a2, 0xa, 0xa7, 0x3, 0x1ff, 0x5, 0x0, 0x300, 0x80, 0x7ff, 0x9cb, 0x1, 0xffffff01, 0x3, 0x10001, 0xffff, 0xff, 0x5a1, 0x8, 0x5, 0x9, 0x5, 0x0, 0x200, 0xf, 0x2, 0x2, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x5, 0x800, 0x3, 0x0, 0x3ba3, 0x7, 0x8, 0x9, 0x4, 0x1, 0x2, 0x8000, 0x1, 0x7fffffff, 0xff, 0x3, 0x3, 0xff, 0x3, 0x7, 0xde8, 0x951e, 0x400, 0x2, 0x2, 0x5, 0x4, 0x5, 0x7fffffff, 0x2, 0x2, 0x1, 0x0, 0x8, 0x400, 0x0, 0x73, 0xd, 0x81, 0x9, 0x2, 0x7ff, 0xfff, 0xcab, 0x7, 0xed, 0x7, 0x3, 0x4, 0x10000, 0x4, 0x2, 0x0, 0xb, 0x53, 0x1, 0x4, 0x200, 0x32, 0x5, 0x8000000, 0x0, 0x0, 0x9, 0x4bf, 0x0, 0x8, 0x4, 0xf, 0x6, 0x9, 0x8, 0x1, 0x5, 0x80000000, 0x3, 0x3, 0xde, 0x8, 0x10001, 0x8, 0x1, 0x0, 0x10000, 0x5, 0x4, 0xffff, 0x7, 0x3, 0xc5, 0x2, 0x80000000, 0x0, 0x8, 0x5, 0x510, 0x0, 0xffffffff, 0x6, 0xc, 0x5, 0x800, 0x400, 0x4, 0x6, 0xfff, 0x5, 0x7f, 0x0, 0x0, 0x7, 0xf, 0x5, 0x1, 0x9, 0x1, 0x8, 0x380, 0x1, 0xe8, 0x200, 0xfffffffe, 0xfffffff8, 0x952, 0x0, 0x3, 0x4, 0x4, 0x6, 0x4, 0x7fffffff, 0x40, 0x7fffffff, 0x164, 0x8, 0x401, 0x80000001, 0xe1f, 0x2, 0x9, 0x3f218597, 0x0, 0x101, 0x1, 0xd4f, 0xffffffff, 0x2, 0x8000, 0x8, 0x400, 0x2, 0x5, 0x2, 0x2, 0x400, 0x2, 0x2, 0x3, 0xf, 0x0, 0x6, 0x7, 0x91, 0x9, 0x4f1, 0x1, 0x5, 0x1, 0xf1c, 0x80000000, 0x9, 0x200, 0x3, 0xc, 0x3, 0x0, 0xac, 0x1, 0x6e, 0x8, 0xffffff80, 0x1000, 0x4, 0x1, 0x2, 0x909, 0x80000000, 0x3, 0x6, 0x7fffffff, 0x66, 0xd7c]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x20000000, 0x4, 0x106a, 0x2, {0xf, 0x2, 0xfbbb, 0x80, 0x4, 0x9ebb}, {0x1, 0x0, 0x7, 0xc5, 0xc, 0x400000}, 0x1, 0x400, 0xe}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1f5, 0x7fffffff, 0x3, 0xfffffff7, 0x6, 0x2, 0x6, 0x3ff, 0x4, 0x5, 0x1, 0x7fffffff, 0x3, 0x10000, 0x3ff, 0x9, 0x3, 0x7, 0x5, 0x10, 0x1, 0x28d, 0xff, 0x8, 0x6, 0x1, 0xfff, 0xa, 0xfa8, 0x4, 0x1, 0xf, 0x80, 0x4, 0x9, 0x5, 0x2, 0xe, 0xffff, 0x8477, 0x80, 0x7, 0x1, 0x70, 0x5, 0x4, 0x3, 0x3, 0x4, 0xe, 0x6, 0x5, 0x3b, 0x7, 0x7, 0x7f, 0x200, 0x9, 0x4, 0x7, 0x7, 0x0, 0x4, 0xcdc, 0x10000, 0x3, 0x1, 0x264, 0x7c1, 0x9, 0x8, 0x7fff, 0x7f, 0x0, 0x8, 0x8, 0x2, 0x1, 0x400, 0x8, 0x31512f1, 0x1, 0x9, 0x7, 0x20000000, 0x9, 0x0, 0x74bca9f6, 0xf, 0x800, 0x8, 0xb73, 0x40, 0x7, 0x7f, 0x10001, 0x4, 0xf, 0x90ba, 0xfffffff8, 0x1, 0x3, 0x80000001, 0x0, 0x2, 0x8, 0x2, 0x4e6, 0xc, 0xfffffffd, 0x80000001, 0xe, 0x100, 0xb7, 0xc, 0x9, 0x5, 0x9, 0x5, 0x4, 0x2, 0x1, 0xfffffffc, 0x8, 0x5, 0xffff, 0x3, 0xfffffffc, 0x10, 0x7, 0x8, 0x4, 0x401, 0x2, 0xfffffff8, 0xa8f7, 0xfffffffe, 0x5e14095b, 0x9, 0x7, 0x8, 0x0, 0x3, 0xe, 0x5, 0x8, 0x4, 0x2, 0x4, 0x6, 0x9, 0x3, 0x8, 0x6, 0x4, 0x7, 0x19, 0x3, 0x20000000, 0x8, 0x4, 0x7fffffff, 0xdab, 0x100, 0x4, 0x90000000, 0x1, 0x9, 0x8, 0x3, 0x3, 0xf, 0x2, 0x8, 0xffffff80, 0x80000001, 0x4, 0x69, 0x6, 0x5, 0x5, 0x9, 0x6, 0x9, 0x30, 0x8e4e, 0xfffffffb, 0x18b, 0x7, 0x9, 0x8, 0x5, 0x1, 0xbdc, 0xffffff75, 0xf, 0x6fbad801, 0x95e, 0x9, 0xffff3a77, 0x3, 0x3, 0x6, 0x1, 0x9, 0x7, 0xffff0001, 0x8b, 0x400, 0x6a7, 0x1, 0x4, 0x3, 0xfff, 0x1, 0x2, 0x3, 0x5, 0xdd8, 0x6, 0x6, 0xc55, 0xffff, 0x9, 0xa, 0x9, 0x4, 0x5, 0x6, 0x48, 0x6, 0x1, 0x4, 0x1, 0x6, 0x0, 0x7fff, 0xecd, 0x0, 0x42, 0x401, 0x4, 0x1, 0x0, 0x5, 0xe, 0x6, 0xff, 0x101, 0x4, 0x0, 0x8, 0x77, 0xbc, 0xffff5a70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x61, 0x8000, 0x8001, 0x5, 0x8, 0x200, 0xb33d, 0x2, 0xc, 0xaaf, 0x2b7, 0x3ff, 0x8, 0x9, 0x9, 0x40, 0x33d, 0x7ff, 0xfffff9fd, 0x4, 0xf, 0x6, 0xc, 0x9, 0x2, 0x2, 0x1, 0x5, 0x7, 0x0, 0x81, 0x5, 0x9, 0x9, 0x998, 0x401, 0x1, 0x9, 0x1, 0x2d, 0x7f, 0x5, 0x9, 0x40, 0x10, 0x3, 0x66fe9b65, 0xffffffff, 0x5, 0x5, 0x3261, 0x1, 0x6, 0x7fff, 0x4, 0x0, 0x6, 0x822456c, 0xfec9, 0x7, 0x80000001, 0x4, 0x8, 0x200, 0x5, 0x800, 0x0, 0x80000000, 0x3, 0x1, 0x3, 0x1c1eb242, 0x7, 0x4, 0x9, 0x7, 0x0, 0x8001, 0x3, 0xf, 0xbd9, 0x81, 0x47b, 0x6, 0x3, 0x9, 0x4, 0x5, 0x3, 0x7ff, 0x2, 0xffff7fff, 0x2, 0x1, 0x6, 0x80000000, 0xad30, 0x3, 0xfffffffd, 0x41, 0x0, 0x5, 0x2, 0x7, 0x522b, 0x888, 0x80000000, 0x4, 0x7f, 0x45, 0x6, 0x7, 0x8, 0x2, 0xfffffffb, 0x1ff, 0xfff, 0xb, 0x416, 0x0, 0xda, 0x3, 0x0, 0x9, 0x8, 0x0, 0x0, 0x3, 0x7, 0x175, 0x9, 0xf, 0x1000, 0x1ff, 0xb, 0x8, 0xd728, 0xb, 0x4, 0x7fff, 0x7c, 0x400, 0xc2, 0x2, 0x6, 0x1, 0x6, 0x0, 0x4, 0x2, 0x4, 0x3, 0x1, 0x8, 0x9, 0x4, 0x0, 0x0, 0xffff8001, 0x3, 0xa56, 0x8, 0xd, 0x5, 0x5fb9, 0x6, 0x6a70, 0xfff, 0x9, 0x3, 0xe5, 0x3, 0x80000001, 0xfffffffc, 0x1, 0x94cb, 0x0, 0x0, 0x9, 0xfffffff6, 0x5, 0xfffffe00, 0x5, 0x8e, 0x100, 0x7, 0x200, 0x3, 0xe, 0x2, 0x1, 0x7, 0x6, 0x6, 0x1400, 0x6f8b, 0x9, 0x7, 0x7, 0x20b, 0x1, 0x40, 0x3, 0x56, 0x3ff, 0x100, 0x6, 0xfff, 0x6, 0x7f, 0x2, 0x5, 0x9, 0x1, 0x7, 0xed7e, 0x29f, 0xfffffff8, 0x3, 0x5, 0x9, 0x487, 0x7, 0x5193, 0x80000000, 0x5ff6, 0xfdf0, 0x0, 0x9, 0x0, 0x5, 0x2, 0xfc, 0x3a, 0x8, 0x8000, 0xae57, 0x8001, 0x1ff, 0x1, 0x6, 0x18346041, 0x40, 0x0, 0x101, 0x1, 0x2fa, 0xffffffff, 0x6, 0x3, 0x40, 0x1, 0xb85, 0x80000000, 0x5, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x97, 0xffff1f71, 0x1, 0x2, 0x9, 0x2, 0x0, 0x4, 0xdfa, 0x2, 0x7, 0x24000, 0x9, 0xc, 0x2, 0x7, 0x4, 0x2, 0xfff, 0x1, 0xc9d6, 0x5, 0x4, 0x52d8, 0x2f0, 0x7ff, 0x8, 0x0, 0x100000, 0x9, 0xc8, 0x7, 0x5, 0x7, 0xffff, 0x7fa, 0x49e8, 0xe, 0x7ffe, 0x7, 0x4, 0x101, 0x7, 0x4, 0x0, 0xbcd4, 0x4, 0x3, 0x8, 0xf4a1, 0x80, 0x0, 0xa, 0xad36, 0x8, 0x4, 0x5, 0x4, 0xb, 0x1000, 0x4, 0x7, 0x2, 0x1, 0x9, 0x85f, 0x7f, 0x1000, 0x8, 0x401, 0x3, 0x9, 0xa96, 0x1, 0x9, 0x1, 0x2, 0x4, 0x2, 0x3, 0x2, 0x2, 0x80, 0x1, 0x8, 0xa, 0x80000000, 0x842, 0xc, 0x10000, 0x7, 0x6, 0x9, 0x7, 0x7, 0x9, 0xb, 0x6, 0xa, 0x3, 0xca, 0xe8, 0x3, 0x5, 0xd, 0x3, 0x2, 0xd, 0x636, 0x2f92, 0x72, 0x7, 0x400, 0x1, 0x2, 0x3, 0x3, 0x6, 0x3, 0x1d, 0x400, 0x10, 0x798, 0x8, 0x2, 0x0, 0x4, 0x0, 0x8, 0x7ff, 0x7, 0x6, 0x4, 0x7, 0x44, 0xfffffffa, 0x1, 0x7, 0x8, 0x8, 0x364639e3, 0x8a, 0x1, 0x4, 0x6, 0xc1, 0x5, 0x6, 0x5, 0x6, 0x1, 0x6, 0x9, 0xff, 0x3, 0xbba, 0x3, 0x0, 0x1, 0x1, 0x400, 0x3, 0x8, 0x753, 0x7, 0xf, 0x4, 0x5, 0x2, 0x98, 0x100, 0x0, 0x5, 0x0, 0xc4, 0x5, 0x3, 0x6d, 0x1, 0x3, 0x7ff, 0x4, 0x101, 0x0, 0x7fff, 0x80, 0x4, 0x7ff, 0x89, 0x7, 0xff, 0x0, 0x4, 0x2, 0x1, 0x7, 0x2, 0x100, 0x10, 0x5, 0x10, 0xffffffff, 0x7, 0x3, 0x7, 0x9, 0x800, 0x2, 0x3, 0x4, 0x2, 0x0, 0x4, 0x1, 0x4, 0x7, 0x80, 0x4, 0x8, 0x1bb0, 0x81, 0x10, 0x80000000, 0x7ec0, 0x0, 0x1, 0xd, 0x5, 0x0, 0x2, 0x2, 0x82, 0x5, 0x7594, 0x3, 0xe56, 0x9, 0x2a, 0x84f7, 0x1, 0x401, 0x9, 0x1000, 0x8, 0x8, 0x1, 0x7, 0xc, 0x1, 0x8, 0x8001, 0xfe, 0x5a, 0x6, 0x81, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x18c8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x4, 0x2, 0x8000, 0xc0, 0x0, 0xffffff8f, 0x1, 0x5, 0x81, 0x0, 0x5, 0x0, 0x4d7, 0x8, 0x4, 0xcad, 0xfffffff5, 0x7, 0x7e7, 0x2b, 0x9, 0xca, 0x3, 0x101, 0x83d, 0x6a, 0xa, 0x8, 0x101, 0x1, 0x0, 0x5, 0x5, 0xffff, 0x40, 0xfffffeff, 0x8, 0x99, 0x8, 0x80, 0x8, 0x7, 0x6, 0xffff, 0x1, 0x5, 0x1, 0x7, 0xffffff00, 0x9, 0x101, 0x1, 0x7, 0x8, 0x2, 0xee22, 0x7a5, 0x7, 0x3, 0x5, 0x393, 0x7, 0x1, 0x3198, 0x6, 0x4, 0x3, 0x5, 0x4, 0x4, 0x0, 0x194, 0x19f, 0x100, 0x2, 0x1, 0xfffffffa, 0x1, 0xe, 0x545, 0xef3f, 0x4ca1, 0x80000001, 0x5, 0xb852, 0x400, 0xe, 0x0, 0xfff, 0xa, 0x1, 0x9, 0x5, 0x3, 0x200, 0x1000, 0x2, 0x8000, 0x8, 0x7, 0x3, 0x55, 0x1, 0x10000, 0x1ff, 0xff, 0xf, 0x101, 0xff, 0x9, 0xfff, 0x0, 0x3, 0xcb, 0x20, 0x7fff, 0x9, 0xcf4, 0x200, 0x8, 0x800, 0xfffff2ae, 0x0, 0x0, 0x8, 0x1000, 0x1, 0x80000000, 0x9, 0x2, 0x75, 0xfff, 0x1, 0x2, 0x1, 0x6, 0x2ae00, 0x7, 0x6, 0x7, 0x7, 0x692b, 0x8, 0x680, 0x101, 0xffffff24, 0x1, 0x2, 0x7, 0x3, 0x0, 0x101, 0x9, 0xb, 0x1, 0x7, 0x4, 0x43b564f9, 0x4, 0xec8e, 0xa8, 0x3, 0x3, 0x6, 0x8001, 0x7fff, 0xfff, 0x80000000, 0x2, 0x9, 0x2, 0x0, 0xfffffff9, 0x8, 0x0, 0xee12, 0x2, 0xe0ae, 0xff, 0x2, 0x23, 0xff, 0x6, 0x0, 0xc, 0x6, 0x156a, 0xfffffffc, 0x9, 0x7, 0x7ac0b988, 0xc, 0xfffffffe, 0x8, 0x0, 0x1, 0x7b6, 0x5, 0x102, 0x5, 0x5, 0x2, 0x6, 0x10000, 0x5bf, 0x0, 0x8, 0x4, 0x400, 0x5, 0x81, 0x3, 0xa9, 0xffffff80, 0x3ff, 0x5, 0x5460daaa, 0x2, 0x7, 0x10001, 0x3f, 0x786, 0x3, 0x101, 0x5, 0x8, 0x101, 0x6, 0x0, 0x400, 0x401, 0x2, 0xfffff001, 0x2, 0x8001, 0xd, 0x80, 0x5, 0xcbb91953, 0xe9cc, 0x1, 0x1c0000, 0xe, 0x54, 0xe, 0xff, 0x3ff, 0x80000001, 0x8, 0x7ac2e549, 0xc, 0xa, 0x1, 0x8, 0x4]}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffe0, 0xfff1}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xf3211e0e350c6e16, 0xfff3}}]}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x2}}]}, 0x14d0}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async) recvmmsg(r9, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) (async) memfd_create(0x0, 0x1) execveat(r2, 0x0, 0x0, 0x0, 0x1000) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x1, 0x3, 0x8}, 0x0) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 3.410344413s ago: executing program 5 (id=3746): socket(0x2, 0x80805, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000200)) openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000008400000008000000fe800000000000000000"], 0x20}, 0x41) r1 = syz_clone(0x2a218480, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3") r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x8000, 0xef) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4ba0}, 0x18, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) creat(0x0, 0x0) r7 = creat(&(0x7f0000000380)='./file0\x00', 0x98) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000080)='P'}, {&(0x7f0000000040)="90ddd5", 0xfffffe7e}], 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve1\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.117714621s ago: executing program 0 (id=3747): r0 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(r0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) r4 = accept$unix(r3, 0x0, &(0x7f0000000600)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8ae7, 0x0, 0x0, 0x0, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x1, 0x3, 0x4, 0x3, 0x9, 0x18, 0x1}]}, &(0x7f0000000680)='GPL\x00', 0x3, 0xf4, &(0x7f00000006c0)=""/244, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x7}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x7, 0x7ff, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0x1, 0x1]}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=ANY=[@ANYBLOB="110000000dba7c450600000006000000c7000100", @ANYRES32=0x1, @ANYBLOB="e100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/24, @ANYRES32, @ANYBLOB="59111d58546d49174f69acdf341a546afe296d6037f667945025d4da04ef6859351f4c6d10ffa2e2d8f7a85724d9c32742479ce189d4d3bfb79a56db32e3163c7cd833240f22b3d502000000fbc4cc18e995b6020d293852101887860c2719312d20815e8d3fa5c97eb023ed04e88628ba3d9273b67c2a4d4ff3def09aba355466855671cfd1a34583b0517fa85ef626e21a2c80c57ea8c21890f1c8e8296c294d9bb56d432315797bbd99777e5bba71178a054e221afc08bdde6690ff5bda18844362309d21c4a0526b5cb41ef9075c3b99dab5a88323f8eec43e91c201194f179349fd34af091cf0f181b41aa12538a9b9b60e"], 0x50) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000009c0), 0x40000, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) sendmmsg$unix(r3, &(0x7f0000002c80)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000340)="a2f4f1ba976ed15e651912cd69794b2cacbb170a0568b05e0cefe545388299eb115781c4d5ce52349395b0a7ca6bd29389b9a6713f0bd318c18a8d8a162606cca5fdbab922068e80981d2e040d7de1fc77980b1659721d12acabbec99e90c8128039fdd79f4e4249dc76703d0d1f69f168ea33f9ba06d3a46cba1cfb1184b14817cf2517df04f4691664be06f61deb3474f04cc4ced2abdc53b56d547caf1b9f8fe71c2c5d2e4ce440aa9b45199278f982ad814f5eeefd23326dcc9941cd7ba2f6b8a86da309c0edcf0fec89164ee24f6a72144d3056cd0d8d6468471640ef328acf216792e16c79e8b05e465e68e816d6", 0xf1}, {&(0x7f00000004c0)="ab22d4d2e87b02c83c61cca227ad76bcf962acd2c1c9565724a471368d90ed23e1148d7658bb9364219c94c18aa02ce9a473d2e66336e413c643b46f770bbde58559b165ff15901d696c", 0x4a}, {&(0x7f0000000540)="d28e647029a0d75193f1b4d3f3ab9e0267c14b75c0912820942997e518baef9e8d325f0dff7a96d599a38fa0076f40b5cd2e493248467df9ee4bfb353299a453c01016c886860a38df7efe8dc63b1c87eb80c38d9a411022daee90bf57e7bf321c1f657233347f5365cdf740a30bd5d7796377fdf53e1935e8d34d8079ba118503259836d64170913703d624dc9811b08d7eb2c5eec942733c16dd53dd4ac8fd825e42c3acf28b23e75294f2a422ea7781e1647848f5", 0xb6}], 0x3, &(0x7f0000000a40)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r6, r3, r3, r7, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x78, 0x20000000}}, {{&(0x7f0000000b00)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000001bc0)="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", 0x1000}], 0x1, &(0x7f0000002c00)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r7, r2]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r5, 0xffffffffffffffff]}}], 0x70, 0x10}}], 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket$key(0xf, 0x3, 0x2) recvmmsg(r11, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r11, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r12, &(0x7f0000000a00)=[{&(0x7f0000003140)=""/237, 0xed}, {&(0x7f0000002f80)=""/166, 0xa6}, {&(0x7f0000002e80)=""/229, 0xe5}, {&(0x7f0000000940)=""/26, 0x1a}], 0x4, 0x0, 0x6951, 0x0) r13 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r13, 0xc0045516, &(0x7f00000000c0)=0x7f) r14 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0x2020) readv(r13, &(0x7f0000000280)=[{&(0x7f0000000b80)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r13, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, r14, 0x0, 0x502, 'syz0\x00', 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0) 2.975001335s ago: executing program 3 (id=3748): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYBLOB="01000000000004000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpgid(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x482801) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$sock(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="4d2b3d2b21560828aba245f8f45922a82e2b2971814f964f6f7a2569bd6566580b19f0f8c6f38bdd2b85a8369545b24e3c12b7ad91d190f4", 0x38}, {&(0x7f0000000600)="db140a5fd1ef83be45e2b44e05e6d6ed0b84ea8574fa573d393c82326fa6411c2c60e14b4f9ddc3da4b4620df8290c715489df43bfeb9c81939f12fa32e5f0f15cc5879eb320decd12672767a674adbded231808f9dc8a4c597802da0a3ea30b47c872b60e8be72a545033c9054a487623609e93a6f004b473d42c8ac2cb1006d2268b4a99c0a0753a08fbb3a8f17e8f24349902eee463105bec48180689b8ed2dec6aecf9f33ddbf21d33e40492bd5460ab423ac075241fae84788dccd22a2ae090f236d315a9bac50e0e5118a3121c1078f1a573c2575204253859", 0xdc}, {&(0x7f0000000200)="7a900c9533", 0x5}, {&(0x7f0000000300)="871874d74f911bcfd81d", 0xa}, {&(0x7f0000000380)="4bacfe4459dc1ec4a631b23aff3dbeb95291f4f6d1235ef666", 0x19}, {&(0x7f0000000400)="5eb3a8bd3de124c7eb91b50971eecf8472d8cbeabdfa4c2557b347bfad286c2716bd907686dde22657d51766e84c6f2bcedc0c5d8dd7c254870f4cb8376a312673a93154aea23b86dffb41dae7f18214402088640e54f3edadb3b8f0ba721ca5f692ee99c114934e7430ef01619341cf0ef2ad31b1233427efc6b9af85d7bbbf9806a96c62480ca7635f9a18203c34898617a8481a23ce3a8b11c2b7d3a8beb529e09f5bb7bda3436a1a2ec6d745c54f28748595d85d42", 0xb7}], 0x6}, 0x4000880) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.26603794s ago: executing program 5 (id=3749): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x126) statx(r0, &(0x7f0000000040)='./file0\x00', 0x2800, 0x200, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0xfc, 0x2, 0x100, 0x40, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x7800, 0x4, 0xd187}}) sendmsg$xdp(r2, &(0x7f0000000680)={&(0x7f0000000280)={0x2c, 0xf, r3, 0x4}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="86a90934bf8148bfe4dbea1a21d61d54bb8fdfe91ce4dbfa704bc995f33be528287bb4db", 0x24}, {&(0x7f0000000300)="ad8c78f57b0fdf2bc50f237760489218f52c7ba56c1742aec126a21c4b4e41bec386cfbe2515f0d4aacd2cad2363d54a8e88e2efcc82c8372c702fb1df56da1671f4db754dd7a2739fe41203e22ec25f09f8cc841ba25d8b2b8d8288012bbbc6228c36c281ceedd90678f7567302c2fb5400d1074cc1b1c8489585b605a4a9e7a072519f1d8f412c", 0x88}, {&(0x7f00000003c0)="c4815a50c58651c56a8a586e2810bb9528964b7526866786856c7c015a2051d21e5065e51ffb453bcec372cff230ad386f64e84154bbeb64dc0c7d40d4a0bd3ac6bcf7f576f7481f1f3fdb7ec1f9a8132820700e4296b95406bd514e223734c3a4ec40e6d1e0727aa3effeaaf45e126ef20ee03be8b84e903d1718db7e92e656d3c7d4d0891e876b01f283ca6e9dca7053bb1a898fd3119abffd3c6c05b066604324f22de51fbd6d6c8e", 0xaa}, {&(0x7f0000000480)="8526ee2773345e5b0b388ccbaaccf3b1560abe39f4da51698e4ede0202a0d09de9dd49104d282671e7fac42fca70a8c04885d82d80f1b2b7f537b8b659a9384b5edec164980a5e26a8346b5b645b06", 0x4f}, {&(0x7f0000000500)="a2f4759cc5e4d9e7006bdfd59712b8e6964bed71889be7dde758abd0abe3168fee02175965def2a150c2b7b9564cf725035739d85efe67e1f427787b68afc2c4224071f267ff4d9b57d1c1cb7b6acddab9fd796ca0aece8788700978cf674acb76ef1f0652a605e2a236618e2e40764cb7", 0x71}, {&(0x7f0000000580)="b1df5c679b80766ef4bc328b2a95f37f717208168537a8737ece4d5071b42633ed3ddf3577e0c700ce65627588", 0x2d}, {&(0x7f00000005c0)="9755405aade20ee8af918b5a709403a53aedcafba8888e6495", 0x19}], 0x7, 0x0, 0x0, 0x4000810}, 0x40) r4 = fanotify_init(0x4, 0x2) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x200300, 0x0) fanotify_mark(r4, 0x2, 0x8000001, r5, &(0x7f0000000700)='./file0\x00') setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000740), 0x4) syz_usb_connect(0x2, 0x41e, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0x68, 0xbe, 0xe2, 0x8, 0x1bc7, 0x1033, 0xeb74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40c, 0x1, 0x5, 0x2, 0x40, 0x7, "", [{{0x9, 0x4, 0x61, 0x2, 0xc, 0xff, 0x2b, 0xa, 0x9, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'r'}, {0x5, 0x24, 0x0, 0x1b}, {0xd, 0x24, 0xf, 0x1, 0xd0bf, 0x7fff, 0x2035, 0xb}, {0x6, 0x24, 0x1a, 0x2}, [@country_functional={0x10, 0x24, 0x7, 0xb, 0xfffa, [0xfff8, 0xfff9, 0x8, 0x401, 0x6]}, @acm={0x4, 0x24, 0x2, 0x4}, @acm={0x4, 0x24, 0x2, 0x11}, @mbim={0xc, 0x24, 0x1b, 0xfcf7, 0x1, 0x6, 0x6, 0xe46, 0x40}]}, @generic={0x72, 0x31, "f48186610836dddc5069601d6010c4e36f142d38229e6db312cfd0472ec616aaa8d033ab328456eb99030907b2ff1926c960243c56ce04d1dee93e065a185b9bb84185b7b65fee1420321440dc37a1a020b88c58e22c72a3c9a55c49c598e2e18a15bf23dfbd7ac9f0f23b87531481b9"}], [{{0x9, 0x5, 0x8, 0xc, 0x40, 0xe, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8}, @generic={0xb5, 0x8, "4d20c809afe07494a0a3e1c804b38e19bfafda5cf623e98cab6c81e53321c7b63eb35d305314f945858f9b4dc9796c0f705f2e8bac0c938465bdb0669a610fb1cbc2f9629c81347d521f8a86c9d382fac515067bf48b80b10ffb9429f249de2c933c8cba68b29474e5cbba5bb6d4b7fd41cf36ac42b3dee9c1442a5b38af6eda1b31871c459e2941dc316b519772cbdb33c0e9ec5fa41910dff657297e95b7275e14b4b6eeb8bbfda00284be9aae47c811c841"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x0, 0x1, 0x10, 0x83, [@generic={0x35, 0x14, "3e77e1d7664cc04e9c942f0b7cbebb3c3c7e71f9cc67e9e7a6404bcd4e860211de8628dd49dd30dec55b6774cff00cfa9fb57a"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xed, 0x9}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0xb, 0x4, 0x2, [@generic={0x1e, 0xb, "85bc25d733ef6cb959b95c67a15ef67b408d2f685550b6d1be4824d4"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x3, 0x11, 0x4, [@generic={0xf8, 0xa, "ed299eb11ce26cf6b76a73baf942e0e61d2125977597f126f14a4099ae18faf1e960840e7b7940200f4ffeefa591230beaa07aae1987f6e9f73ecbf6dd4c60def8bfc584ec03628b730c3a5896a0fcb5112fc786414a37ca0c5dd8a7445818614fb15fc522f6b8668f1dacaf62bcc6434b58f55cdd5d36fd52ae945c8a6fe5a817141fe4f2699be801289aaaa7b64da2fc23048db3c031616e80c5f698da543122a852793a870edc18cb1c7798ca05f2404e252dbcbee679b0f8fb05ae3486dae1cf91f842c4fdb8063a988888d4c325c3694366842a8bc1092c693416528b8beaa1e8c173638a1d07f5851b7877e8d339bf3a3ddfb1"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x40, 0x8, 0x35, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x5, 0x4, 0x81, [@generic={0x3c, 0x9, "66a6cd2444f64515c5f0261eafc0e0eef16b728c5d3211d35fefb4e483bca4002ea1e6ed690d8906ad348e0d3e991c512bdbd8ceed982075a785"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x8, 0xd, 0x12}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x4, 0x1}}, {{0x9, 0x5, 0xa, 0x1, 0x3ff, 0x2a, 0x2, 0x3}}, {{0x9, 0x5, 0xa, 0x4, 0x200, 0x5, 0x8, 0x40, [@generic={0x7b, 0xf, "8f672f8b207a7ad511ba8eb6216258dcd60dfc6e006bd523a94b36dbe1d74cc4dcd7b94c2316b898a211cdaba22d0b043a086013a3ab6f2303d14e342f11386d7e86801d2b929a7c340961fde5162dd8b3be860c1443792d97da60c76625dc6236eb879cb6a1e6d139320521a55824fa34e3fe305dc4ddb34f"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0xe6, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x250, 0x80, 0xd, 0x6, 0xff, 0x9}, 0xa7, &(0x7f0000000c00)={0x5, 0xf, 0xa7, 0x1, [@generic={0xa2, 0x10, 0xa, "f72b3c22173caa2d067689b6c391e85852f1cc2ae308722c7738cf73c1206071501e328110aa42168be5871b461a7480998c2cde4f127f4c2d6c623765c5992cb0ae33c08d282c46238a0145c474463fc48159bb686eb4d7f635190efcb8cabbef132c948cc5471327f84eb518fce8bef2ca336ba9175497b63487748e53a6480497723a57c000593870e789c960226862acbbfa046e632d74c38f0c208ccb"}]}, 0x6, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0xc04}}, {0xc8, &(0x7f0000000d40)=@string={0xc8, 0x3, "f4073c4b51fda16287b4cec121509e41b18b150909d11669aa127c6311bcd40d2ba9b08f7ac2f28affd8b85569b49602db3356e53942e40332a0499f40fb3e1d0a91f1a744d28413d4fcfdaef6a1c2713487ccade93e7f294151cd3acdd2088856a166fb31f6b5f5dcf83ab14ef393860ba3acc4c3aab826790e3056a290e0dcf365c8b829072606d4799debaafc917fc60366412455d270ba6351d59735b68cbaf953f323649ddd99fe6dff600851933f6c6529e6b167cc8727a9762c44eb366ae93d4f1b7c"}}, {0xb, &(0x7f0000000e40)=@string={0xb, 0x3, "c3156be929c8eedcb6"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x41a}}, {0x6f, &(0x7f0000000ec0)=@string={0x6f, 0x3, "5ebc2f144b246ca286447521922974c514d1cfbfcc52a3923ead300e93a1aaf77f9449cd5088fc2ffa05de8b567432b1233f219e16ac1863c63feaebb949bd063f2883c5480e2b776e8ea4466061411a98eadff9de2006417fa2747fe038114acb86eec34db6ef5d327a4bd5b6"}}]}) openat$tun(0xffffffffffffff9c, 0xfffffffffffffffc, 0x248100, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000fc0)={0x1, 0x7fffffff}) getpid() r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000001000)={0x1, 0xc3}) ioctl$NILFS_IOCTL_GET_BDESCS(r6, 0xc0186e87, &(0x7f0000001080)={&(0x7f0000001040)=[{0x4, 0x3755, 0x29e8, 0x80000000}], 0x1, 0x28, 0x0, 0x9}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x68, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_DATA={0x42, 0x1f, "32257c57aacbb66b43ce984eb3783e6092c19eb162da86496763e755186da782caa3c654e5e368424d7b040faf950cab250a1665cd15c2979ac7630a1239"}]}, 0x68}, 0x1, 0x0, 0x0, 0x2400c011}, 0x4860) fspick(r0, &(0x7f0000001200)='./file0\x00', 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x31, &(0x7f0000001240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @generic={0xe, 0x9, 0x0, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2835}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x50, '\x00', r3, 0x25, r5, 0x8, &(0x7f0000001440)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001480)=[r5, r5, r2, r5, r1], &(0x7f00000014c0)=[{0x1, 0x5, 0x1, 0x7}, {0x2, 0x2, 0xb, 0x9}], 0x10, 0x10001}, 0x94) sendmsg$nl_route(r2, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)=@setneightbl={0x5c, 0x43, 0x100, 0x70bd28, 0x25dfdbff, {0x1c}, [@NDTA_NAME={0x6, 0x1, ',\x00'}, @NDTA_PARMS={0x2c, 0x6, 0x0, 0x1, [@NDTPA_PROXY_DELAY={0xc, 0xd, 0x4}, @NDTPA_LOCKTIME={0xc, 0xf, 0xcb}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x9f08}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x800}]}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x5}, @NDTA_THRESH3={0x8, 0x4, 0xa83e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{r5}, &(0x7f0000001700), &(0x7f0000001740)=r1}, 0x20) syz_usb_connect$uac3(0x0, 0xc0, &(0x7f00000017c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae, 0x3, 0x1, 0x10, 0x0, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x26, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x1d, 0x1}, [@multiply_unit={0xb, 0x24, 0xd, 0x8, 0x81, 0x1, 0x7}, @mixer_unit={0x8, 0x24, 0x5, 0x4, 0x1, "fc6276"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}, @as_header={0x17, 0x24, 0x1, 0x9, 0x5, 0x101, 0x0, 0x0, 0xf8, 0x3, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x0, 0x5, {0xa, 0x25, 0x25, 0xfffffffb, 0x10, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x80, 0x5, "812929405e9db7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xc, 0x9, 0x4, {0xa, 0x25, 0x25, 0x8, 0x3, 0x8}}}}}}}}]}}, &(0x7f0000001ac0)={0xa, &(0x7f0000001880)={0xa, 0x6, 0x200, 0x4, 0x1, 0x2, 0x20, 0x6}, 0xc7, &(0x7f00000018c0)={0x5, 0xf, 0xc7, 0x3, [@generic={0xa4, 0x10, 0xb, "5aea8e1ea8cb033f1a9b246bfb16c3af0853295a545a1dfb12dc479854431e5ce1b4a126d59e2291af2c26be764588539462b65a4077afd6c6301ac7db9c1dd4bc671db4ef3dbd9815d587c78ddd88d93f97f9552ade68e4dcdfdd68ea731d470757d11cccd22ced12fb9869c428aef1899001fd2020dbe8525d18e0c3ff032396de7b9baf656128325f2984a21a59ad455e0b1a29a3ece166b021b48e3e224690"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5e, 0xc1, 0xfff}, @ss_container_id={0x14, 0x10, 0x4, 0xd9, "b78f33c45f2c2c7d701ca4a1e3e16e4d"}]}, 0x4, [{0x33, &(0x7f00000019c0)=@string={0x33, 0x3, "f497a6c08dcae467d3a4c14aa191cd01d7a71abb82c6afacd4a00c2e03e2acf1d0f24b7b193ba7bfb83d1ed9b57a8e43e0"}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x412}}, {0x23, &(0x7f0000001a40)=@string={0x23, 0x3, "b407e1d5c4f3e7d241384176507a36db6f67faae9bebd8d57aea66880051b9268e"}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x40b}}]}) recvmsg$kcm(r1, &(0x7f0000001d40)={&(0x7f0000001b40)=@generic, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/192, 0xc0}], 0x1, &(0x7f0000001cc0)=""/106, 0x6a}, 0x10140) syz_emit_vhci(&(0x7f0000001d80)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_le_read_buffer_size={{0xf}, {0xd, 0x13d5, 0x8}}}}, 0xa) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000001dc0)) openat$comedi(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/comedi2\x00', 0x80884, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000001e40)={0x10004, 0x2, 0x7000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_usb_connect$uac1(0x0, 0xf3, &(0x7f0000001e80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x3, 0x1, 0x40, 0x10, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x38}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x1ff, 0x2, 0x5, 0xee}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x8000, 0xe, "9f68414300"}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x2, 0x5, "8d"}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x9, "e8ab"}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x6, "59e4bfd4f1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x7, 0x8, 0x0, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0xb, 0x2, "a9", "0dec54"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xf4, 0x5}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x7, 0x9, "85988990"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0xd1, 0x4, {0x7, 0x25, 0x1, 0xc, 0x0, 0xae9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x7, 0x4, "d7fb9b"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xe, 0x2, 0x9, 0x4, "00fb"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x6, 0x10, "df30e0b1"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x91f, 0x1000, 0x6b, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x4, 0x3, {0x7, 0x25, 0x1, 0x0, 0x3}}}}}}}}]}}, &(0x7f0000002140)={0xa, &(0x7f0000001f80)={0xa, 0x6, 0x201, 0x6, 0x0, 0xf3, 0x20, 0x1}, 0xdf, &(0x7f0000001fc0)={0x5, 0xf, 0xdf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x3, 0xfffd}, @generic={0xd3, 0x10, 0x0, "95466360a2942bc27d72630e1e5b733b99d96b6ab958a176cd0ab37fef49727c8f8643cc7340c0537d2d64664082e8258efb724bd2d8246a9ad9ef7409203778bb66ec6199c48f849ee541d7f42605e99bb27e8d568288562c29af6ade6dcfda5a302e1dd686323ad9618c1d3f545302177336b140e200121a7d1ff3aa69031765402734f5946b3dca83caa24406561f2b1bdf22e0114929dabac2e9fc6f08145cf2c638f045acb7c91d3c25447184557ff317dc53b91ab630132c1571aecbeb41454b1326b1afcca725e9228064a651"}]}, 0x1, [{0x4d, &(0x7f00000020c0)=@string={0x4d, 0x3, "155ab4d4bd9fc497c653659ec7ebf816a52cbbf923555bbf5528e16857d727d80da4d58c0a3251f114f9bb299556e3a4f066e8053b51e49e7ba6ed42a019108125157d349e8f43e0b1b838"}}]}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000002180)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) 1.901421412s ago: executing program 3 (id=3750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000000)=0xc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="a1ea3586e36da46a4907005c4f71d5109453a60956b2772be6ea", 0x1a, 0x400c885, &(0x7f00000003c0)={0x11, 0xd, 0x0, 0x1, 0xe8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000100)='binder\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'batadv0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x3, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0xa, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) lseek(0xffffffffffffffff, 0xaeb, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x4f) socket$igmp(0x2, 0x3, 0x2) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setns(r4, 0x10000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000019580)=@newtfilter={0x2054, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2014, 0x2, [@TCA_CGROUP_ACT={0xa4, 0x1, [@m_bpf={0x3c, 0x13, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x64, 0x6, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_MARK={0x8}]}, {0x29, 0x6, "fdfd03eda0d679d16e3eb361827a8e794e7beb9f8a473e8942ea9d4a2810c09fbf75eee06c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0xd4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x800, 0x0, 0x6}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x5}, {0x7, 0x1, 0xfff, 0x3}}}, @TCF_EM_META={0x74, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xffc0, 0x4}, {0x2, 0x5, 0x2}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="e4", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='t', @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x0, 0x1}, {0x7b, 0x7f, 0x1}}}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR='M', @TCF_META_TYPE_VAR="0ab339d1", @TCF_META_TYPE_VAR="9d", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="da66ca"]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="8535305a0c6b9f2b90"]}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x2, 0x2, 0xee62}, {0x7, 0x5, 0x0, "e2cdd229fd"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_CGROUP_ACT={0x1e98, 0x1, [@m_ife={0xb0, 0x3, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xfffff801}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x10001}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_TCINDEX={0x6}]}]}, {0x3d, 0x6, "bcbb50c87c0d0fb2d8cb96bca7395fa7fb3c362812d5b195263a661c562d2063f1b3338c79879266fb0790f6ad10b524e7276f60a52003d740"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x3ff, 0x3, 0x7fe0, 0xfffffffe}, 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x60, 0x13, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x5, 0x8, 0x7, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc, 0x7, 0x5, 0x669f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0x1d30, 0x2, 0x0, 0x0, {{0xa}, {0x1d04, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x1, 0x1, 0x5, 0x2800000, 0x7}, 0x0, 0x20, [{0xffffffff, 0x4, 0x3, 0x9, 0x8, 0x1cc00000}, {0x800, 0x8, 0x7, 0x86dd, 0x7, 0x4}, {0x3, 0x3, 0x7, 0x6, 0x8, 0xff}, {0x8991, 0x0, 0x4, 0xe, 0xffffff5f, 0x1851}, {0x8, 0x7, 0x85f6, 0x8, 0x1, 0x6}, {0x0, 0xffff, 0x0, 0xfff, 0x4, 0xf}]}, [{0x8, 0x3, 0x6, 0x7, 0x2, 0x1d80}, {0x8, 0xfa8, 0x0, 0x80, 0x7, 0x6}, {0x2, 0x7, 0x0, 0x9, 0xd34, 0x3ff}, {0x6, 0xe72, 0x6, 0xfc9, 0x1, 0x1}, {0x7fff, 0x0, 0x7, 0xffffc2f1, 0x40b, 0xc}, {0x5, 0xb, 0x0, 0xb312, 0x0, 0x8}, {0x9, 0x7, 0x8001, 0x80000000, 0x3d9b, 0xfffffeff}, {0x3, 0x400, 0x3ff, 0x7, 0xa, 0x192}, {0x7ff, 0x6, 0x3, 0xffff, 0x7, 0x7}, {0x4, 0xb, 0x1, 0x3000, 0x3ff, 0x7}, {0x6, 0x6fe07e5c, 0x6, 0x7ff, 0xfff, 0x745d}, {0x6, 0x80, 0x5, 0x200, 0x200, 0xfff}, {0x4, 0xd219, 0xe21, 0x8001, 0x8, 0x8}, {0x81, 0x0, 0xd, 0x8, 0x7, 0xff}, {0x5, 0xfffffff9, 0x3ff, 0xc9, 0x2, 0x4d3e}, {0x7, 0x3, 0xb, 0x0, 0x7, 0xfffffff3}, {0x2, 0x5, 0x5, 0x41ac8446, 0x2, 0x8ac7}, {0x3, 0x943, 0x4, 0x9, 0x10, 0x44d}, {0x1, 0x4ee, 0x7ff, 0x1, 0x80, 0xfffffff8}, {0xaf, 0x7, 0x8, 0x2, 0x8, 0x4}, {0x6, 0x3f6, 0xf4ac, 0x1, 0x7fffffff, 0xf}, {0x9, 0xfffff735, 0x2, 0x80, 0x9, 0x7ff}, {0x0, 0xc48, 0xfffffffa, 0x6, 0x400}, {0x8, 0x7, 0x1, 0x34ff61c7, 0x7, 0x2}, {0x0, 0xf0a2, 0x94, 0xb19c, 0xb, 0xbd9}, {0x1, 0x10000, 0x7fff, 0x3ff, 0x3, 0x9}, {0x2, 0x8001, 0x9, 0x6, 0x69b, 0x7f}, {0x6, 0x80000000, 0x81, 0x5, 0x4, 0x4}, {0x3000, 0x3, 0x81, 0x56a9, 0x2f2, 0x249a}, {0x6, 0xffff, 0x4, 0x4, 0xe5, 0xbd}, {0x800, 0x8, 0x7, 0x4, 0x3, 0x6}, {0x6, 0x0, 0xee, 0x200, 0x3, 0x5}, {0x10001, 0x57, 0x400, 0xfffffff8, 0x1}, {0x0, 0xc, 0x937, 0x5, 0x8, 0x2}, {0x0, 0x8001, 0xb9c, 0x80000001, 0xd, 0xffff}, {0x81, 0x3, 0x7, 0x6, 0x2, 0x100}, {0x3ff, 0x9, 0x1, 0x4, 0x8, 0xffffffff}, {0x5, 0x3e1, 0x1, 0x81, 0x7, 0x6a}, {0x7, 0x3, 0xce, 0x2, 0x6, 0xa2b}, {0x9, 0x6, 0x20, 0x6, 0x4, 0x6}, {0xb8e4, 0x800, 0xc639, 0x9, 0x6, 0xfff}, {0x47, 0x4, 0x3, 0x10, 0x7, 0x8}, {0x7, 0x8001, 0x800, 0x8, 0x1, 0x5}, {0xf, 0x10001, 0xb, 0x84, 0x5f5f, 0x8}, {0x6, 0x1, 0x6, 0x9, 0xfffffffd, 0xca}, {0x100, 0xd, 0x3, 0xfff, 0x5, 0xfffffee1}, {0x9, 0x7, 0x10001, 0x8, 0x8, 0x9}, {0x3, 0x4004, 0x9, 0x3, 0x4, 0x1}, {0x3, 0x4, 0x9dc, 0x5, 0x401, 0xd5}, {0x4302, 0x2, 0x0, 0x3, 0x1, 0x7ff}, {0x400, 0x2, 0x8, 0x7, 0x5, 0xdf3e}, {0x9, 0x8, 0x3ff, 0x1, 0x3, 0x9}, {0x99, 0xdcc8, 0xc, 0x3, 0x4, 0x90b2}, {0x4, 0x3, 0x6, 0x101, 0x27, 0x9}, {0xabcc, 0x80000000, 0x7c, 0x9, 0x1, 0x7fffffff}, {0x0, 0xf, 0xff, 0x7, 0xfae, 0xfff}, {0x9, 0xff, 0x5, 0xc, 0x81, 0x7}, {0x6a, 0x6d, 0x4, 0x591, 0x7f, 0xbef}, {0x37, 0x0, 0x7f, 0x324, 0x0, 0xd}, {0x0, 0x7, 0x3b, 0x5, 0x7, 0x10}, {0x7, 0x2, 0x9, 0x80000000, 0x1}, {0xf, 0x5, 0x6, 0x2da, 0x1, 0x9}, {0x4, 0xfff, 0x7fff, 0x6712, 0xc7c, 0x8587}, {0x157, 0xde, 0x6, 0x2, 0x5, 0x3}, {0x6, 0x2, 0x7, 0x1, 0xffff7fff, 0x6}, {0x0, 0xd, 0x3, 0x5, 0xa1f1, 0x2}, {0x7, 0x839, 0x7, 0x3, 0x3, 0x7}, {0xe, 0x3, 0x9, 0x1ff, 0xffffffff, 0x8001}, {0x4, 0x10000, 0x7, 0x4, 0x3, 0x2}, {0xfffffffe, 0x5, 0x5, 0x4, 0x2, 0x7fffffff}, {0xb, 0x100, 0x3, 0x80000000, 0x5d5, 0x8}, {0x4, 0x85, 0x0, 0xe3, 0x1, 0x3}, {0x10, 0x3, 0x2, 0x85b, 0x2, 0x1ff}, {0x7, 0x7, 0xffffff7f, 0x6, 0x7, 0x5}, {0xfffffc01, 0x7197, 0x8, 0x4, 0x80, 0x2}, {0x6, 0xfffffff8, 0x6, 0x8, 0x3, 0x7}, {0x8, 0x40000000, 0x1ff, 0xa, 0x2, 0x401}, {0x20000000, 0x0, 0x7, 0x3, 0xffffffff, 0x274e9372}, {0x8001, 0x80005, 0x8, 0x7, 0x2, 0x7}, {0x7fffffff, 0x2, 0x400, 0x9, 0x8, 0x3a4be998}, {0x1, 0x3, 0x6, 0x3, 0x9, 0x81}, {0x5, 0x5, 0xc, 0x4, 0x4, 0x8}, {0x400, 0x1d1, 0x77f, 0x4, 0x3, 0xfffffff9}, {0x3ff, 0xe, 0x7fffffff, 0xfffffff8, 0xce, 0x3}, {0x80000001, 0x6, 0xffff23eb, 0x2, 0xabc, 0xffffc234}, {0x3, 0xc1, 0x6273, 0x0, 0x100, 0x2000004}, {0x10001, 0x80, 0x9, 0x3, 0x8, 0x5}, {0x2, 0x8001, 0x0, 0x3, 0x1b, 0x8}, {0x0, 0x80000000, 0x2b3, 0x5, 0x52b, 0x8}, {0xfffffffe, 0x10001, 0x6, 0x81, 0xa0000, 0x3}, {0x80, 0x0, 0x1, 0x6f6d, 0x0, 0x1d}, {0x8, 0x89, 0x3535, 0x0, 0x2cf, 0x6}, {0x40, 0x7, 0x2, 0xffff0000, 0x4, 0x5}, {0x3ff, 0x23f, 0xd, 0x1ff, 0x3439, 0x8}, {0x10001, 0x8, 0x7fff, 0x3ff, 0x80000000, 0xf}, {0x1, 0x3, 0xf, 0x4, 0x1, 0x10001}, {0x101, 0x70000, 0x1, 0x2, 0x3, 0x401}, {0x401, 0x0, 0x3, 0x7fff, 0x2}, {0x5, 0x2, 0xfff, 0xf, 0x1, 0x6}, {0xfffffffb, 0x3, 0x3, 0x3465, 0x1000, 0x40}, {0x0, 0x5, 0x5, 0x1, 0x9, 0x3}, {0x10, 0x3, 0x3, 0xa11b, 0xaa0, 0x5}, {0x1, 0xfffffffd, 0x4, 0x8, 0x4, 0x401}, {0x5, 0x40, 0x3, 0x8, 0x3, 0x5}, {0xfffffffc, 0x9, 0x7ff, 0x1c, 0x9, 0x7}, {0x5, 0xb8e, 0xad, 0x200, 0xf, 0x8000}, {0x3, 0x7, 0x8, 0xffffffc0, 0x10000, 0xc70}, {0x3, 0x7d7, 0x5, 0x401, 0xfffffffa, 0xffff2f02}, {0xd8d, 0x5, 0x1ff, 0xd7, 0x3}, {0xffffffff, 0x7, 0x509, 0xc2, 0x7fffffff, 0xb}, {0x0, 0x5, 0x3, 0x4, 0x8, 0x9}, {0x4, 0x101, 0x5, 0xb, 0x6, 0xd}, {0xfffffff8, 0x9, 0x2, 0x9, 0x6, 0x8}, {0x7, 0x9, 0xe, 0xf5, 0x200}, {0x1, 0x8, 0xfffff000, 0x3, 0x6, 0x4}, {0xfffffffa, 0xfffffff8, 0x0, 0x8001, 0x8, 0x2}, {0x0, 0x7000, 0x2, 0x7f, 0x9bca, 0xfffffff9}, {0x3, 0x10000, 0xf7, 0x7, 0x4, 0x4}, {0xe673, 0x8, 0x6, 0x800, 0x1, 0x10001}, {0xa53, 0x62fd, 0xb, 0x8000, 0x482e, 0x9}, {0x101, 0x0, 0x0, 0x6310, 0xf6, 0x2}, {0x6, 0x8f, 0x80, 0x9, 0x6, 0x74a9}, {0x64, 0x5, 0x8000004, 0x2, 0x1ff, 0x5}, {0x668, 0x5b39ef5c, 0x9, 0x7f, 0x6, 0xedf9}, {0x6, 0x0, 0x0, 0x7f, 0x2, 0x80000000}, {0x9, 0x9, 0x80, 0x5, 0x800, 0x9}, {0x80000001, 0x2, 0x80, 0x6, 0x6, 0x1}, {0x200800, 0x47a, 0x6, 0x4b, 0x0, 0x405e}], [{0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x3}, {}, {0x4}, {0x3}, {0x2}, {0x2}, {0x3}, {0x2}, {}, {0x1, 0x1}, {0x8, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {}, {0x4}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x3, 0xdd, 0x4, 0x6, 0x9}, 0xfb, 0x5, [{0x1, 0xf6, 0x4, 0x4, 0x76}, {0x3, 0x8000, 0x3, 0x8, 0xff, 0x1}]}, [{0x10000, 0x10, 0x8, 0x6, 0x8, 0x7}, {0x6, 0xd4c1, 0x1000, 0x7, 0x2, 0x96e3}, {0xf3, 0x9, 0xf, 0xee2b, 0x2}, {0x6, 0x3, 0x43c, 0xffffffff, 0x23e1, 0x5}, {0x4, 0x9, 0x7, 0x3, 0x8001, 0x3ff}, {0x5, 0x2, 0x9, 0x69, 0x100, 0x7}, {0x10000, 0xca9b, 0x6, 0x2, 0x7, 0x4}, {0x2a3f, 0x1, 0x400, 0x6, 0x0, 0x3}, {0x1, 0x1, 0xfffffff8, 0xa, 0x1, 0x5}, {0xd, 0x30b9, 0x7, 0x39, 0x9, 0x9}, {0x2, 0x80, 0x0, 0x9, 0x8001, 0x8001}, {0x1, 0xfffffffa, 0xffffffe7, 0x3, 0xc6, 0xe}, {0x0, 0x2, 0x10000, 0x5, 0xffffffff, 0xffff}, {0x200, 0x9, 0x3, 0x200, 0x4, 0x6}, {0x9823, 0x10000, 0x8, 0x7f, 0xb, 0x3}, {0x8000, 0x4, 0xa, 0x4a, 0x9, 0x8}, {0x0, 0x81, 0x1, 0x7f, 0xffffffff, 0x1ff}, {0x5, 0x101, 0x1, 0xce, 0x9, 0x1}, {0xfffffff3, 0x4, 0x1, 0x4, 0x7}, {0x2, 0x9, 0xb, 0x4, 0x0, 0x1e531bf}, {0x4, 0x7fffffff, 0x3, 0x1, 0x2, 0x671}, {0xfffffffb, 0x2, 0x2, 0x6, 0x4, 0xc}, {0x21, 0x2, 0x0, 0x9b0000, 0x1, 0x6}, {0x6, 0x9, 0x8000, 0x1, 0xbe, 0x7fff}, {0x9f, 0x2, 0xfffff0c4, 0x401, 0x4, 0x7}, {0x45c, 0x4, 0x5da, 0x8, 0x7a4, 0x3}, {0x81, 0x3, 0xffffffff, 0x4, 0x0, 0x3}, {0x3, 0x9, 0x3, 0x2, 0x80000000, 0xfff}, {0xffffff01, 0x5, 0x8000, 0xeacd, 0x2}, {0x8, 0x2, 0x8, 0x401, 0x4, 0x3f72}, {0x0, 0x7b, 0xfffffffb, 0x400, 0xe, 0x2}, {0x4, 0x7f8, 0x950, 0x22f, 0x10, 0x4c2}, {0x8, 0x2, 0x8, 0x2, 0x2, 0x46}, {0x7dc0390c, 0x8, 0x1, 0xee4, 0x7, 0x80}, {0x7, 0xfffffffc, 0x9, 0x4, 0x7, 0x5}, {0x5e6d, 0x6, 0xfc, 0x10001, 0x3, 0x7e87}, {0x0, 0x6, 0x4, 0xd, 0x5, 0x8}, {0xe, 0x4, 0x8, 0x8, 0x3, 0x8}, {0x6, 0x8d6, 0x1, 0x0, 0x1, 0x3}, {0x4, 0x6, 0xfffffff3, 0x1, 0xfffff13b}, {0x1, 0x5, 0x8, 0xffffff81, 0x2, 0x738}, {0x80, 0x1000, 0x10, 0x3, 0x20002, 0xf9a7}, {0x4, 0x3, 0x9, 0x4, 0x3, 0x7fff}, {0x1000, 0x0, 0x9, 0x9, 0x7, 0x9}, {0x4, 0x80, 0xd, 0xf08, 0x5, 0x6}, {0x2, 0x1ff, 0x3, 0x10000, 0x2, 0x4}, {0xc, 0x381e2545, 0x7, 0x4911, 0x2, 0x8}, {0x7fff, 0x8, 0x6, 0xb, 0x3ff, 0x7}, {0x0, 0x3, 0x0, 0x5, 0x7f, 0x9}, {0x7ff, 0x5, 0x1, 0xffff, 0x8e, 0x6}, {0x1000, 0x7f, 0x679c, 0x286, 0x7, 0x8}, {0x7fff, 0x448, 0x5, 0x7, 0xfffffffc, 0x2}, {0x7, 0xb3d, 0x80000000, 0x1, 0x3, 0x4}, {0xce5, 0x7, 0x6, 0x140, 0x7, 0x5}, {0x0, 0x9499, 0x100, 0x9, 0x5, 0x8}, {0x5, 0xffc000, 0x8, 0x1, 0x7f, 0x30}, {0xe159, 0x2a, 0x9, 0xfffffffe, 0x2, 0xfffffffd}, {0x8, 0x7, 0x3, 0x8, 0x4, 0x1ff}, {0x4, 0x3, 0x1ff, 0xfffffffc, 0x3, 0x40}, {0xfffffffa, 0xd5d5, 0xb92, 0x1, 0x4, 0x3}, {0x8, 0x4, 0x3, 0x80, 0x0, 0x4}, {0xb5c2, 0xfff, 0xfffffffb, 0x9, 0x8, 0x9}, {0x10, 0xff, 0x8, 0x8001, 0x400, 0xfffffffc}, {0x2, 0x1, 0x3, 0x2, 0xfff80000, 0x3}, {0xfffffff9, 0x0, 0x1ff, 0x4, 0x7}, {0x80, 0xba11, 0x0, 0x76ff, 0x6}, {0x5d, 0x2, 0xfffffff9, 0x40, 0x10, 0x3}, {0x7ff, 0x6, 0x2, 0x9, 0xb572, 0xb37}, {0x3, 0x9, 0x9, 0x5, 0x6, 0xc0000000}, {0x9, 0x9, 0x5, 0x6, 0x14, 0x7}, {0x10, 0x5, 0x5, 0x8, 0x0, 0x90}, {0x89, 0xfffffffc, 0x9, 0x7, 0x9, 0xe}, {0x10000, 0x9, 0x6, 0xa, 0x8, 0xfc83}, {0x8, 0x6, 0x5, 0x5, 0x3, 0x6}, {0x9, 0x6, 0x3, 0x5687, 0x6, 0x6}, {0x9, 0x4, 0x8000, 0x25, 0x0, 0x23}, {0x9, 0xffffff7f, 0x7, 0x1, 0x2, 0x3}, {0x6, 0x8, 0x7, 0x4, 0x7ff, 0x6a689e55}, {0xfffffffe, 0x40, 0x3, 0x8, 0x5c, 0x8}, {0x6, 0x7, 0xcb, 0x9, 0x2, 0x2f0}, {0x7, 0x6, 0x7ff, 0xffff, 0x3, 0x80000000}, {0xfffffffd, 0xfffffffb, 0x8001, 0x0, 0x9, 0x7}, {0x7, 0x25, 0xfffffffc, 0xf9, 0x6, 0x81}, {0x2, 0x1, 0x1, 0x1, 0xff, 0x1}, {0xe5a, 0x0, 0x1, 0x2, 0x1, 0x6}, {0x8, 0x80000001, 0x5, 0xd850, 0xb, 0xe}, {0xa57, 0x9, 0xde83, 0x4f, 0x4, 0x800}, {0x1b1, 0xd90, 0x7, 0x100, 0xfffffffc, 0x8}, {0x5, 0x80, 0x10001, 0x2, 0x80000000, 0x10000}, {0x7d5c, 0x2, 0x3, 0x7f, 0x3, 0x101}, {0x9, 0x406, 0x759, 0xff, 0x8a, 0x6}, {0x5538, 0x2, 0x20d, 0x0, 0x1, 0x6}, {0x10001, 0x7fff, 0x7, 0x6, 0x5, 0x9}, {0x10001, 0x6, 0x101, 0x5, 0xe}, {0x4992, 0x1, 0x80000001, 0x4, 0x4, 0x2}, {0x4, 0x5, 0xe5e09f2, 0x4, 0x1, 0x6}, {0x6, 0x4, 0x9, 0x8000, 0x6, 0xfffffff9}, {0x3ff, 0xd888, 0x7, 0x6, 0x5, 0x6}, {0x2, 0x80000001, 0x2, 0x8, 0x3, 0xb3}, {0x80, 0x8000, 0xffffff9d, 0x299e, 0xc, 0x81}, {0x2, 0x2, 0x2, 0x2, 0x6}, {0x2, 0x6, 0x4b, 0x9, 0x0, 0x8}, {0x76, 0x0, 0xfa67, 0x9, 0x4, 0x1}, {0x2, 0xfffffff8, 0x4, 0x0, 0x4}, {0x7ff, 0xffff, 0x0, 0x8, 0x0, 0xfffff88e}, {0x3, 0x0, 0x0, 0xfffc0000, 0x9, 0x1000}, {0x4, 0x2, 0x207f, 0x40, 0x5, 0x2}, {0x4, 0x100, 0x7, 0x6, 0xa605, 0xc}, {0x9, 0x4, 0x1, 0x3, 0x80000001, 0x9}, {0x5, 0x41ef, 0x7, 0x80000000, 0x9, 0x2}, {0x5, 0x0, 0x1, 0x80, 0xffff, 0x2}, {0x0, 0x7, 0xb, 0x2, 0x3, 0x6}, {0x3, 0xe, 0x9e, 0x3, 0x7, 0x2}, {0xfffffffa, 0x27c17468, 0x4, 0x3ff, 0x54b, 0x10}, {0x9, 0x1a, 0x3, 0x4, 0x2, 0x9}, {0x400, 0x1, 0x4, 0x5, 0x5, 0x7fff}, {0x7, 0x8, 0xfffffff6, 0x9, 0x7, 0x4}, {0xc42b, 0x614, 0x2, 0x8, 0x9, 0xfffffffe}, {0x8000, 0xf4, 0x7fff, 0x8, 0x1, 0x30}, {0x3c, 0x3, 0x8, 0x1, 0x9, 0xffff8000}, {0xb2dd, 0xb, 0x4, 0x1, 0x3ff, 0xf}, {0x10, 0x6, 0x1, 0x7, 0x8, 0xb}, {0x65cc, 0x6, 0x10, 0x2, 0x5, 0xb1fb}, {0x6b5, 0x4, 0x7, 0x401, 0x10001, 0x4}, {0x9, 0x100, 0x2, 0x7fff, 0x401, 0x7f}, {0x2, 0x7, 0x6, 0x9, 0x9, 0x2}, {0x8, 0x401, 0x0, 0x1, 0x9, 0xab2}, {0x6, 0x2f, 0x6c2, 0xf, 0x30fc3909, 0x9}], [{0x0, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x7}, {0x2, 0x1}, {}, {0x4}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2c09aca258012b9b, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x2275590b2fca9382, 0x1}, {0x5}, {}, {0x6, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0xe33664703b712afd, 0x1}, {0x2}, {0x2}, {0x2}, {0x5, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {}, {0x3}, {0x6}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x48c181b67ae70422, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x3}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x2054}}, 0x20000040) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000180), &(0x7f0000000240)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea000ff00"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.667999164s ago: executing program 2 (id=3751): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x10004, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x3, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0004}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.499239591s ago: executing program 1 (id=3752): socket$nl_rdma(0x10, 0x3, 0x14) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x8d, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 1.413389793s ago: executing program 5 (id=3753): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000a06000/0x2000)=nil, 0x2000, 0x200000c, 0x100030, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) getresuid(0x0, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x80ad}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x60010042, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x6, '\x00', @p_u16=&(0x7f0000000240)}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f000000040000000800000009", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 906.168319ms ago: executing program 2 (id=3754): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r1, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0xff, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0x24}}], 0x1, 0x0) (async) sendmmsg$sock(r1, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0xff, 0x0, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0x24}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x7, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000001040500000000000000000001000000060006"], 0x24}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000001040500000000000000000001000000060006"], 0x24}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff000038000100fdff7f000008030000000400000007000000000000000a00f0ff00000000010100000000000006"], 0x78) close(r3) (async) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) (async) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sendfile(r4, r4, 0x0, 0x200000) 904.150134ms ago: executing program 3 (id=3755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000014000000000000000000030018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000008807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001f000006850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0x2c, 0x0, &(0x7f0000000000)="21020a7b393e81fd6716764144db97289a6dd5884579fa1bae6f3c0c7f3b2ab102460f3e9c9bb5db43286a26", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xd3, 0x5, 0x7}}]}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1555555555555712, [{0x0, 0x0}]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x7, "270a81bb"}]}}, 0x0}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4) 387.192614ms ago: executing program 1 (id=3756): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x103001, 0x0) socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000180)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x7, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x0, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xa71, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x4, 0x0, 0x700}}) socket$igmp(0x2, 0x3, 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080)={0x2, 0x3b}, 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r2, 0x60}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=3757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000740)=@multiplanar_mmap={0xffffffff, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, "6e097f00"}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'tunl0\x00', &(0x7f0000000680)={'erspan0\x00', 0x0, 0x1, 0x7800, 0x0, 0x21e, {{0xd, 0x4, 0x1, 0x3, 0x34, 0x68, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @private=0xa010101, {[@cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x5, 0x3, "1d"}, {0x6, 0x4, "fa3e"}, {0x2, 0x7, "98c1b6b017"}, {0x2, 0x9, "8ae73490f33c8f"}]}]}}}}}) ioctl$SIOCSIFHWADDR(r6, 0x8937, &(0x7f00000000c0)={'netdevsim0\x00', @random}) epoll_create1(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001045120000000000000000000000000a140000a03c7a47eba3de2740fac290c41a9e00000000000000000300000a"], 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x80002, 0x0) socket$inet(0x2, 0x3, 0x3) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000040801080000010000000000030000003c0004800800010000000000000001400800000008000140000000020800024000000001400000000408000140ffffffff00"/80], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89101) kernel console output (not intermixed with test programs): xt=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1088.390436][ T24] usb 4-1: device descriptor read/64, error -71 [ 1088.450791][ T29] audit: type=1400 audit(1774197048.921:2869): avc: denied { write } for pid=19710 comm="syz.5.3253" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1088.504824][T19682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.520365][T19682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.689793][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1088.924752][T11910] Bluetooth: hci5: command 0x0406 tx timeout [ 1089.085067][T11910] Bluetooth: hci1: command 0x0405 tx timeout [ 1089.170809][T11910] Bluetooth: hci0: command 0x0c1a tx timeout [ 1089.350294][T11910] Bluetooth: hci2: command 0x0c1a tx timeout [ 1089.865052][T11910] Bluetooth: hci3: command 0x2016 tx timeout [ 1090.103250][ T24] usb 4-1: device descriptor read/64, error -71 [ 1090.194789][T19725] nvme_fabrics: missing parameter 'transport=%s' [ 1090.201673][T19725] nvme_fabrics: missing parameter 'nqn=%s' [ 1090.211687][T19725] nvme_fabrics: unknown parameter or missing value 'connect aa:aa:aa:aa:aa:10 2' in ctrl creation request [ 1090.240287][ T24] usb usb4-port1: attempt power cycle [ 1090.406321][ T5873] usb 3-1: USB disconnect, device number 121 [ 1090.440557][ T5873] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1090.645244][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1091.139145][ T24] usb 4-1: device descriptor read/8, error -71 [ 1091.152032][T11910] Bluetooth: hci5: command 0x0406 tx timeout [ 1091.211743][T19742] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3259'. [ 1091.308084][T11910] Bluetooth: hci1: command 0x0405 tx timeout [ 1091.507946][T11910] Bluetooth: hci0: command 0x0c1a tx timeout [ 1091.564139][T11910] Bluetooth: hci2: command 0x0c1a tx timeout [ 1092.119800][T11910] Bluetooth: hci3: command 0x2016 tx timeout [ 1092.270287][ T5896] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1092.505105][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 1092.627682][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1092.649228][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1092.661849][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1092.674982][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1092.699328][T19778] ceph: No mds server is up or the cluster is laggy [ 1092.721261][ T5896] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1092.744413][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.793554][ T5896] usb 3-1: Product: syz [ 1092.797750][ T5896] usb 3-1: Manufacturer: syz [ 1092.802341][ T5896] usb 3-1: SerialNumber: syz [ 1092.863851][ T5896] usb 3-1: config 0 descriptor?? [ 1092.928799][ T5896] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1093.969053][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 1093.975088][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 1093.981429][T11910] Bluetooth: hci1: command 0x0405 tx timeout [ 1094.225425][ T1160] usb 3-1: Failed to submit usb control message: -110 [ 1094.303603][ T5896] usb 3-1: USB disconnect, device number 122 [ 1094.319092][ T1160] usb 3-1: unable to send the bmi data to the device: -110 [ 1094.330652][ T29] audit: type=1400 audit(1774197054.395:2870): avc: denied { getopt } for pid=19752 comm="syz.2.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1094.381152][ T1160] usb 3-1: unable to get target info from device [ 1094.394868][T19810] loop2: detected capacity change from 0 to 7 [ 1094.409934][T19806] netlink: 'syz.1.3267': attribute type 4 has an invalid length. [ 1094.417754][T19810] Dev loop2: unable to read RDB block 7 [ 1094.433751][T19810] loop2: unable to read partition table [ 1094.440298][ T1160] usb 3-1: could not get target info (-110) [ 1094.455022][T19810] loop2: partition table beyond EOD, truncated [ 1094.457344][ T1160] usb 3-1: could not probe fw (-110) [ 1094.498858][T19810] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1094.623319][ T29] audit: type=1400 audit(1774197054.695:2871): avc: denied { read } for pid=19815 comm="syz.0.3270" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1094.964064][ T29] audit: type=1400 audit(1774197054.695:2872): avc: denied { open } for pid=19815 comm="syz.0.3270" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1095.632367][T19829] FAULT_INJECTION: forcing a failure. [ 1095.632367][T19829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.645549][T19829] CPU: 0 UID: 0 PID: 19829 Comm: syz.3.3271 Tainted: G L syzkaller #0 PREEMPT(full) [ 1095.645577][T19829] Tainted: [L]=SOFTLOCKUP [ 1095.645581][T19829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1095.645588][T19829] Call Trace: [ 1095.645593][T19829] [ 1095.645597][T19829] dump_stack_lvl+0x100/0x190 [ 1095.645620][T19829] should_fail_ex.cold+0x5/0xa [ 1095.645635][T19829] _copy_to_user+0x32/0xd0 [ 1095.645649][T19829] ptr_to_user+0x23c/0x5c0 [ 1095.645667][T19829] ? __pfx_ptr_to_user+0x10/0x10 [ 1095.645685][T19829] ? v4l2_g_ext_ctrls_common+0x974/0x1160 [ 1095.645698][T19829] ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10 [ 1095.645714][T19829] v4l2_g_ext_ctrls_common+0x8ea/0x1160 [ 1095.645727][T19829] ? __mutex_lock+0x890/0x1b90 [ 1095.645747][T19829] ? __pfx_v4l2_g_ext_ctrls_common+0x10/0x10 [ 1095.645767][T19829] v4l2_g_ext_ctrls+0x66/0xc0 [ 1095.645779][T19829] v4l_g_ext_ctrls+0x202/0x2d0 [ 1095.645795][T19829] __video_do_ioctl+0xaf8/0xdc0 [ 1095.645812][T19829] ? __might_fault+0xc5/0x140 [ 1095.645828][T19829] ? __pfx___video_do_ioctl+0x10/0x10 [ 1095.645849][T19829] video_usercopy+0x47a/0x1740 [ 1095.645865][T19829] ? __pfx___video_do_ioctl+0x10/0x10 [ 1095.645882][T19829] ? __pfx_video_usercopy+0x10/0x10 [ 1095.645896][T19829] ? lockdep_hardirqs_on+0x78/0x100 [ 1095.645921][T19829] v4l2_ioctl+0x1bd/0x250 [ 1095.645937][T19829] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1095.645954][T19829] __x64_sys_ioctl+0x18e/0x210 [ 1095.645973][T19829] do_syscall_64+0x106/0xf80 [ 1095.645988][T19829] ? clear_bhb_loop+0x40/0x90 [ 1095.646004][T19829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.646016][T19829] RIP: 0033:0x7f5600f9c799 [ 1095.646026][T19829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.646037][T19829] RSP: 002b:00007f5601d78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1095.646049][T19829] RAX: ffffffffffffffda RBX: 00007f5601216090 RCX: 00007f5600f9c799 [ 1095.646056][T19829] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 1095.646062][T19829] RBP: 00007f5601d78090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.646068][T19829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.646075][T19829] R13: 00007f5601216128 R14: 00007f5601216090 R15: 00007ffd765fff98 [ 1095.646094][T19829] [ 1096.752375][T19825] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.108522][T19825] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.347699][T19825] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.625266][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3276'. [ 1097.730104][ T793] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1098.502229][ T793] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1098.691817][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.769758][ T793] usb 2-1: config 0 descriptor?? [ 1098.816982][T19825] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.107207][T19860] ieee802154 phy0 wpan0: encryption failed: -22 [ 1099.486036][ T793] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1099.487834][ T29] audit: type=1400 audit(1774197059.243:2873): avc: denied { bind } for pid=19852 comm="syz.5.3279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1100.063527][ T793] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1100.123676][ T793] [drm] Initialized udl on minor 2 [ 1100.237415][ T793] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1100.243514][ T391] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.252757][ T793] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1100.305447][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1100.361076][ T1160] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.487475][ T1160] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.527259][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1100.563570][ T9088] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.572342][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1100.619510][ T29] audit: type=1400 audit(1774197060.309:2874): avc: denied { map } for pid=19842 comm="syz.1.3277" path="socket:[89597]" dev="sockfs" ino=89597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1100.643141][ T9] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1100.666570][ T9] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1100.677513][T17738] usb 2-1: USB disconnect, device number 17 [ 1100.689668][ T793] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1100.713898][ T9] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1100.734751][ T793] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1100.741480][ T29] audit: type=1400 audit(1774197060.309:2875): avc: denied { read } for pid=19842 comm="syz.1.3277" path="socket:[89597]" dev="sockfs" ino=89597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1100.770258][ T9] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1101.222791][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1101.229867][ T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1101.239277][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.325580][T19880] FAULT_INJECTION: forcing a failure. [ 1101.325580][T19880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1101.338735][T19880] CPU: 0 UID: 0 PID: 19880 Comm: syz.2.3284 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.338762][T19880] Tainted: [L]=SOFTLOCKUP [ 1101.338766][T19880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1101.338773][T19880] Call Trace: [ 1101.338778][T19880] [ 1101.338783][T19880] dump_stack_lvl+0x100/0x190 [ 1101.338805][T19880] should_fail_ex.cold+0x5/0xa [ 1101.338821][T19880] _copy_to_user+0x32/0xd0 [ 1101.338834][T19880] video_usercopy+0x61e/0x1740 [ 1101.338851][T19880] ? __pfx___video_do_ioctl+0x10/0x10 [ 1101.338868][T19880] ? __pfx_video_usercopy+0x10/0x10 [ 1101.338882][T19880] ? irqentry_exit+0x180/0x670 [ 1101.338907][T19880] v4l2_ioctl+0x1bd/0x250 [ 1101.338923][T19880] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1101.338940][T19880] __x64_sys_ioctl+0x18e/0x210 [ 1101.338959][T19880] do_syscall_64+0x106/0xf80 [ 1101.338974][T19880] ? clear_bhb_loop+0x40/0x90 [ 1101.338988][T19880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.339000][T19880] RIP: 0033:0x7f959bf9c799 [ 1101.339010][T19880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.339020][T19880] RSP: 002b:00007f959ce69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.339031][T19880] RAX: ffffffffffffffda RBX: 00007f959c216090 RCX: 00007f959bf9c799 [ 1101.339039][T19880] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 1101.339045][T19880] RBP: 00007f959ce69090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.339052][T19880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.339058][T19880] R13: 00007f959c216128 R14: 00007f959c216090 R15: 00007fff01accf78 [ 1101.339072][T19880] [ 1103.595953][ T9] usb 4-1: can't set config #1, error -71 [ 1103.641838][ T9] usb 4-1: USB disconnect, device number 10 [ 1104.743383][T19896] gfs2: not a GFS2 filesystem [ 1104.861881][ T5873] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1105.230325][T19900] loop2: detected capacity change from 0 to 7 [ 1105.246732][ T5873] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1105.259892][T19900] Dev loop2: unable to read RDB block 7 [ 1105.347786][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.356141][T19900] loop2: unable to read partition table [ 1105.361987][T19900] loop2: partition table beyond EOD, truncated [ 1105.368153][ T5873] usb 6-1: Product: syz [ 1105.375424][ T5873] usb 6-1: Manufacturer: syz [ 1105.380462][T19900] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1105.389770][ T5873] usb 6-1: SerialNumber: syz [ 1106.085897][ T5873] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1106.194726][ T5873] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1106.783428][ T5873] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1106.902635][ T5873] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1106.913533][ T5873] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1106.929940][ T5873] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1107.028548][ T29] audit: type=1400 audit(1774197066.308:2876): avc: denied { read write } for pid=19920 comm="syz.3.3290" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1107.329079][ T29] audit: type=1400 audit(1774197066.327:2877): avc: denied { open } for pid=19920 comm="syz.3.3290" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1107.387322][ T29] audit: type=1400 audit(1774197066.420:2878): avc: denied { bind } for pid=19920 comm="syz.3.3290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1107.407334][ T5873] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1107.454335][ T9] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1107.582659][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 1107.590687][ T5873] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1107.610654][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.614632][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1107.632771][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.646875][ T9] usb 3-1: config 0 has no interfaces? [ 1107.652401][ T5873] usb 1-1: config 0 has no interface number 0 [ 1107.652429][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1107.671079][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.678708][ T5873] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1107.704817][ T9] usb 3-1: config 0 descriptor?? [ 1107.725956][ T5873] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1107.745930][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.762875][ T5873] usb 1-1: Product: syz [ 1107.771642][ T5873] usb 1-1: Manufacturer: syz [ 1107.781625][ T5873] usb 1-1: SerialNumber: syz [ 1107.793210][ T5873] usb 1-1: config 0 descriptor?? [ 1107.806639][ T5873] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1107.824166][ T5873] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 1107.855948][ T47] usb 6-1: USB disconnect, device number 27 [ 1107.956603][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1108.229841][ T9] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1108.243493][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.342367][ T9] usb 4-1: config 0 descriptor?? [ 1108.468893][ T5873] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1108.481818][ T5873] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 1108.495871][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1108.610141][T19943] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1109.057094][ T29] audit: type=1400 audit(1774197068.198:2879): avc: denied { listen } for pid=19932 comm="syz.3.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1109.145865][ T9] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1109.900492][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 1109.913327][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 1109.920854][ T9] cpia1 4-1:0.0: unexpected systemstate: 00 [ 1109.937819][ T9] usb 4-1: USB disconnect, device number 11 [ 1110.228164][ T9] usb 3-1: USB disconnect, device number 123 [ 1110.523773][ T47] usb 1-1: USB disconnect, device number 117 [ 1110.529879][T19963] trusted_key: encrypted_key: insufficient parameters specified [ 1110.567456][ T29] audit: type=1400 audit(1774197069.621:2880): avc: denied { create } for pid=19959 comm="syz.5.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1110.599234][ T29] audit: type=1400 audit(1774197069.649:2881): avc: denied { connect } for pid=19964 comm="syz.3.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1111.051561][ T29] audit: type=1400 audit(1774197070.042:2882): avc: denied { read } for pid=19964 comm="syz.3.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1111.110338][T19975] ceph: No mds server is up or the cluster is laggy [ 1111.118619][ T47] libceph: connect (1)[c::]:6789 error -101 [ 1111.133029][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 1111.536868][ T47] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1111.673120][T19990] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1111.685400][ T29] audit: type=1400 audit(1774197070.650:2883): avc: denied { remount } for pid=19989 comm="syz.5.3312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1111.924068][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3312'. [ 1111.941264][ T47] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1111.952483][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.961495][ T47] usb 3-1: Product: syz [ 1111.966079][ T5873] SELinux: failure in sel_netif_sid_slow(), invalid network interface (52) [ 1111.977945][ T47] usb 3-1: Manufacturer: syz [ 1111.982582][ T47] usb 3-1: SerialNumber: syz [ 1112.230953][ T9] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1112.407499][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1112.578633][ T47] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1112.594298][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.602329][ T9] usb 1-1: Product: syz [ 1112.615980][ T47] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1112.631044][ T9] usb 1-1: Manufacturer: syz [ 1112.635669][ T9] usb 1-1: SerialNumber: syz [ 1113.422403][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1113.449320][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1113.499958][ T47] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1113.513805][ T47] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1113.523641][ T47] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1113.607217][ T47] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1113.908715][ T5932] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1114.462696][T17419] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1114.600124][ T47] usb 3-1: USB disconnect, device number 124 [ 1114.656106][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 1114.668482][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1114.690931][T17419] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1114.710101][T17419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.740400][ T5932] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1114.762366][T17419] usb 6-1: Product: syz [ 1114.794840][T17419] usb 6-1: Manufacturer: syz [ 1114.816984][T17419] usb 6-1: SerialNumber: syz [ 1114.847397][ T5932] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1114.867274][T17419] usb 6-1: config 0 descriptor?? [ 1114.878830][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1114.897834][T17419] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1114.921184][ T5932] usb 2-1: Product: syz [ 1114.928701][T20051] "syz.3.3323" (20051) uses obsolete ecb(arc4) skcipher [ 1114.929669][ T5932] usb 2-1: Manufacturer: syz [ 1114.940942][ T5932] usb 2-1: SerialNumber: syz [ 1114.956969][ T5932] usb 2-1: config 0 descriptor?? [ 1115.038913][T20033] Bluetooth: MGMT ver 1.23 [ 1115.067682][ T29] audit: type=1400 audit(1774197073.822:2884): avc: denied { ioctl } for pid=20057 comm="syz.2.3325" path="socket:[90884]" dev="sockfs" ino=90884 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1115.293817][T20018] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3315'. [ 1116.427817][T17419] sonixb 6-1:0.0: Error reading register 00: -110 [ 1116.579657][T17419] usb 6-1: USB disconnect, device number 28 [ 1116.606221][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1116.656113][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1116.698320][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1116.752654][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1116.790400][ T9] usb 1-1: USB disconnect, device number 118 [ 1118.230673][ T9] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1118.804781][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1118.815484][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 1118.831565][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1118.844352][ T9] usb 1-1: can't read configurations, error -61 [ 1119.037979][ T9] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 1119.433364][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1119.597108][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1119.614197][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.631045][ T24] usb 6-1: Product: syz [ 1119.639673][ T24] usb 6-1: Manufacturer: syz [ 1119.649855][ T24] usb 6-1: SerialNumber: syz [ 1120.122547][T17419] usb 2-1: USB disconnect, device number 18 [ 1120.311271][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1120.425715][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1121.079844][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1121.091923][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1121.111847][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1121.157344][ T24] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1121.199722][T20106] ptrace attach of "./syz-executor exec"[17985] was attempted by " [ 1121.201251][ T29] audit: type=1400 audit(1774197079.568:2885): avc: denied { write } for pid=20103 comm="syz.1.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1121.380599][T20109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3338'. [ 1121.398941][T20109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 1121.515299][T17419] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1121.694500][T17419] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1121.716029][T17419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.732893][T17419] usb 3-1: Product: syz [ 1121.743123][T17419] usb 3-1: Manufacturer: syz [ 1121.750713][T17419] usb 3-1: SerialNumber: syz [ 1122.000667][T20124] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.219253][T17419] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1122.383284][T17419] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1122.441501][T20124] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.668645][T20124] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.690965][ T5896] usb 6-1: USB disconnect, device number 29 [ 1123.908033][T20124] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.964198][ T29] audit: type=1400 audit(1774197082.123:2886): avc: denied { mount } for pid=20133 comm="syz.5.3343" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1124.139597][T17419] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1124.173034][ T9088] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.188696][ T9088] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.338196][ T9082] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.391441][ T9082] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.468706][T20143] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3346'. [ 1124.498659][T20143] openvswitch: netlink: Message has 4 unknown bytes. [ 1124.562868][ T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1124.666233][T20144] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1124.899130][T20144] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1124.911303][T20144] overlayfs: failed to look up (tracing) for ino (-66) [ 1124.927647][T17419] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 1124.947363][T17419] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1124.959576][T17419] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1124.969355][T17419] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1124.978864][ T9] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1124.988047][ T9] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1124.998849][ T9] usb 4-1: Product: syz [ 1125.003210][ T9] usb 4-1: Manufacturer: syz [ 1125.008661][T17419] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1125.020744][T17419] usb 3-1: USB disconnect, device number 125 [ 1125.034501][ T29] audit: type=1326 audit(1774197083.152:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20145 comm="syz.1.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66c79c799 code=0x7ffc0000 [ 1125.061951][ T9] usb 4-1: SerialNumber: syz [ 1125.075682][ T47] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1125.079954][ T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1125.113403][ T29] audit: type=1326 audit(1774197083.152:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20145 comm="syz.1.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66c79c799 code=0x7ffc0000 [ 1125.141476][ T29] audit: type=1326 audit(1774197083.180:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20145 comm="syz.1.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7ff66c79c799 code=0x7ffc0000 [ 1125.182536][ T29] audit: type=1326 audit(1774197083.180:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20145 comm="syz.1.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66c79c799 code=0x7ffc0000 [ 1125.209744][ T29] audit: type=1326 audit(1774197083.190:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20145 comm="syz.1.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff66c79c799 code=0x7ffc0000 [ 1125.247698][ T29] audit: type=1326 audit(1774197083.190:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20145 comm="syz.1.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66c79c799 code=0x7ffc0000 [ 1125.274773][ T29] audit: type=1326 audit(1774197083.190:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20145 comm="syz.1.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff66c79c799 code=0x7ffc0000 [ 1125.309162][ T9] vp7045: USB control message 'out' went wrong. [ 1125.315670][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1125.336972][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 1125.342117][ T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1125.363185][ T9] usb 4-1: USB disconnect, device number 12 [ 1125.369278][ T29] audit: type=1326 audit(1774197083.190:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20145 comm="syz.1.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66c79c799 code=0x7ffc0000 [ 1125.376145][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.446424][ T47] usb 1-1: config 0 has no interfaces? [ 1125.457200][ T47] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1125.471051][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.490270][ T47] usb 1-1: config 0 descriptor?? [ 1125.594538][T20154] trusted_key: encrypted_key: insufficient parameters specified [ 1126.658168][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 1126.664188][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 1126.795425][T20170] ceph: No mds server is up or the cluster is laggy [ 1128.391715][T20188] macvtap1: entered promiscuous mode [ 1128.533883][ T47] usb 1-1: USB disconnect, device number 121 [ 1128.548599][T20188] macvtap1: entered allmulticast mode [ 1128.555045][T20188] dummy0: entered promiscuous mode [ 1128.606484][T20192] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1128.617039][T20188] dummy0: entered allmulticast mode [ 1128.628150][T20188] team0: Device macvtap1 failed to register rx_handler [ 1128.654137][T20188] dummy0: left allmulticast mode [ 1128.662947][T20188] dummy0: left promiscuous mode [ 1128.809563][T20196] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3356'. [ 1129.155132][T20207] netlink: 'syz.3.3359': attribute type 1 has an invalid length. [ 1129.197647][T20207] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3359'. [ 1129.245689][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1129.245705][ T29] audit: type=1400 audit(1774197087.092:2905): avc: denied { ioctl } for pid=20199 comm="syz.1.3357" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1129.263172][T20208] lo speed is unknown, defaulting to 1000 [ 1129.650052][T20216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3361'. [ 1129.724093][ T5932] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1129.916318][T20216] nbd: socks must be embedded in a SOCK_ITEM attr [ 1130.191060][ T5932] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1130.301187][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.429641][ T5932] usb 6-1: Product: syz [ 1130.496605][ T5932] usb 6-1: Manufacturer: syz [ 1130.543627][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1130.565415][ T5932] usb 6-1: SerialNumber: syz [ 1130.758980][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1131.198800][ T29] audit: type=1400 audit(1774197088.917:2906): avc: denied { checkpoint_restore } for pid=20228 comm="syz.1.3364" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1131.267132][T19094] udevd[19094]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1131.290408][T20224] udevd[20224]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1131.364044][ T29] audit: type=1400 audit(1774197089.076:2907): avc: denied { create } for pid=20228 comm="syz.1.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1131.377052][ T5932] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1131.474421][ T5932] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1131.594176][ T5922] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1131.766250][ T5922] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1131.805948][ T5922] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1131.826738][ T5922] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1131.850864][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.527335][ T5922] usb 3-1: usb_control_msg returned -32 [ 1132.544299][ T5922] usbtmc 3-1:16.0: can't read capabilities [ 1132.678351][T20249] random: crng reseeded on system resumption [ 1132.841138][T20249] batman_adv: batadv0: Adding interface: macsec2 [ 1132.847644][T20249] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.882226][T20249] batman_adv: batadv0: Interface activated: macsec2 [ 1133.214314][T20255] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3370'. [ 1133.264167][ T5932] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1133.265212][ T29] audit: type=1400 audit(1774197090.854:2908): avc: denied { ioctl } for pid=20214 comm="syz.5.3362" path="socket:[92217]" dev="sockfs" ino=92217 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1133.600271][T20255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.607892][T20255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.789409][ T29] audit: type=1326 audit(1774197091.350:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20259 comm="syz.1.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66c79c799 code=0x7ffc0000 [ 1133.838155][ T29] audit: type=1326 audit(1774197091.350:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20259 comm="syz.1.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66c79c799 code=0x7ffc0000 [ 1133.897185][ T29] audit: type=1326 audit(1774197091.378:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20259 comm="syz.1.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff66c79c799 code=0x7ffc0000 [ 1133.932711][ T29] audit: type=1326 audit(1774197091.378:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20259 comm="syz.1.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66c79c799 code=0x7ffc0000 [ 1133.960208][ T29] audit: type=1326 audit(1774197091.378:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20259 comm="syz.1.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66c79c799 code=0x7ffc0000 [ 1133.986907][ T29] audit: type=1326 audit(1774197091.387:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20259 comm="syz.1.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff66c79c799 code=0x7ffc0000 [ 1134.122124][ T5922] usb 3-1: USB disconnect, device number 126 [ 1134.142106][ T47] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1134.297764][ T47] usb 4-1: device descriptor read/64, error -71 [ 1134.423031][T20267] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3373'. [ 1134.564878][ T5932] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 1134.606271][ T5932] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1134.659365][ T5932] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1134.693021][ T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1134.693517][ T5932] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1134.761943][ T5932] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1134.836049][ T5932] usb 6-1: USB disconnect, device number 30 [ 1134.842642][ T47] usb 4-1: device descriptor read/64, error -71 [ 1135.005716][ T47] usb usb4-port1: attempt power cycle [ 1135.376935][ T47] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1135.514934][ T47] usb 4-1: device descriptor read/8, error -71 [ 1136.437371][ T47] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1136.456861][ T47] usb 4-1: device descriptor read/8, error -71 [ 1136.628650][ T47] usb usb4-port1: unable to enumerate USB device [ 1137.172190][ T5922] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1137.355609][ T5922] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1137.407540][ T5922] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1137.460935][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1137.460954][ T29] audit: type=1326 audit(1774197094.775:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20316 comm="syz.3.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ffc0000 [ 1137.492477][ T5922] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1137.521530][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.591811][ T29] audit: type=1326 audit(1774197094.784:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20316 comm="syz.3.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ffc0000 [ 1137.686867][ T29] audit: type=1326 audit(1774197094.784:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20316 comm="syz.3.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5600f9c799 code=0x7ffc0000 [ 1137.730350][T19799] Bluetooth: hci0: command 0x0c1a tx timeout [ 1137.791666][ T5922] usb 3-1: usb_control_msg returned -32 [ 1137.813552][ T5922] usbtmc 3-1:16.0: can't read capabilities [ 1137.819419][ T29] audit: type=1326 audit(1774197094.784:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20316 comm="syz.3.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ffc0000 [ 1137.879377][ T29] audit: type=1326 audit(1774197094.784:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20316 comm="syz.3.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ffc0000 [ 1138.358325][ T5922] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1138.437284][ T5932] usb 3-1: USB disconnect, device number 127 [ 1138.521927][ T5922] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1138.532528][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.585058][ T5922] usb 6-1: Product: syz [ 1138.621640][ T5922] usb 6-1: Manufacturer: syz [ 1138.643221][ T5922] usb 6-1: SerialNumber: syz [ 1139.105564][ T5922] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1139.260599][T20334] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3390'. [ 1139.367769][ T5922] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1140.399708][ T5932] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1140.506212][ T24] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1140.559761][ T5896] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 1140.581363][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 1140.590124][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.621639][ T5932] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.643123][ T5932] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.664713][ T5932] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1140.691172][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1140.700308][ T5932] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1140.718631][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.718753][ T5932] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1140.731936][T20345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.736465][ T5896] usb 2-1: Invalid ep0 maxpacket: 16 [ 1140.753429][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.766385][ T24] usb 1-1: Product: syz [ 1140.767489][ T5932] usb 3-1: config 0 descriptor?? [ 1140.770575][ T24] usb 1-1: Manufacturer: syz [ 1140.770597][ T24] usb 1-1: SerialNumber: syz [ 1140.817299][T20345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.826501][ T24] usb 1-1: config 0 descriptor?? [ 1140.836723][ T5922] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1140.843782][ T24] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1140.891101][ T5896] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 1141.011362][ T5932] hid-thrustmaster 0003:044F:B65D.002E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 1141.040751][ T5932] hid-thrustmaster 0003:044F:B65D.002E: Wrong number of endpoints? [ 1141.072603][ T5896] usb 2-1: Invalid ep0 maxpacket: 16 [ 1141.078173][ T5896] usb usb2-port1: attempt power cycle [ 1141.128904][ C0] hid-thrustmaster 0003:044F:B65D.002E: URB to get model id failed with error -71 [ 1141.133080][ T793] usb 3-1: USB disconnect, device number 2 [ 1141.374482][ T24] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input49 [ 1142.017395][ T5896] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 1142.056360][ T5896] usb 2-1: Invalid ep0 maxpacket: 16 [ 1142.205342][ T5896] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 1142.259717][ T5896] usb 2-1: Invalid ep0 maxpacket: 16 [ 1142.272406][ T29] audit: type=1400 audit(1774197099.285:2933): avc: denied { ioctl } for pid=20355 comm="syz.3.3395" path="socket:[92418]" dev="sockfs" ino=92418 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1142.308818][ T5896] usb usb2-port1: unable to enumerate USB device [ 1142.535129][ T29] audit: type=1400 audit(1774197099.445:2934): avc: denied { audit_write } for pid=20355 comm="syz.3.3395" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1142.721334][ T5922] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 1142.763473][ T5922] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1142.775651][ T5922] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1142.785797][ T5922] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1142.796283][ T5922] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1142.812311][ T5922] usb 6-1: USB disconnect, device number 31 [ 1142.890852][ T47] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1143.073058][ T47] usb 3-1: config 3 has an invalid interface number: 212 but max is 2 [ 1143.081873][ T47] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1143.091002][ T47] usb 3-1: config 3 has an invalid interface number: 67 but max is 2 [ 1143.099167][ T47] usb 3-1: config 3 has an invalid interface number: 4 but max is 2 [ 1143.107204][ T47] usb 3-1: config 3 has no interface number 0 [ 1143.113279][ T47] usb 3-1: config 3 has no interface number 1 [ 1143.120615][ T47] usb 3-1: config 3 has no interface number 2 [ 1143.126811][ T47] usb 3-1: config 3 interface 212 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 1143.138413][ T47] usb 3-1: config 3 interface 212 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1143.145650][ T5922] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1143.149339][ T47] usb 3-1: config 3 interface 212 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1143.167765][ T47] usb 3-1: config 3 interface 212 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1143.178746][ T47] usb 3-1: config 3 interface 212 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1143.189657][ T47] usb 3-1: config 3 interface 212 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1143.200768][ T47] usb 3-1: config 3 interface 212 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1143.200856][T10472] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1143.211659][ T47] usb 3-1: config 3 interface 212 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1143.230031][ T47] usb 3-1: config 3 interface 212 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1143.241247][ T47] usb 3-1: config 3 interface 212 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 1143.252158][ T47] usb 3-1: config 3 interface 212 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1143.263288][ T47] usb 3-1: config 3 interface 67 altsetting 6 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1143.274270][ T47] usb 3-1: config 3 interface 67 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 1143.285153][ T47] usb 3-1: config 3 interface 67 altsetting 6 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 1143.296295][ T47] usb 3-1: config 3 interface 67 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 1143.306932][ T47] usb 3-1: config 3 interface 67 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 1143.317601][ T47] usb 3-1: config 3 interface 67 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 1143.328244][ T47] usb 3-1: config 3 interface 67 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 1143.328800][ T5922] usb 6-1: config 251 has an invalid interface number: 154 but max is 0 [ 1143.339005][ T47] usb 3-1: config 3 interface 67 altsetting 6 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1143.347642][ T5922] usb 6-1: config 251 has no interface number 0 [ 1143.358106][ T47] usb 3-1: config 3 interface 67 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 1143.358134][ T47] usb 3-1: config 3 interface 67 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 1143.358163][ T47] usb 3-1: config 3 interface 4 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 1143.386438][ T5922] usb 6-1: config 251 interface 154 has no altsetting 0 [ 1143.396993][ T47] usb 3-1: config 3 interface 4 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 1143.414051][ T47] usb 3-1: config 3 interface 4 altsetting 15 has a duplicate endpoint with address 0x9, skipping [ 1143.424677][ T47] usb 3-1: config 3 interface 4 altsetting 15 has a duplicate endpoint with address 0xD, skipping [ 1143.435387][ T47] usb 3-1: config 3 interface 4 altsetting 15 has a duplicate endpoint with address 0xB, skipping [ 1143.435517][T10472] usb 4-1: Using ep0 maxpacket: 32 [ 1143.446018][ T47] usb 3-1: config 3 interface 67 has no altsetting 0 [ 1143.446040][ T47] usb 3-1: config 3 interface 4 has no altsetting 0 [ 1143.448264][ T47] usb 3-1: New USB device found, idVendor=04e8, idProduct=4471, bcdDevice=47.1d [ 1143.459567][T10472] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1143.475392][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.485853][ T5922] usb 6-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=6a.3e [ 1143.502909][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.511625][ T5922] usb 6-1: Product: syz [ 1143.516031][ T5922] usb 6-1: Manufacturer: syz [ 1143.520888][T17738] usb 1-1: USB disconnect, device number 122 [ 1143.521771][ T5922] usb 6-1: SerialNumber: syz [ 1143.532706][T10472] usb 4-1: New USB device found, idVendor=0e41, idProduct=4247, bcdDevice= 0.40 [ 1143.559120][ T47] usb 3-1: Product: âªà·ë«¼æ—¡ë—궥â¦è¾…巤뤮烘ὑࠥ乧鿋媄늗挧ç낳臃밈븓鉳ﳵ힞㽌ⴸቚc믱녌샔긾å¾é  åª½ä‰‘䛶펉ｄ딯࿊⯎⚋꧇䒗툫啄✘অ⇨乎法ê‘९鉳켟ꨋ俆寒 [ 1143.560156][T10472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.593306][ T29] audit: type=1400 audit(1774197100.521:2935): avc: denied { ioctl } for pid=20377 comm="syz.0.3400" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1143.606520][ T24] hid-generic 0008:0001:0003.002F: item fetching failed at offset 1/58 [ 1143.629610][T20378] syz_tun: entered promiscuous mode [ 1143.646270][T20378] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1143.646761][T10472] usb 4-1: Product: syz [ 1143.664522][ T47] usb 3-1: Manufacturer: 銥㠀㟴旺ꪒퟒࢧ岄頦ោâ¥á¥™ä¦ºà¦‚៲äᘲ秢줎復ꂇ⎒ê­ì¤¼î†¾ì¥…ᚽ▃讽ࠣï¯ëƒšç–‹í‰€î¾£î¦²â·ªá¿ ïžºäŠ”믤ꑅè®ë¦®ìƒ¨Õ¿ã©®ïº’鶎燞⧃댎髟逛甦緈옰馱ì´éšá’¶Ó갺믳蓃é¿â³±î‡°ï¬ƒâ†·È™ç•™ì¯­à¼¨æ­šç¸¿â©´ë•ç¬žì¨¾ê¹…㩢詰薷邯ե矸噽ュ嘚ꄎ軻 [ 1143.671451][T10472] usb 4-1: Manufacturer: syz [ 1143.698033][ T24] hid-generic 0008:0001:0003.002F: probe with driver hid-generic failed with error -22 [ 1143.702628][T10472] usb 4-1: SerialNumber: syz [ 1143.716770][ T47] usb 3-1: SerialNumber: င [ 1143.893660][T20384] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3402'. [ 1144.173949][T10472] usb 4-1: BAAD HEADPHONE p_chmask mismatch [ 1144.210761][T20369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.235176][ T47] usb 3-1: USB disconnect, device number 3 [ 1144.250441][T20369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.291856][ T5922] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 1144.312443][ T5922] gspca_zc3xx: reg_w_i err -71 [ 1144.322537][ T5922] gspca_zc3xx 6-1:251.154: probe with driver gspca_zc3xx failed with error -71 [ 1144.340480][T10472] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1144.362043][ T5922] usb 6-1: USB disconnect, device number 32 [ 1144.395313][T19065] udevd[19065]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1144.411508][T10472] usb 4-1: USB disconnect, device number 17 [ 1144.785849][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 1144.795387][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 1145.109062][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 1145.130348][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 1145.413197][T20399] ceph: No mds server is up or the cluster is laggy [ 1145.751769][T20403] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1145.810655][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 1145.817364][T20403] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1145.817492][T20403] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1145.817614][T20403] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1145.817765][T20403] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1145.849479][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 1146.185322][T10472] libceph: connect (1)[c::]:6789 error -101 [ 1146.220817][T10472] libceph: mon0 (1)[c::]:6789 connect error [ 1146.234973][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 1146.241229][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 1146.422474][T20419] ceph: No mds server is up or the cluster is laggy [ 1146.458449][ T5922] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1146.826292][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 1146.835110][T20428] ceph: No mds server is up or the cluster is laggy [ 1146.850828][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 1146.997680][ T29] audit: type=1400 audit(2000000001.806:2936): avc: denied { read } for pid=20437 comm="syz.1.3415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1147.059143][ T5922] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1147.078161][T19799] Bluetooth: hci3: command 0x2016 tx timeout [ 1147.084519][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.102450][ T5922] usb 3-1: Product: syz [ 1147.111085][ T5922] usb 3-1: Manufacturer: syz [ 1147.120973][ T5922] usb 3-1: SerialNumber: syz [ 1147.237196][ T29] audit: type=1400 audit(2000000002.021:2937): avc: denied { map } for pid=20443 comm="syz.1.3417" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1147.366026][ T29] audit: type=1400 audit(2000000002.021:2938): avc: denied { call } for pid=20443 comm="syz.1.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1147.392372][T20446] netlink: 408 bytes leftover after parsing attributes in process `syz.1.3418'. [ 1147.419447][T20446] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3418'. [ 1147.441190][T20446] openvswitch: netlink: EtherType 0 is less than min 600 [ 1147.473565][ T47] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1147.575169][ T5922] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1147.612650][ T5922] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1148.786986][T19799] Bluetooth: hci2: command 0x0c1a tx timeout [ 1148.787115][T12989] Bluetooth: hci0: command 0x0c1a tx timeout [ 1148.793090][T19799] Bluetooth: hci1: command 0x0405 tx timeout [ 1148.793122][T19799] Bluetooth: hci5: command 0x0406 tx timeout [ 1149.604878][T20461] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1149.614235][T20461] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1149.623813][T20461] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1149.684589][ T47] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1149.705871][ T47] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1149.730139][ T47] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1149.824433][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.877566][T20466] comedi comedi3: dac02: I/O port conflict (0x1,8) [ 1149.993552][T20471] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.190352][ T47] usb 4-1: usb_control_msg returned -32 [ 1150.219812][T20471] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.399551][ T5922] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1150.422372][ T47] usbtmc 4-1:16.0: can't read capabilities [ 1150.433174][ T5922] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1150.466981][ T5922] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1150.494795][ T5922] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1150.524828][T20471] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.544939][ T5922] usb 3-1: USB disconnect, device number 4 [ 1150.611263][T20471] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.661785][T20480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3425'. [ 1150.796400][ T1160] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.809841][ T47] usb 4-1: USB disconnect, device number 18 [ 1151.134942][T14006] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.150173][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 1151.161167][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 1151.183333][T20489] ceph: No mds server is up or the cluster is laggy [ 1151.233023][ T9088] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.285271][ T1160] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.462168][T20498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.483175][T20498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.705277][ T5922] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1152.250190][ T5932] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1152.261073][ T5922] usb 2-1: device descriptor read/64, error -71 [ 1152.389172][ T5932] usb 1-1: device descriptor read/64, error -71 [ 1152.517519][ T5922] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1152.668669][ T5932] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1152.806130][ T5922] usb 2-1: device descriptor read/64, error -71 [ 1152.998202][ T5932] usb 1-1: device descriptor read/64, error -71 [ 1153.052027][ T5922] usb usb2-port1: attempt power cycle [ 1153.703013][ T5932] usb usb1-port1: attempt power cycle [ 1153.853507][ T5896] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1153.877018][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3436'. [ 1154.002845][ T5922] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1154.014911][T20521] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3436'. [ 1154.030111][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 1154.046389][ T5922] usb 2-1: device descriptor read/8, error -71 [ 1154.052896][ T5896] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1154.062813][ T5896] usb 4-1: config 0 has no interface number 0 [ 1154.071491][ T5896] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1154.080919][ T5932] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1154.094101][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.103271][ T5896] usb 4-1: Product: syz [ 1154.108192][ T5896] usb 4-1: Manufacturer: syz [ 1154.114297][ T5896] usb 4-1: SerialNumber: syz [ 1154.120995][ T5896] usb 4-1: config 0 descriptor?? [ 1154.129231][ T5932] usb 1-1: device descriptor read/8, error -71 [ 1154.137158][ T29] audit: type=1400 audit(2000000008.468:2939): avc: denied { listen } for pid=20517 comm="syz.5.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1154.163339][ T29] audit: type=1400 audit(2000000008.468:2940): avc: denied { connect } for pid=20517 comm="syz.5.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1154.323261][ T5922] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1154.345694][ T5922] usb 2-1: device descriptor read/8, error -71 [ 1154.355327][T10472] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1154.408830][ T5932] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1154.430775][ T5932] usb 1-1: device descriptor read/8, error -71 [ 1154.462643][ T5922] usb usb2-port1: unable to enumerate USB device [ 1154.515784][T10472] usb 3-1: Using ep0 maxpacket: 8 [ 1154.527759][T10472] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.538409][T10472] usb 3-1: config 0 has no interfaces? [ 1154.543958][T10472] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1154.554751][ T5932] usb usb1-port1: unable to enumerate USB device [ 1154.561803][T10472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.576419][T10472] usb 3-1: config 0 descriptor?? [ 1154.715775][T20525] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.848907][T20507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.857598][T20507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.121616][ T5896] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1155.138901][T20525] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.151859][ T5896] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1155.420401][ T5896] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1155.448456][T20535] ceph: No mds server is up or the cluster is laggy [ 1155.490509][ T5896] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1155.490610][T20540] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.541783][ T5896] usb 4-1: USB disconnect, device number 19 [ 1155.875938][T20525] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.973308][T20540] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.099572][T20525] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.593089][T20540] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.691895][T20540] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.055295][ T9082] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.112391][ T9082] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.199584][ T9082] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.246154][ T9082] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.379554][ T29] audit: type=1400 audit(2000000011.463:2941): avc: denied { getopt } for pid=20557 comm="syz.3.3443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1157.622793][ T29] audit: type=1400 audit(2000000011.744:2942): avc: denied { setopt } for pid=20562 comm="syz.5.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1157.650531][ T9082] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.669433][ T9082] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.686370][ T9082] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.700128][ T9082] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.807744][T20571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.819685][T20571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.978051][ T793] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1157.990413][T20558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1158.064018][ T24] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1158.485876][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1159.243747][ T793] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1159.254893][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.263927][ T24] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.277845][ T793] usb 2-1: Product: syz [ 1159.285062][ T793] usb 2-1: Manufacturer: syz [ 1159.289799][ T793] usb 2-1: SerialNumber: syz [ 1159.294665][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1159.307997][ T24] usb 1-1: string descriptor 0 read error: -22 [ 1159.322221][ T24] usb 1-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.40 [ 1159.331786][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.652185][ T24] usbhid 1-1:1.0: can't add hid device: -71 [ 1159.662954][ T5896] usb 3-1: USB disconnect, device number 5 [ 1159.674627][ T24] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1159.738855][ T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1159.751754][ T24] usb 1-1: USB disconnect, device number 127 [ 1159.775159][T20586] 9p: Bad value for 'rfdno' [ 1159.789121][ T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1159.844262][T20596] loop2: detected capacity change from 0 to 7 [ 1159.852192][T20596] Dev loop2: unable to read RDB block 7 [ 1159.857883][T20596] loop2: unable to read partition table [ 1159.865076][T20596] loop2: partition table beyond EOD, truncated [ 1159.880126][T20596] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1160.008655][ T5896] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1160.170663][T20603] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3454'. [ 1160.304321][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 1160.334643][ T5896] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 1160.343338][ T5896] usb 4-1: config 0 has no interface number 0 [ 1160.356492][ T5896] usb 4-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1160.382309][ T5896] usb 4-1: config 0 interface 246 altsetting 255 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1160.396418][ T5896] usb 4-1: config 0 interface 246 has no altsetting 0 [ 1160.416371][ T5896] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 1160.541264][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.549624][ T5896] usb 4-1: Product: syz [ 1160.554825][ T5896] usb 4-1: Manufacturer: syz [ 1160.559424][ T5896] usb 4-1: SerialNumber: syz [ 1160.566914][ T5896] usb 4-1: config 0 descriptor?? [ 1161.095182][T20584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.127321][T20584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.192844][ T5896] usb 4-1: USB disconnect, device number 20 [ 1161.463487][T20625] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1161.470921][T20625] ALSA: mixer_oss: invalid index 1374389 [ 1161.606444][ T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1162.511710][T20636] netlink: 'syz.5.3463': attribute type 2 has an invalid length. [ 1162.778328][ T29] audit: type=1400 audit(2000000016.301:2943): avc: denied { mount } for pid=20631 comm="syz.5.3463" name="/" dev="hugetlbfs" ino=94260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1162.945744][T20640] loop2: detected capacity change from 0 to 7 [ 1162.963383][T20640] Dev loop2: unable to read RDB block 7 [ 1162.981380][ T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 1162.993409][T20640] loop2: unable to read partition table [ 1162.993569][T20640] loop2: partition table beyond EOD, truncated [ 1162.993596][T20640] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1163.088386][ T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1163.100788][ T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1163.111658][ T793] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1163.216180][ T793] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1164.043508][T20656] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1164.204429][T20653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3468'. [ 1164.330877][T20651] ceph: No mds server is up or the cluster is laggy [ 1164.339803][ T793] usb 2-1: USB disconnect, device number 27 [ 1164.485647][ T29] audit: type=1400 audit(2000000018.163:2944): avc: denied { map } for pid=20660 comm="syz.5.3471" path="socket:[94284]" dev="sockfs" ino=94284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1164.581914][ T29] audit: type=1400 audit(2000000018.163:2945): avc: denied { accept } for pid=20660 comm="syz.5.3471" path="socket:[94284]" dev="sockfs" ino=94284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1164.667449][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1165.129441][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1165.487018][ T29] audit: type=1400 audit(2000000018.294:2946): avc: denied { open } for pid=20662 comm="syz.5.3472" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1165.510941][ T29] audit: type=1400 audit(2000000018.294:2947): avc: denied { ioctl } for pid=20662 comm="syz.5.3472" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1165.512262][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1166.010347][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.026136][ T9] usb 4-1: Product: syz [ 1166.030346][ T9] usb 4-1: Manufacturer: syz [ 1166.035067][ T9] usb 4-1: SerialNumber: syz [ 1166.066897][ T9] usb 4-1: config 0 descriptor?? [ 1166.294132][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1166.303145][T20685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.311728][T20685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.335226][T20685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.343819][T20685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.367290][T20685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.375895][T20685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.401826][T20685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.420226][T20685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.428841][T20685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.457195][T20685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.473409][ T5896] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 1166.506087][ T5922] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1166.525115][T20688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3477'. [ 1166.534452][T20688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3477'. [ 1166.567451][T20680] netlink: 'syz.5.3474': attribute type 1 has an invalid length. [ 1166.645967][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1166.662909][ T5896] usb 2-1: config 255 has an invalid interface number: 202 but max is 0 [ 1166.677245][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 1166.686603][ T5896] usb 2-1: config 255 has no interface number 0 [ 1166.699766][ T5922] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1166.717460][ T5896] usb 2-1: config 255 interface 202 has no altsetting 0 [ 1166.726799][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1166.738856][ T5922] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1166.757548][ T9] usb 4-1: USB disconnect, device number 21 [ 1166.779969][ T5896] usb 2-1: string descriptor 0 read error: -22 [ 1166.790711][ T5922] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1166.805657][ T5896] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=33.c7 [ 1166.822121][ T793] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1166.831951][ T5922] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1166.851842][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.879102][ T5896] lan78xx 2-1:255.202 (unnamed net_device) (uninitialized): USB bus speed not supported [ 1166.890210][ T5922] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1166.899255][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.931572][ T5896] lan78xx 2-1:255.202: probe with driver lan78xx failed with error -5 [ 1167.001443][ T793] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1167.029093][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.045276][ T793] usb 3-1: Product: syz [ 1167.049611][ T793] usb 3-1: Manufacturer: syz [ 1167.057893][ T793] usb 3-1: SerialNumber: syz [ 1167.071288][ T793] usb 3-1: config 0 descriptor?? [ 1167.093357][ T793] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1167.184647][T20694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1167.438455][ T5896] usb 2-1: USB disconnect, device number 28 [ 1167.448451][ T793] gspca_sunplus: reg_r err -71 [ 1167.453832][ T5922] usb 1-1: GET_CAPABILITIES returned 0 [ 1167.459646][ T793] usb 3-1: USB disconnect, device number 6 [ 1167.475594][ T5922] usbtmc 1-1:16.0: can't read capabilities [ 1167.521510][ T47] usb 1-1: USB disconnect, device number 2 [ 1167.691719][ T29] audit: type=1326 audit(2000000020.164:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1167.722298][ T29] audit: type=1326 audit(2000000020.164:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1167.746428][ T29] audit: type=1326 audit(2000000020.164:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1167.771251][ T29] audit: type=1326 audit(2000000020.164:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1167.799637][ T29] audit: type=1326 audit(2000000020.164:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1167.905248][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1168.083700][ T47] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1168.098376][T20712] netlink: 'syz.1.3482': attribute type 2 has an invalid length. [ 1168.101172][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.125390][ T47] usb 1-1: Product: syz [ 1168.137836][ T29] kauditd_printk_skb: 1913 callbacks suppressed [ 1168.137852][ T29] audit: type=1326 audit(2000000020.586:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1168.167940][ T47] usb 1-1: Manufacturer: syz [ 1168.172705][ T47] usb 1-1: SerialNumber: syz [ 1168.183827][ T29] audit: type=1326 audit(2000000020.586:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1168.242134][T20712] sp0: Synchronizing with TNC [ 1168.251113][ T29] audit: type=1326 audit(2000000020.586:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1168.277647][ T29] audit: type=1326 audit(2000000020.586:4869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1168.301715][ T29] audit: type=1326 audit(2000000020.586:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1168.325657][ T29] audit: type=1326 audit(2000000020.586:4871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1168.349870][ T29] audit: type=1326 audit(2000000020.586:4872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1168.380588][ T29] audit: type=1326 audit(2000000020.586:4873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1168.407895][ T29] audit: type=1326 audit(2000000020.586:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1168.478827][T20718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3483'. [ 1168.641359][ T29] audit: type=1326 audit(2000000020.586:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20703 comm="syz.3.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5600f9c799 code=0x7ff00000 [ 1168.724258][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1168.791849][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1168.960670][T20725] nbd: must specify at least one socket [ 1169.131515][T20725] IPVS: length: 8 != 82328628000 [ 1169.262409][ T793] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1169.792591][ T793] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1169.832566][ T793] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1169.846092][ T793] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1169.857905][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.138090][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1170.233882][ T793] usb 2-1: usb_control_msg returned -32 [ 1170.255457][ T793] usbtmc 2-1:16.0: can't read capabilities [ 1170.854037][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 1170.875199][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1170.879934][ T5922] usb 2-1: USB disconnect, device number 29 [ 1170.890707][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1170.904462][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1170.933804][ T47] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1170.949038][ T47] usb 1-1: USB disconnect, device number 3 [ 1171.171074][T20782] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1171.199499][T20775] openvswitch: netlink: Unknown key attributes 1 [ 1171.682151][T20780] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3490'. [ 1171.919774][T20798] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.328409][T20798] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.375986][T20798] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.428250][T20817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3497'. [ 1172.428250][T20818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3497'. [ 1172.484589][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3497'. [ 1172.516118][T20798] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.610513][T20827] loop2: detected capacity change from 0 to 7 [ 1172.632288][T20827] Dev loop2: unable to read RDB block 7 [ 1172.647224][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.655819][T20827] loop2: unable to read partition table [ 1172.671958][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.672053][T20827] loop2: partition table beyond EOD, truncated [ 1172.704195][T20827] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1172.719327][ T1160] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.732383][ T1160] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.702136][ T793] libceph: connect (1)[c::]:6789 error -101 [ 1173.717573][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 1173.798898][T20838] ceph: No mds server is up or the cluster is laggy [ 1174.452917][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1174.452929][ T29] audit: type=1400 audit(2000000026.500:4936): avc: denied { setopt } for pid=20854 comm="syz.1.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1175.109003][T17738] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1175.157748][T20866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3510'. [ 1175.168892][T20866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3510'. [ 1175.270680][T20871] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.291055][T17738] usb 1-1: config 84 has an invalid interface number: 116 but max is 0 [ 1175.307176][T20871] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.317802][T17738] usb 1-1: config 84 has no interface number 0 [ 1175.324746][T17738] usb 1-1: config 84 interface 116 has no altsetting 0 [ 1175.339348][T17738] usb 1-1: New USB device found, idVendor=18ec, idProduct=3290, bcdDevice= a.66 [ 1175.351252][T17738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.360821][T17738] usb 1-1: Product: syz [ 1175.365527][T17738] usb 1-1: Manufacturer: syz [ 1175.370176][T17738] usb 1-1: SerialNumber: syz [ 1175.469470][T20871] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.711364][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3512'. [ 1176.234283][T17738] uvcvideo 1-1:84.116: Found UVC 0.0b device syz (18ec:3290) [ 1176.251472][T17738] uvcvideo 1-1:84.116: No valid video chain found. [ 1176.303405][T20871] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.314072][T17738] usb 1-1: USB disconnect, device number 4 [ 1177.066410][T20901] comedi comedi3: comedi_parport: I/O port conflict (0x4f27,3) [ 1177.097146][ T391] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.129738][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.164988][ T391] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.267253][T20905] ceph: No mds server is up or the cluster is laggy [ 1177.278746][ T391] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.523688][T20914] ksmbd: Unknown IPC event: 4, ignore. [ 1177.785735][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 1177.793233][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 1177.808524][T20915] ceph: No mds server is up or the cluster is laggy [ 1178.767289][ T5896] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1179.179005][ T5896] usb 4-1: device descriptor read/64, error -71 [ 1179.435448][ T5896] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1179.837058][T20946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3528'. [ 1179.844834][T20945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3528'. [ 1179.894961][ T5896] usb 4-1: device descriptor read/64, error -71 [ 1179.969754][ T5922] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1180.016782][ T5896] usb usb4-port1: attempt power cycle [ 1180.209500][T20957] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1180.311872][ T5922] usb 2-1: device descriptor read/64, error -71 [ 1180.625042][ T5896] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1180.663718][ T5896] usb 4-1: device descriptor read/8, error -71 [ 1180.696407][ T5922] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1180.840887][T20976] kAFS: unable to lookup cell 'Þ({^ú@' [ 1180.846534][ T5922] usb 2-1: device descriptor read/64, error -71 [ 1180.952979][ T5896] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1180.974456][ T5922] usb usb2-port1: attempt power cycle [ 1181.008516][ T5896] usb 4-1: device descriptor read/8, error -71 [ 1181.479567][ T5896] usb usb4-port1: unable to enumerate USB device [ 1181.604509][T20997] loop2: detected capacity change from 0 to 7 [ 1181.613532][T20997] Dev loop2: unable to read RDB block 7 [ 1181.619549][T20997] loop2: unable to read partition table [ 1181.625365][T20997] loop2: partition table beyond EOD, truncated [ 1181.632313][T20997] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1181.829161][ T5922] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1181.854088][ T5922] usb 2-1: device descriptor read/8, error -71 [ 1182.235383][T21005] ceph: No mds server is up or the cluster is laggy [ 1182.310224][ T5922] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1182.345632][ T5922] usb 2-1: device descriptor read/8, error -71 [ 1182.405013][T21011] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -20977, delta: 1 [ 1182.416306][T21011] ref_ctr increment failed for inode: 0x442 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880350d55c0 [ 1182.513303][ T5922] usb usb2-port1: unable to enumerate USB device [ 1182.835998][ T5922] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1182.865715][T19799] Bluetooth: hci4: command 0x1003 tx timeout [ 1182.873894][T12989] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1182.876401][ T5932] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1183.143640][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 1183.152686][ T5922] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1183.162996][ T5922] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1183.170235][T21033] loop2: detected capacity change from 0 to 7 [ 1183.173492][ T5922] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1183.189341][T19065] Dev loop2: unable to read RDB block 7 [ 1183.191659][ T5922] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 1183.205901][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.215505][ T5922] usb 2-1: Product: syz [ 1183.221650][ T5922] usb 2-1: Manufacturer: syz [ 1183.230889][ T5932] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1183.251515][ T5922] usb 2-1: SerialNumber: syz [ 1183.259056][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.291548][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50901, setting to 1024 [ 1183.358484][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1183.377318][ T5932] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1183.391891][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.434473][ T5932] usb 1-1: config 0 descriptor?? [ 1183.469316][T21018] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1183.478460][T19065] loop2: unable to read partition table [ 1183.484388][T19065] loop2: partition table beyond EOD, truncated [ 1183.505052][T21033] Dev loop2: unable to read RDB block 7 [ 1183.516997][T21033] loop2: unable to read partition table [ 1183.524104][T21033] loop2: partition table beyond EOD, truncated [ 1183.528008][ T5922] usb 2-1: USB disconnect, device number 34 [ 1183.531448][T21033] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1184.169643][T21048] ceph: No mds server is up or the cluster is laggy [ 1185.806505][ T47] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1186.049931][T17738] usb 1-1: USB disconnect, device number 5 [ 1186.055922][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 1186.090165][ T47] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1186.103648][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.116174][ T47] usb 2-1: Product: syz [ 1186.120444][ T47] usb 2-1: Manufacturer: syz [ 1186.132264][ T47] usb 2-1: SerialNumber: syz [ 1186.277360][ T47] usb 2-1: config 0 descriptor?? [ 1186.318871][ T47] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1188.414066][ T29] audit: type=1400 audit(2000000039.564:4937): avc: denied { execmod } for pid=21085 comm="syz.0.3568" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=94114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1188.722609][ T47] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 1189.376277][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1189.394396][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1189.414221][T21097] ceph: No mds server is up or the cluster is laggy [ 1192.093515][ T24] usb 2-1: USB disconnect, device number 35 [ 1192.146016][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3575'. [ 1192.161982][T21127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3575'. [ 1192.358019][ T29] audit: type=1326 audit(2000000043.260:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21131 comm="syz.1.3578" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff66c79c799 code=0x0 [ 1192.878487][ T29] audit: type=1400 audit(2000000043.447:4939): avc: denied { watch } for pid=21125 comm="syz.2.3573" path="/76/bus/file1" dev="overlay" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1193.597136][T21160] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1193.652296][T21158] bridge_slave_0: left allmulticast mode [ 1193.678245][T21158] bridge_slave_0: left promiscuous mode [ 1193.704180][T21158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.034636][T21158] bridge_slave_1: left allmulticast mode [ 1194.052601][T21158] bridge_slave_1: left promiscuous mode [ 1194.082160][T21158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.118443][T21158] bond0: (slave bond_slave_0): Releasing backup interface [ 1194.143744][T21158] bond0: (slave bond_slave_1): Releasing backup interface [ 1194.193007][T21158] team0: Port device team_slave_0 removed [ 1194.215665][T21158] team0: Port device team_slave_1 removed [ 1194.222974][T21158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1194.230703][T21158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.239455][T21158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.247580][T21158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.260133][T21173] netlink: 'syz.5.3585': attribute type 21 has an invalid length. [ 1194.270076][T21158] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1194.403801][ T5896] lo speed is unknown, defaulting to 1000 [ 1194.614647][T21163] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.666107][T21182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3587'. [ 1194.756276][T21163] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.137559][T21191] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3589'. [ 1195.171054][T21163] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.255356][T21195] netlink: 'syz.5.3591': attribute type 10 has an invalid length. [ 1195.266879][T21195] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3591'. [ 1195.267631][ T29] audit: type=1400 audit(2000000045.974:4940): avc: denied { getopt } for pid=21194 comm="syz.2.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1195.399150][T21163] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.517570][T21201] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21201 comm=syz.3.3592 [ 1195.560237][T21201] 9pnet_virtio: no channels available for device syz [ 1195.939328][ T29] audit: type=1400 audit(2000000046.095:4941): avc: denied { ioctl } for pid=21194 comm="syz.2.3590" path="socket:[96274]" dev="sockfs" ino=96274 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1196.081085][ T67] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.127979][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1196.134358][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1196.286698][ T67] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.298048][ T67] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.306461][ T67] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.581876][ T29] audit: type=1400 audit(2000000047.209:4942): avc: denied { ioctl } for pid=21208 comm="syz.1.3595" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1196.642669][ T29] audit: type=1400 audit(2000000047.209:4943): avc: denied { ioctl } for pid=21208 comm="syz.1.3595" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1196.668665][ T29] audit: type=1400 audit(2000000047.209:4944): avc: denied { read } for pid=21208 comm="syz.1.3595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1196.698451][ T29] audit: type=1400 audit(2000000047.209:4945): avc: denied { setattr } for pid=21208 comm="syz.1.3595" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 1196.932310][T21234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1197.090136][ T47] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1197.110866][T21237] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3601'. [ 1197.486080][ T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.502130][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1197.538724][ T47] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1197.560733][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1197.595789][ T47] usb 2-1: SerialNumber: syz [ 1197.846143][ T47] usb 2-1: 0:2 : does not exist [ 1197.893795][ T47] usb 2-1: unit 5: unexpected type 0x0e [ 1197.991812][ T47] usb 2-1: USB disconnect, device number 36 [ 1198.058765][T19065] udevd[19065]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1199.090379][ T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1199.181054][T17738] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1199.277906][ T47] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1199.312436][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.320605][ T47] usb 1-1: Product: syz [ 1199.604985][T17738] usb 4-1: device descriptor read/64, error -71 [ 1199.663368][ T47] usb 1-1: Manufacturer: syz [ 1199.675674][ T47] usb 1-1: SerialNumber: syz [ 1199.807067][T21285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3614'. [ 1199.931538][T17738] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1200.262672][T17738] usb 4-1: device descriptor read/64, error -71 [ 1200.389351][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1200.405106][T17738] usb usb4-port1: attempt power cycle [ 1200.419633][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1200.444220][ T793] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1200.893071][ T793] usb 2-1: Using ep0 maxpacket: 32 [ 1200.907262][ T793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.911182][ T29] audit: type=1400 audit(2000000051.252:4946): avc: denied { ioctl } for pid=21306 comm="syz.5.3621" path="socket:[96625]" dev="sockfs" ino=96625 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1200.942188][ T793] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.942219][ T793] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.942240][ T793] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1200.942285][ T793] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1200.942313][ T793] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1200.942333][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.002664][ T793] usb 2-1: config 0 descriptor?? [ 1201.044765][T17738] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1201.064459][T17738] usb 4-1: device descriptor read/8, error -71 [ 1201.320501][T17738] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1201.342296][T17738] usb 4-1: device descriptor read/8, error -71 [ 1201.446735][ T793] hid-thrustmaster 0003:044F:B65D.0030: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 1201.459185][ T793] hid-thrustmaster 0003:044F:B65D.0030: Wrong number of endpoints? [ 1201.467635][T17738] usb usb4-port1: unable to enumerate USB device [ 1201.543459][T21315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21315 comm=syz.5.3623 [ 1201.558131][T21315] netlink: 'syz.5.3623': attribute type 1 has an invalid length. [ 1201.580863][T21315] bond1: entered promiscuous mode [ 1201.585920][T21315] bond1: entered allmulticast mode [ 1201.593038][T21315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1201.608287][T21315] erspan1: entered allmulticast mode [ 1201.616459][T21315] bond1: (slave erspan1): making interface the new active one [ 1201.625503][T21315] erspan1: entered promiscuous mode [ 1201.631798][T21315] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 1201.717319][ T29] audit: type=1400 audit(2000000052.019:4947): avc: denied { ioctl } for pid=21290 comm="syz.1.3616" path="ipc:[4026532834]" dev="nsfs" ino=4026532834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1201.782085][ C1] hid-thrustmaster 0003:044F:B65D.0030: URB to get model id failed with error -71 [ 1201.791621][T17738] usb 2-1: USB disconnect, device number 37 [ 1203.530141][ T29] audit: type=1400 audit(2000000053.704:4948): avc: denied { getopt } for pid=21338 comm="syz.2.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1203.575934][T21343] sctp: [Deprecated]: syz.1.3631 (pid 21343) Use of int in max_burst socket option deprecated. [ 1203.575934][T21343] Use struct sctp_assoc_value instead [ 1203.619612][T21343] lo speed is unknown, defaulting to 1000 [ 1203.636282][T21343] lo speed is unknown, defaulting to 1000 [ 1203.636393][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO [ 1203.643557][T21343] lo speed is unknown, defaulting to 1000 [ 1203.725320][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1203.739870][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1203.739925][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1203.740379][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1203.743859][T21343] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1203.749053][ T47] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1203.767837][ T47] usb 1-1: USB disconnect, device number 6 [ 1203.866356][T21343] lo speed is unknown, defaulting to 1000 [ 1203.900946][T21343] lo speed is unknown, defaulting to 1000 [ 1203.901689][T21343] lo speed is unknown, defaulting to 1000 [ 1203.902434][T21343] lo speed is unknown, defaulting to 1000 [ 1203.909728][T21343] lo speed is unknown, defaulting to 1000 [ 1204.154771][T21359] netlink: 'syz.3.3633': attribute type 1 has an invalid length. [ 1204.154869][T21359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3633'. [ 1206.054267][ T29] audit: type=1400 audit(2000000056.062:4949): avc: denied { lock } for pid=21368 comm="syz.3.3637" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1207.350703][T21386] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3639'. [ 1207.859221][ T29] audit: type=1400 audit(2000000057.718:4950): avc: denied { mounton } for pid=21407 comm="syz.3.3642" path="/108/file1/file4" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1208.700599][T21417] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.134594][T21417] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.225215][T21422] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3645'. [ 1209.259790][T21417] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.393882][T21422] netlink: 'syz.5.3645': attribute type 1 has an invalid length. [ 1209.414943][T21422] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3645'. [ 1209.428372][T21417] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.536051][ T29] audit: type=1400 audit(2000000059.328:4951): avc: denied { ioctl } for pid=21421 comm="syz.5.3645" path="socket:[96739]" dev="sockfs" ino=96739 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1210.250877][T12989] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 1210.289439][ T9100] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.307768][ T9100] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.339604][T14006] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.362340][ T9100] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.556799][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3650'. [ 1212.573205][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3650'. [ 1213.061037][T21449] syz.2.3649 (21449): drop_caches: 2 [ 1213.470919][ T29] audit: type=1400 audit(2000000063.015:4952): avc: denied { getopt } for pid=21465 comm="syz.2.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1213.845643][T10472] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1213.866568][ T5922] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1214.474976][T10472] usb 1-1: Using ep0 maxpacket: 8 [ 1214.480136][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 1214.487723][T10472] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1214.496010][T10472] usb 1-1: config 179 has no interface number 0 [ 1214.502743][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.513562][ T5922] usb 3-1: config 0 has no interfaces? [ 1214.519353][T10472] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1214.530678][ T5922] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1214.540046][T10472] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1214.551812][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.567625][T10472] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1214.579543][ T5922] usb 3-1: config 0 descriptor?? [ 1214.588505][T10472] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1214.599077][T10472] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1214.620272][T10472] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1214.627275][T10472] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1214.636353][T10472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.666606][T10472] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input50 [ 1215.403073][T17738] usb 1-1: USB disconnect, device number 7 [ 1215.405232][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1215.461490][T21504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3668'. [ 1216.407843][T21513] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1216.505358][T17738] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1216.676759][T21521] No source specified [ 1216.697843][T17738] usb 1-1: Using ep0 maxpacket: 8 [ 1216.722896][T17738] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1216.762471][T17738] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 1216.815301][T17738] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1216.836611][T17738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.862936][T17738] usb 1-1: Product: syz [ 1216.863786][T21524] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3672'. [ 1217.086748][T17738] usb 1-1: Manufacturer: syz [ 1217.091408][T17738] usb 1-1: SerialNumber: syz [ 1217.896959][T17738] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1217.926926][T17738] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1218.447091][ T5948] usb 3-1: USB disconnect, device number 7 [ 1218.649953][T17738] usb 1-1: USB disconnect, device number 8 [ 1218.843918][T19065] udevd[19065]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1218.877789][T21544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3677'. [ 1219.173065][T21546] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1219.716975][T21546] affs: No valid root block on device nullb0 [ 1219.739740][T21546] syzkaller0: entered promiscuous mode [ 1219.754345][T21546] syzkaller0: entered allmulticast mode [ 1219.890227][T21557] netlink: 'syz.5.3674': attribute type 1 has an invalid length. [ 1220.053530][T17738] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1220.066263][T21560] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3681'. [ 1220.258101][T17738] usb 4-1: Using ep0 maxpacket: 8 [ 1220.276642][T21566] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3684'. [ 1220.301554][T17738] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1220.331284][T17738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.339296][T17738] usb 4-1: Product: syz [ 1220.374273][T17738] usb 4-1: Manufacturer: syz [ 1220.378901][T17738] usb 4-1: SerialNumber: syz [ 1220.397790][T17738] usb 4-1: config 0 descriptor?? [ 1220.419193][T17738] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1220.458742][T17738] dvb-usb: bulk message failed: -22 (2/0) [ 1220.477165][T17738] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1220.498772][T21575] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3688'. [ 1220.508020][T17738] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1220.508072][T17738] usb 4-1: media controller created [ 1220.554096][T17738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1220.670186][T17738] dvb-usb: bulk message failed: -22 (1/0) [ 1220.779576][T17738] DVB: Unable to find symbol mt352_attach() [ 1220.795280][T17738] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1220.897505][T17738] rc_core: IR keymap rc-dvico-portable not found [ 1220.910859][T21593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3690'. [ 1220.935020][T17738] Registered IR keymap rc-empty [ 1220.947114][T21575] nbd: socks must be embedded in a SOCK_ITEM attr [ 1220.955435][T17738] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1220.966298][T20224] block nbd64: NBD_DISCONNECT [ 1220.972564][T21580] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3688'. [ 1220.987178][T17738] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input51 [ 1220.988621][T21593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3690'. [ 1221.007632][ T47] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1221.007675][T21580] nbd: device at index 64 is going down [ 1221.033464][T21593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3690'. [ 1221.072734][T17738] dvb-usb: schedule remote query interval to 100 msecs. [ 1221.094150][T17738] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1221.118040][T17738] usb 4-1: USB disconnect, device number 30 [ 1221.207310][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 1221.221300][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.299511][ T47] usb 2-1: config 0 has no interfaces? [ 1221.318981][T21607] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3692'. [ 1221.344891][ T47] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1221.437168][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.510437][T21596] block nbd2: shutting down sockets [ 1221.571570][ T47] usb 2-1: config 0 descriptor?? [ 1221.579728][T17738] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1221.947226][ T29] audit: type=1400 audit(2000000070.885:4953): avc: denied { create } for pid=21608 comm="syz.5.3694" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1222.137049][T17738] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1222.318823][T17738] usb 4-1: Using ep0 maxpacket: 8 [ 1222.328971][T17738] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.351067][T17738] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1222.364218][T17738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1222.376164][T17738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1222.390144][T17738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1222.401730][T17738] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1222.418217][T17738] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1222.428792][T17738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.437277][T21626] loop2: detected capacity change from 0 to 7 [ 1222.446446][T21626] Dev loop2: unable to read RDB block 7 [ 1222.452418][T21626] loop2: unable to read partition table [ 1222.517555][T17738] usb 4-1: Product: syz [ 1222.523001][T21626] loop2: partition table beyond EOD, truncated [ 1222.529369][ T29] audit: type=1400 audit(2000000071.484:4954): avc: denied { unlink } for pid=16192 comm="syz-executor" name="file0" dev="tmpfs" ino=1327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1222.553955][T17738] usb 4-1: Manufacturer: syz [ 1222.558574][T17738] usb 4-1: SerialNumber: syz [ 1222.565095][T21626] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1222.579792][T17738] usb 4-1: config 0 descriptor?? [ 1222.591654][T21613] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1223.003907][T21613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.074465][T21613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.149863][T21613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.237911][T21613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1224.519862][T17738] rc_core: IR keymap rc-snapstream-firefly not found [ 1224.541129][T17738] Registered IR keymap rc-empty [ 1224.581397][T17738] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1224.628593][T17738] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input52 [ 1224.689689][T17738] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input53 [ 1224.742345][T17738] usb 4-1: USB disconnect, device number 31 [ 1224.748305][ C1] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1224.968847][ T24] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1225.121246][T21683] binder: 21679:21683 ioctl 4018620d 0 returned -22 [ 1225.151170][ T5896] usb 2-1: USB disconnect, device number 38 [ 1225.224440][T21681] binder: 21679:21681 ioctl c0306201 0 returned -14 [ 1225.241889][T21681] binder: 21679:21681 ioctl c0306201 0 returned -14 [ 1225.344093][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1225.376315][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1225.431130][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1225.470720][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.774598][ T24] usb 3-1: usb_control_msg returned -32 [ 1225.799328][ T24] usbtmc 3-1:16.0: can't read capabilities [ 1225.848825][ T24] usb 3-1: USB disconnect, device number 8 [ 1226.685640][T21723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3725'. [ 1226.953036][T21733] overlayfs: failed to clone upperpath [ 1227.106041][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1227.479996][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1227.509508][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.561566][ T24] usb 3-1: config 0 has no interfaces? [ 1227.572202][T21756] lo speed is unknown, defaulting to 1000 [ 1227.590569][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1227.600711][T21756] lo speed is unknown, defaulting to 1000 [ 1227.634955][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.706678][ T24] usb 3-1: config 0 descriptor?? [ 1227.800510][ T5896] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1227.971486][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 1227.991736][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.023864][ T5896] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 1228.046591][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.086660][ T5896] usb 4-1: Product: syz [ 1228.107516][ T5896] usb 4-1: Manufacturer: syz [ 1228.121006][ T5896] usb 4-1: SerialNumber: syz [ 1228.373817][T21756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3734'. [ 1228.443085][T21756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3734'. [ 1228.588419][T21784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3742'. [ 1228.635193][ T5896] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1229.028852][ T5896] usb 4-1: USB disconnect, device number 32 [ 1229.134816][T21796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3744'. [ 1230.070237][ T29] audit: type=1400 audit(2000000078.549:4955): avc: denied { setopt } for pid=21807 comm="syz.0.3747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1230.151020][T21811] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.443814][T17738] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1230.525744][T21811] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.615909][T21811] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.635331][T17738] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.677341][T17738] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1230.705569][T17738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.722105][T21811] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.734278][T17738] usb 1-1: Product: syz [ 1230.751953][T17738] usb 1-1: Manufacturer: syz [ 1230.766103][T17738] usb 1-1: SerialNumber: syz [ 1230.787065][T17738] usb 1-1: config 0 descriptor?? [ 1230.800889][T19799] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 1230.812633][T17738] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1230.857528][T17738] dvb-usb: bulk message failed: -22 (3/0) [ 1230.865946][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.893899][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.909311][T17738] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1230.933489][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.944131][T17738] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1230.978221][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.993930][T17738] usb 1-1: media controller created [ 1231.013305][T17738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1231.070228][T17738] dvb-usb: bulk message failed: -22 (6/0) [ 1231.094425][T17738] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1231.232487][ T5896] usb 3-1: USB disconnect, device number 9 [ 1231.233420][T17738] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input54 [ 1231.260820][T17738] dvb-usb: schedule remote query interval to 150 msecs. [ 1231.291055][T17738] dvb-usb: bulk message failed: -22 (3/0) [ 1231.328010][T17738] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1231.488119][T17738] dvb-usb: bulk message failed: -22 (1/0) [ 1231.495840][T17738] dvb-usb: error while querying for an remote control event. [ 1231.897667][ T793] dvb-usb: bulk message failed: -22 (1/0) [ 1231.903726][ T793] dvb-usb: error while querying for an remote control event. [ 1232.483361][ T793] dvb-usb: bulk message failed: -22 (1/0) [ 1232.489775][ T793] dvb-usb: error while querying for an remote control event. [ 1232.514251][ T29] audit: type=1400 audit(2000000080.832:4956): avc: denied { read } for pid=21825 comm="syz.5.3753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1232.580016][T21836] netlink: 'syz.2.3754': attribute type 1 has an invalid length. [ 1232.600909][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3754'. [ 1232.611760][T21836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3754'. [ 1232.665931][ T793] dvb-usb: bulk message failed: -22 (1/0) [ 1232.982910][T19799] ================================================================== [ 1232.991004][T19799] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xe57/0x1050 [ 1232.998992][T19799] Read of size 8 at addr ffff888072644480 by task kworker/u9:2/19799 [ 1233.007053][T19799] [ 1233.009369][T19799] CPU: 0 UID: 0 PID: 19799 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1233.009397][T19799] Tainted: [L]=SOFTLOCKUP [ 1233.009402][T19799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1233.009412][T19799] Workqueue: hci1 hci_rx_work [ 1233.009435][T19799] Call Trace: [ 1233.009440][T19799] [ 1233.009445][T19799] dump_stack_lvl+0x100/0x190 [ 1233.009470][T19799] print_report+0x156/0x4c9 [ 1233.009493][T19799] ? __virt_addr_valid+0x81/0x620 [ 1233.009515][T19799] ? __phys_addr+0xe8/0x180 [ 1233.009537][T19799] ? l2cap_connect_cfm+0xe57/0x1050 [ 1233.009553][T19799] kasan_report+0xdf/0x1e0 [ 1233.009568][T19799] ? l2cap_connect_cfm+0xe57/0x1050 [ 1233.009586][T19799] l2cap_connect_cfm+0xe57/0x1050 [ 1233.009603][T19799] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1233.009621][T19799] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1233.009637][T19799] le_conn_complete_evt+0x195c/0x1f40 [ 1233.009655][T19799] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1233.009674][T19799] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1233.009690][T19799] ? skb_pull_data+0x15f/0x1e0 [ 1233.009705][T19799] hci_le_meta_evt+0x34a/0x5f0 [ 1233.009722][T19799] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1233.009740][T19799] hci_event_packet+0x682/0x11c0 [ 1233.009755][T19799] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1233.009773][T19799] ? __pfx_hci_event_packet+0x10/0x10 [ 1233.009790][T19799] ? kcov_remote_start+0x374/0x660 [ 1233.009809][T19799] ? lockdep_hardirqs_on+0x78/0x100 [ 1233.009830][T19799] hci_rx_work+0x451/0xfc0 [ 1233.009847][T19799] process_one_work+0xa23/0x19a0 [ 1233.009867][T19799] ? __pfx_process_one_work+0x10/0x10 [ 1233.009885][T19799] ? __pfx_hci_rx_work+0x10/0x10 [ 1233.009901][T19799] worker_thread+0x5ef/0xe50 [ 1233.009919][T19799] ? __pfx_worker_thread+0x10/0x10 [ 1233.009934][T19799] ? kthread+0x13a/0x450 [ 1233.009947][T19799] ? __pfx_worker_thread+0x10/0x10 [ 1233.009961][T19799] kthread+0x370/0x450 [ 1233.009974][T19799] ? __pfx_kthread+0x10/0x10 [ 1233.009988][T19799] ret_from_fork+0x754/0xd80 [ 1233.010003][T19799] ? __pfx_ret_from_fork+0x10/0x10 [ 1233.010017][T19799] ? rcu_is_watching+0x12/0xc0 [ 1233.010034][T19799] ? __switch_to+0x7b4/0x1120 [ 1233.010052][T19799] ? __pfx_kthread+0x10/0x10 [ 1233.010065][T19799] ret_from_fork_asm+0x1a/0x30 [ 1233.010087][T19799] [ 1233.010092][T19799] [ 1233.233678][T19799] Allocated by task 19799: [ 1233.238071][T19799] kasan_save_stack+0x30/0x50 [ 1233.242738][T19799] kasan_save_track+0x14/0x30 [ 1233.247402][T19799] __kasan_kmalloc+0xaa/0xb0 [ 1233.251978][T19799] l2cap_chan_create+0x44/0x940 [ 1233.256812][T19799] l2cap_sock_alloc.constprop.0+0xf5/0x1e0 [ 1233.262600][T19799] l2cap_sock_new_connection_cb+0x101/0x260 [ 1233.268475][T19799] l2cap_connect_cfm+0x4e2/0x1050 [ 1233.273477][T19799] le_conn_complete_evt+0x195c/0x1f40 [ 1233.278827][T19799] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1233.284351][T19799] hci_le_meta_evt+0x34a/0x5f0 [ 1233.289135][T19799] hci_event_packet+0x682/0x11c0 [ 1233.294050][T19799] hci_rx_work+0x451/0xfc0 [ 1233.298447][T19799] process_one_work+0xa23/0x19a0 [ 1233.303367][T19799] worker_thread+0x5ef/0xe50 [ 1233.307938][T19799] kthread+0x370/0x450 [ 1233.311983][T19799] ret_from_fork+0x754/0xd80 [ 1233.316550][T19799] ret_from_fork_asm+0x1a/0x30 [ 1233.321294][T19799] [ 1233.323596][T19799] Freed by task 21834: [ 1233.327645][T19799] kasan_save_stack+0x30/0x50 [ 1233.332308][T19799] kasan_save_track+0x14/0x30 [ 1233.336973][T19799] kasan_save_free_info+0x3b/0x70 [ 1233.341992][T19799] __kasan_slab_free+0x5f/0x80 [ 1233.346740][T19799] kfree+0x1f6/0x6b0 [ 1233.350618][T19799] l2cap_chan_put+0x235/0x300 [ 1233.355287][T19799] l2cap_sock_cleanup_listen+0x4d/0x2d0 [ 1233.360817][T19799] l2cap_sock_release+0x69/0x280 [ 1233.365738][T19799] __sock_release+0xb3/0x260 [ 1233.370315][T19799] sock_close+0x1c/0x30 [ 1233.374451][T19799] __fput+0x3ff/0xb40 [ 1233.378418][T19799] task_work_run+0x150/0x240 [ 1233.382987][T19799] exit_to_user_mode_loop+0x100/0x4a0 [ 1233.388341][T19799] do_syscall_64+0x67c/0xf80 [ 1233.392916][T19799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.398791][T19799] [ 1233.401095][T19799] The buggy address belongs to the object at ffff888072644000 [ 1233.401095][T19799] which belongs to the cache kmalloc-2k of size 2048 [ 1233.415125][T19799] The buggy address is located 1152 bytes inside of [ 1233.415125][T19799] freed 2048-byte region [ffff888072644000, ffff888072644800) [ 1233.429067][T19799] [ 1233.431373][T19799] The buggy address belongs to the physical page: [ 1233.437761][T19799] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72640 [ 1233.446496][T19799] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1233.454969][T19799] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1233.462489][T19799] page_type: f5(slab) [ 1233.466449][T19799] raw: 00fff00000000040 ffff88813fe40000 dead000000000100 dead000000000122 [ 1233.475008][T19799] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1233.483569][T19799] head: 00fff00000000040 ffff88813fe40000 dead000000000100 dead000000000122 [ 1233.492216][T19799] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1233.500862][T19799] head: 00fff00000000003 ffffea0001c99001 00000000ffffffff 00000000ffffffff [ 1233.509510][T19799] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1233.518151][T19799] page dumped because: kasan: bad access detected [ 1233.524538][T19799] page_owner tracks the page as allocated [ 1233.530224][T19799] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5806, tgid 5806 (syz-executor), ts 66112808798, free_ts 65983738979 [ 1233.551558][T19799] post_alloc_hook+0x153/0x170 [ 1233.556318][T19799] get_page_from_freelist+0x111d/0x3140 [ 1233.561848][T19799] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1233.567737][T19799] new_slab+0xa6/0x6b0 [ 1233.571788][T19799] refill_objects+0x26b/0x400 [ 1233.576447][T19799] __pcs_replace_empty_main+0x1ab/0x660 [ 1233.581975][T19799] __kmalloc_cache_noprof+0x493/0x6f0 [ 1233.587325][T19799] rtnl_newlink+0x126/0x2380 [ 1233.591893][T19799] rtnetlink_rcv_msg+0x95e/0xe90 [ 1233.596810][T19799] netlink_rcv_skb+0x159/0x420 [ 1233.601561][T19799] netlink_unicast+0x5aa/0x870 [ 1233.606306][T19799] netlink_sendmsg+0x8b0/0xda0 [ 1233.611053][T19799] __sys_sendto+0x468/0x4b0 [ 1233.615533][T19799] __x64_sys_sendto+0xe0/0x1c0 [ 1233.620275][T19799] do_syscall_64+0x106/0xf80 [ 1233.624847][T19799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.630716][T19799] page last free pid 5805 tgid 5805 stack trace: [ 1233.637014][T19799] __free_frozen_pages+0x7e1/0x10d0 [ 1233.642190][T19799] qlist_free_all+0x47/0xe0 [ 1233.646675][T19799] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1233.652125][T19799] __kasan_slab_alloc+0x69/0x90 [ 1233.656965][T19799] __kmalloc_cache_noprof+0x243/0x6f0 [ 1233.662329][T19799] netdevice_event+0x308/0x9a0 [ 1233.667084][T19799] notifier_call_chain+0x99/0x420 [ 1233.672096][T19799] call_netdevice_notifiers_info+0xbe/0x110 [ 1233.677977][T19799] __dev_notify_flags+0x12c/0x2e0 [ 1233.682982][T19799] netif_change_flags+0x108/0x160 [ 1233.687983][T19799] do_setlink.isra.0+0x1abb/0x3e50 [ 1233.693076][T19799] rtnl_newlink+0x11bd/0x2380 [ 1233.697732][T19799] rtnetlink_rcv_msg+0x95e/0xe90 [ 1233.702650][T19799] netlink_rcv_skb+0x159/0x420 [ 1233.707398][T19799] netlink_unicast+0x5aa/0x870 [ 1233.712144][T19799] netlink_sendmsg+0x8b0/0xda0 [ 1233.716892][T19799] [ 1233.719191][T19799] Memory state around the buggy address: [ 1233.724795][T19799] ffff888072644380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1233.732833][T19799] ffff888072644400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1233.740871][T19799] >ffff888072644480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1233.748903][T19799] ^ [ 1233.752942][T19799] ffff888072644500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1233.760979][T19799] ffff888072644580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1233.769013][T19799] ================================================================== [ 1233.785013][ T793] dvb-usb: error while querying for an remote control event. [ 1233.827542][T19799] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1233.834768][T19799] CPU: 0 UID: 0 PID: 19799 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1233.845882][T19799] Tainted: [L]=SOFTLOCKUP [ 1233.850200][T19799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1233.860252][T19799] Workqueue: hci1 hci_rx_work [ 1233.864932][T19799] Call Trace: [ 1233.868200][T19799] [ 1233.871118][T19799] dump_stack_lvl+0x100/0x190 [ 1233.875799][T19799] vpanic+0x552/0x970 [ 1233.879770][T19799] ? __pfx_vpanic+0x10/0x10 [ 1233.884266][T19799] ? l2cap_connect_cfm+0xe57/0x1050 [ 1233.889457][T19799] panic+0xd1/0xe0 [ 1233.893171][T19799] ? __pfx_panic+0x10/0x10 [ 1233.897579][T19799] ? l2cap_connect_cfm+0xe57/0x1050 [ 1233.902770][T19799] ? preempt_schedule_common+0x42/0xc0 [ 1233.908226][T19799] check_panic_on_warn.cold+0x19/0x34 [ 1233.913596][T19799] end_report.part.0+0x3a/0x90 [ 1233.918445][T19799] kasan_report.cold+0xe/0x18 [ 1233.923116][T19799] ? l2cap_connect_cfm+0xe57/0x1050 [ 1233.928304][T19799] l2cap_connect_cfm+0xe57/0x1050 [ 1233.933314][T19799] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1233.938754][T19799] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1233.944194][T19799] le_conn_complete_evt+0x195c/0x1f40 [ 1233.949552][T19799] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1233.955255][T19799] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1233.960783][T19799] ? skb_pull_data+0x15f/0x1e0 [ 1233.965528][T19799] hci_le_meta_evt+0x34a/0x5f0 [ 1233.970276][T19799] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1233.976323][T19799] hci_event_packet+0x682/0x11c0 [ 1233.981239][T19799] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1233.986508][T19799] ? __pfx_hci_event_packet+0x10/0x10 [ 1233.991859][T19799] ? kcov_remote_start+0x374/0x660 [ 1233.996954][T19799] ? lockdep_hardirqs_on+0x78/0x100 [ 1234.002138][T19799] hci_rx_work+0x451/0xfc0 [ 1234.006537][T19799] process_one_work+0xa23/0x19a0 [ 1234.011458][T19799] ? __pfx_process_one_work+0x10/0x10 [ 1234.016812][T19799] ? __pfx_hci_rx_work+0x10/0x10 [ 1234.021730][T19799] worker_thread+0x5ef/0xe50 [ 1234.026302][T19799] ? __pfx_worker_thread+0x10/0x10 [ 1234.031395][T19799] ? kthread+0x13a/0x450 [ 1234.035614][T19799] ? __pfx_worker_thread+0x10/0x10 [ 1234.040704][T19799] kthread+0x370/0x450 [ 1234.044751][T19799] ? __pfx_kthread+0x10/0x10 [ 1234.049319][T19799] ret_from_fork+0x754/0xd80 [ 1234.053888][T19799] ? __pfx_ret_from_fork+0x10/0x10 [ 1234.058977][T19799] ? rcu_is_watching+0x12/0xc0 [ 1234.063721][T19799] ? __switch_to+0x7b4/0x1120 [ 1234.068383][T19799] ? __pfx_kthread+0x10/0x10 [ 1234.072951][T19799] ret_from_fork_asm+0x1a/0x30 [ 1234.077703][T19799] [ 1234.080963][T19799] Kernel Offset: disabled [ 1234.085260][T19799] Rebooting in 86400 seconds..