last executing test programs: 33m47.252649759s ago: executing program 32 (id=1359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000002c0)={0x2, 0xb73, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000080)={0x2, 0x9, 0xa3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2008001080045000028006500000f06917864010101ac1414aa00004e22", @ANYRES32=r4, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0) r5 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e000000100000000000000000100"], 0x88}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x1000000, 0x20000006}]}}}}}}}, 0x0) 19m8.017225986s ago: executing program 33 (id=4965): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x7fff, 0x2, 0x3) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 16m55.359008695s ago: executing program 34 (id=5574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000200000300000a20000000000a03000000000000800000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000007100011800c000100636f756e74657200500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000024000380200000801b00034000000002"], 0xe4}, 0x1, 0x0, 0x0, 0x20000841}, 0x44050) 7m44.790338951s ago: executing program 35 (id=7984): r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r0, &(0x7f0000000180)=""/215, 0xd7) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_rr_get_interval(r1, &(0x7f0000000040)) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x83, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r3 = syz_open_dev$vcsn(&(0x7f0000000100), 0x100000000000, 0x208103) r4 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) splice(r5, 0x0, r8, 0x0, 0x2, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r9 = syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f00000000c0)={0x10000000, 0x71, 0x20000000c}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f000073d000/0x3000)=nil, &(0x7f0000d05000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000092000/0x1000)=nil, &(0x7f00000cc000/0x4000)=nil, &(0x7f0000a4c000/0x2000)=nil, &(0x7f0000c45000/0x4000)=nil, &(0x7f000007f000/0x4000)=nil, &(0x7f00000ac000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000600000/0x3000)=nil, &(0x7f0000000240)="9c0aa008a69b44f702ee28c75fbbbfe9b943b4491ace3610c91f46eb1f6e270032c09ceca5d5464d04eec4e7d07cca2656d821ac629d488490fb8b5cf3f6f5a47c5a1bc1d74b57fe717c9ff86af4a1903ae9096320bce63e77968041ba04b73bf872c9b69a2235d97632", 0x6a, r9}, 0x68) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000100)={r10}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000200)={r10, 0x1}, 0x8) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) 7m25.540599718s ago: executing program 36 (id=8040): bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000401020000", @ANYRES32, @ANYBLOB="000002000000000000000000000386aaf2000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000000000"], 0x50) 7m10.229357581s ago: executing program 37 (id=8086): mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffe}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x87) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x123) mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000000440)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x4, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x7, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xba}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0xfe, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0x9f, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x3, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x19}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 6m56.319326201s ago: executing program 0 (id=8133): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) write$P9_RVERSION(r0, 0x0, 0x15) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x5319) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x86) fchdir(r5) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000080)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x8f) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x10, 0x6, 0x1, "a7c62a6363b62191723a40048e58c49ea87d3fa61249ec9711b32028e5ad069f", 0x32314742}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='mm_migrate_pages\x00', r7, 0x0, 0x6}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100000ca38f40d813110062d0010603010902120001000000000904"], 0x0) r8 = getpid() syz_pidfd_open(r8, 0x0) 6m54.918392821s ago: executing program 38 (id=8133): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) write$P9_RVERSION(r0, 0x0, 0x15) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x5319) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x86) fchdir(r5) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000080)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x8f) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x10, 0x6, 0x1, "a7c62a6363b62191723a40048e58c49ea87d3fa61249ec9711b32028e5ad069f", 0x32314742}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='mm_migrate_pages\x00', r7, 0x0, 0x6}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100000ca38f40d813110062d0010603010902120001000000000904"], 0x0) r8 = getpid() syz_pidfd_open(r8, 0x0) 6m41.536441698s ago: executing program 39 (id=8165): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x20, 0x67, 0x9e, 0x8, 0xc72, 0x14, 0xc776, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x1, 0x28, 0xff}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r4 = getpid() (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername(r5, 0x0, 0x0) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xffffffff]}) (async) socket(0x10, 0x3, 0x0) 6m5.909495864s ago: executing program 40 (id=8285): socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x11) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f000012c000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x8006, 0x86, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012002daf08d08981490a00f480102030109021b00010755e00109043a03024ed82c5c09050efd"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8}, {}, {0x7, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xd}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x34}}, 0x400c084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x200, 0xb64, 0x4, 0x1}, 0x48) 6m2.237077582s ago: executing program 41 (id=8300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) timerfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_io_uring_complete(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 5m52.126181614s ago: executing program 42 (id=8334): sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}], [], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f0000003800)={0x2020}, 0x2020) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x58, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x20, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x58}}, 0x2000000) getrusage(0x0, &(0x7f0000000640)) 5m30.462983256s ago: executing program 43 (id=8407): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x60000000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) 5m30.036725796s ago: executing program 9 (id=8413): timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) ptrace(0x11, r2) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r5 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) 5m29.319207785s ago: executing program 44 (id=8415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x11}, 0x0) 5m27.7484245s ago: executing program 9 (id=8418): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xdca61ca98f1f8bf7, 0x0, 0xffffffffffffffff}, {0x0, 0x80ff, 0x9, 0x0, 0x0, 0x5, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x2}}]}, 0xc4}}, 0x10) 5m27.643344674s ago: executing program 9 (id=8420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0xe00, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 5m26.183308218s ago: executing program 9 (id=8423): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/comedi4\x00', 0x40, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000a6b27c0bf99f4e3b35d539d79e72805000000086452d9e000c0000000209000000000000000000b363cfc900000027cd9a5c17be9d6190cfbc2ddffae39cb30236ee63c76a499e72b2a8fb9e932c45462319d99bfe"], 0x0, 0x26, 0x0, 0x1}, 0x28) ioctl$COMEDI_LOCK(r2, 0x6405) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x64004044) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) 5m25.815335417s ago: executing program 9 (id=8426): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x20020001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc010}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000680)=@multiplanar_mmap={0x1, 0x1, 0x4, 0x2, 0x5, {}, {0x5, 0x0, 0x7, 0x1, 0x6, 0xa, "23a7bcee"}, 0x0, 0x1, {0x0}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000019400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095000000000000a8415c24802a8ece3c1f8e4671fd10d46797b206988e747b7f64d8a6acb58775e56032e45b7150e606952aae5b4b6417a96254ea055ef2cb8c89fecfe3d8b169d66bef3b8f7a4ff0287f74257304e4f50697c9cf4343919a20d2eb9d49eb50170253908d9738dd4ddfe46c1724f3423602a27d249ee334004cb565b2a3bec2b3c1f8501c18e5"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0xe4ff, &(0x7f0000003780)={&(0x7f0000001100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9b, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x7, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x15, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x565615ed, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x5, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8d, 0xb, 0x3, 0x3, 0x8, 0x10, 0x401, 0x0, 0x4, 0x3, 0x0, 0x4, 0x9, 0x0, 0x14f, 0x2d2b, 0x7, 0x0, 0x0, 0x7, 0x5, 0x9, 0x10000, 0x8, 0x7, 0x51, 0x8, 0x702e, 0xfffffb1c, 0x2, 0xacc, 0x0, 0x3f800000, 0x3, 0x1, 0xc, 0x2, 0x6, 0x10001, 0x4ad, 0x10001, 0x400, 0x5, 0x2008001, 0xbb0, 0x7c9c, 0x7aa, 0x7, 0x8, 0x9, 0x9, 0x3, 0x101, 0x6, 0x70, 0xc3fb, 0x36, 0xb14, 0xa63, 0x9b, 0x0, 0x4, 0x4, 0xfffffffe, 0x4, 0x7, 0x6, 0x7, 0x536380b3, 0xffff, 0x5, 0x680, 0x18, 0x101, 0x1, 0x296, 0x834, 0x3ff, 0x178a7585, 0x100, 0x1, 0x200, 0x0, 0x4, 0x1, 0x519, 0x9, 0x200, 0x8, 0x2, 0x2, 0xff, 0x3ff, 0xa0, 0x4, 0xfff, 0xf, 0x9, 0x5e700, 0x8, 0x8, 0x9, 0x9, 0xe, 0x1a43d741, 0x8, 0x5, 0x2, 0x8, 0x2, 0x1, 0x9, 0x2, 0xfffffffe, 0x2, 0x3, 0x8002, 0x5, 0x7, 0x5, 0x2, 0x431, 0x4000e, 0xffffffe8, 0xda2, 0x0, 0x40000000, 0x7, 0x6, 0x8, 0xed, 0xff, 0x7, 0x401, 0x400, 0x64a3e81, 0x0, 0x5, 0x3d27, 0x8, 0xa, 0x2db5509f, 0x7, 0xad56, 0x1, 0x5cb, 0xfff, 0x7, 0xe, 0x6, 0x1, 0x9, 0x4, 0x400, 0x9922000, 0x200, 0x10, 0x7f, 0x9, 0x3ff, 0x100, 0xfbdf1bcb, 0x1, 0x280000, 0xb2, 0x0, 0x5, 0x9, 0x9, 0x80000000, 0x8, 0xea, 0x2, 0x78, 0x5, 0x5, 0x3, 0xff, 0x40000, 0x4, 0x4, 0x100, 0x6, 0x5, 0xb6, 0x5, 0x3, 0xa, 0x6, 0xc32, 0xc9, 0x3, 0x8, 0x6, 0x4, 0x7ff, 0x3, 0xc, 0x4, 0x3, 0x3, 0x9, 0x6, 0x1, 0x6, 0x800, 0x7, 0x28b, 0x162, 0x10000400, 0x3ff, 0x7, 0x3c, 0x6, 0x0, 0xfff, 0x101, 0x800, 0xfff, 0x40, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x7, 0x6, 0x3df, 0x3ff, 0x10, 0x4, 0x6, 0xc21e, 0xfe, 0x7fffffff, 0x4, 0x9, 0x7, 0x6, 0x8, 0x0, 0xbe, 0x0, 0x2, 0x20002, 0xf, 0x100, 0x7, 0x0, 0x4, 0x5, 0x3, 0x850, 0x7, 0x7, 0x191a]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x88c}}, 0x0) 5m25.124789025s ago: executing program 9 (id=8427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xce}]}, 0x30}, 0x1, 0xd00, 0x0, 0x8000}, 0x40) 5m24.925649882s ago: executing program 45 (id=8427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xce}]}, 0x30}, 0x1, 0xd00, 0x0, 0x8000}, 0x40) 5m6.09175121s ago: executing program 5 (id=8416): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x6, &(0x7f0000000340)) acct(0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi4\x00', 0x161502, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f00000007c0)={0x0, 0x20, 0x0, 0x80000001, 0x100, 0x0, 0x4, 0xb05, 0x4, 0x1, 0x1, 0x7, &(0x7f0000000000)=[0x4], 0x1, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00003f4000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_procfs(0x0, &(0x7f0000001180)='net/if_inet6\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19c00, 0x0, 0xfd7c, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r6, &(0x7f0000000380)=ANY=[@ANYRES8=r6], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000001100)=@multiplanar_fd={0xc3b4eab, 0xc, 0x4, 0x40, 0x7, {0x77359400}, {0x5, 0x2, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0xad14, 0x4, {0x0}, 0xfffffffe}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) 5m5.795634387s ago: executing program 5 (id=8462): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x200, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, 0x1c) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x1, 0x5, 0x7, 0xfff, 0x1, 0x0, [{0x6, 0x9, 0x3, '\x00', 0x202}]}) 5m5.748588655s ago: executing program 0 (id=8409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x4) userfaultfd(0x80001) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$setlease(r3, 0x400, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xfffffff8, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 5m5.517507979s ago: executing program 5 (id=8463): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x80100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001, 0x2}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x15}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = signalfd4(r0, &(0x7f0000000000)={[0x30]}, 0x8, 0x800) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000100)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') getcwd(&(0x7f0000000140)=""/115, 0x73) chdir(&(0x7f00000003c0)='./file1\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 5m4.910844598s ago: executing program 0 (id=8464): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x34, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x34}, 0x1, 0x0, 0x5ac0f00}, 0x40000) 5m4.86657271s ago: executing program 5 (id=8465): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/comedi4\x00', 0x40, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000a6b27c0bf99f4e3b35d539d79e72805000000086452d9e000c0000000209000000000000000000b363cfc900000027cd9a5c17be9d6190cfbc2ddffae39cb30236ee63c76a499e72b2a8fb9e932c45462319d99bfe"], 0x0, 0x26, 0x0, 0x1}, 0x28) ioctl$COMEDI_LOCK(r2, 0x6405) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x64004044) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) 5m4.623664858s ago: executing program 0 (id=8466): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/comedi4\x00', 0x40, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000a6b27c0bf99f4e3b35d539d79e72805000000086452d9e000c0000000209000000000000000000b363cfc900000027cd9a5c17be9d6190cfbc2ddffae39cb30236ee63c76a499e72b2a8fb9e932c45462319d99bfe"], 0x0, 0x26, 0x0, 0x1}, 0x28) ioctl$COMEDI_LOCK(r2, 0x6405) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x64004044) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) 5m2.896124508s ago: executing program 5 (id=8474): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x1f00, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x60, {[@md5sig={0x13, 0x12, "b75f636a280827883a0f2040a1ede90f"}]}}}}}}}, 0x0) 5m2.047319345s ago: executing program 5 (id=8475): ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x100000003) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="1202490f0000130870270c936a8d0102030109021200010000000009c59800"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x5, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x2, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "de7a1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x2, 0x8, 0x4}, {0x6, 0x24, 0x1a, 0x5, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x4, 0xcc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x10, 0x4}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x10, 0x63, 0x8, 0x40, 0xcd}, 0x2d, &(0x7f00000000c0)={0x5, 0xf, 0x2d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x40, 0x9, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0x81, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "37952e007fd4cc90ffefd0c5d5acbffe"}]}, 0x2, [{0x5f, &(0x7f0000000100)=@string={0x5f, 0x3, "39dccd4d3c0f15e0a6a80a492172a0e2197cf7df32dbf2a030e61901a3888ad890470cb87bf37a8a7400e213d4b6ab494a90238f3df0c3a0f8c225a7cd0313a2ce57b1f48b5c017163ec13a4b9511c72ca6d94367f43f1fae1f9395285"}}, {0x19, &(0x7f0000000180)=@string={0x19, 0x3, "e6e7d70ce385574e1e53788de84db8173c6d92b1d9e908"}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000000540)={0xfc, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x12141}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0xe6, 0x2, 0x3) r8 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000) 5m2.046620484s ago: executing program 0 (id=8476): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x50) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x4800024, 0x8, 0x0, 0x1c39}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0x1001, 0x0, 0x0, 0x500}]) dup3(r1, r2, 0x0) 5m1.782247068s ago: executing program 46 (id=8475): ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x100000003) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="1202490f0000130870270c936a8d0102030109021200010000000009c59800"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x5, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x2, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "de7a1a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x2, 0x8, 0x4}, {0x6, 0x24, 0x1a, 0x5, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x4, 0xcc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x10, 0x4}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x10, 0x63, 0x8, 0x40, 0xcd}, 0x2d, &(0x7f00000000c0)={0x5, 0xf, 0x2d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x40, 0x9, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0x81, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "37952e007fd4cc90ffefd0c5d5acbffe"}]}, 0x2, [{0x5f, &(0x7f0000000100)=@string={0x5f, 0x3, "39dccd4d3c0f15e0a6a80a492172a0e2197cf7df32dbf2a030e61901a3888ad890470cb87bf37a8a7400e213d4b6ab494a90238f3df0c3a0f8c225a7cd0313a2ce57b1f48b5c017163ec13a4b9511c72ca6d94367f43f1fae1f9395285"}}, {0x19, &(0x7f0000000180)=@string={0x19, 0x3, "e6e7d70ce385574e1e53788de84db8173c6d92b1d9e908"}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000000540)={0xfc, {"a2e3ad09ed1809f91b5e071887f70e09d09be7ff7fc6e5539b0d430a8b089b3f36356e030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe234b3237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0edeffffffff4b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d00000000000000005db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c8964df48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b5002895ae7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe67380e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f072ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0528c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbba1118e32126596e1cd7655b904801784c416b22133d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efefe327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830053fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279f07000000935c5affcf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c71552439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e501010000b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b08000000000000006f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ff00", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x12141}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioperm(0xe6, 0x2, 0x3) r8 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000) 5m1.303859214s ago: executing program 0 (id=8480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31"], 0x15c}}, 0x0) 5m1.052402829s ago: executing program 47 (id=8480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31"], 0x15c}}, 0x0) 3m34.598783527s ago: executing program 7 (id=8780): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x20020001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc010}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000680)=@multiplanar_mmap={0x1, 0x1, 0x4, 0x2, 0x5, {}, {0x5, 0x0, 0x7, 0x1, 0x6, 0xa, "23a7bcee"}, 0x0, 0x1, {0x0}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000019400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095000000000000a8415c24802a8ece3c1f8e4671fd10d46797b206988e747b7f64d8a6acb58775e56032e45b7150e606952aae5b4b6417a96254ea055ef2cb8c89fecfe3d8b169d66bef3b8f7a4ff0287f74257304e4f50697c9cf4343919a20d2eb9d49eb50170253908d9738dd4ddfe46c1724f3423602a27d249ee334004cb565b2a3bec2b3c1f8501c18e5"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9b, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x7, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x15, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x565615ed, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe2cc, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x5, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8d, 0xb, 0x3, 0x3, 0x8, 0x10, 0x401, 0x0, 0x4, 0x3, 0x0, 0x4, 0x9, 0x0, 0x14f, 0x2d2b, 0x7, 0x0, 0x0, 0x7, 0x5, 0x9, 0x10000, 0x8, 0x7, 0x51, 0x8, 0x702e, 0xfffffb1c, 0x2, 0xacc, 0x0, 0x3f800000, 0x3, 0x1, 0xc, 0x2, 0x6, 0x10001, 0x4ad, 0x10001, 0x400, 0x5, 0x2008001, 0xbb0, 0x7c9c, 0x7aa, 0x7, 0x8, 0x9, 0x9, 0x3, 0x101, 0x6, 0x70, 0xc3fb, 0x36, 0xb14, 0xa63, 0x9b, 0x0, 0x4, 0x4, 0xfffffffe, 0x4, 0x7, 0x6, 0x7, 0x536380b3, 0xffff, 0x5, 0x680, 0x18, 0x101, 0x1, 0x296, 0x834, 0x3ff, 0x178a7585, 0x100, 0x1, 0x200, 0x0, 0x4, 0x1, 0x519, 0x9, 0x200, 0x8, 0x2, 0x2, 0xff, 0x3ff, 0xa0, 0x4, 0xfff, 0xf, 0x9, 0x5e700, 0x8, 0x8, 0x9, 0x9, 0xe, 0x1a43d741, 0x8, 0x5, 0x2, 0x8, 0x2, 0x1, 0x9, 0x2, 0xfffffffe, 0x2, 0x3, 0x8002, 0x5, 0x7, 0x5, 0x2, 0x431, 0x4000e, 0xffffffe8, 0xda3, 0x0, 0x40000000, 0x7, 0x6, 0x8, 0xed, 0xff, 0x7, 0x401, 0x400, 0x64a3e81, 0x0, 0x5, 0x3d27, 0x8, 0xa, 0x2db5509f, 0x7, 0xad56, 0x1, 0x5cb, 0xfff, 0x7, 0xe, 0x6, 0x1, 0x9, 0x4, 0x400, 0x9922000, 0x200, 0x10, 0x7f, 0x9, 0x3ff, 0x100, 0xfbdf1bcb, 0x1, 0x280000, 0xb2, 0x0, 0x5, 0x9, 0x9, 0x80000000, 0x8, 0xea, 0x2, 0x78, 0x5, 0x5, 0x3, 0xff, 0x40000, 0x4, 0x4, 0x100, 0x6, 0x5, 0xb6, 0x5, 0x3, 0xa, 0x6, 0xc32, 0xc9, 0x3, 0x8, 0x6, 0x4, 0x7ff, 0x3, 0xc, 0x4, 0x3, 0x3, 0x9, 0x6, 0x1, 0x6, 0x800, 0x7, 0x28b, 0x162, 0x10000400, 0x3ff, 0x7, 0x3c, 0x6, 0x0, 0xfff, 0x101, 0x800, 0xfff, 0x40, 0x7f, 0x3ff, 0x0, 0x2, 0x0, 0x7, 0x6, 0x3df, 0x3ff, 0x10, 0x4, 0x6, 0xc21e, 0xfe, 0x7fffffff, 0x4, 0x9, 0x7, 0x6, 0x8, 0x0, 0xbe, 0x0, 0x2, 0x20002, 0xf, 0x100, 0x7, 0x0, 0x4, 0x5, 0x3, 0x850, 0x7, 0x7, 0x191a]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x88c}}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=0x0) sched_setattr(r5, &(0x7f0000000080)={0x38, 0x5, 0x23, 0x8, 0xfffffffd, 0x100000001, 0x608, 0x0, 0x6db9, 0x6}, 0x0) 3m34.246908959s ago: executing program 7 (id=8781): syz_pidfd_open(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c080}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x78, 0xd, 0x66, 0x0, 0x3}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x569381) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r5, &(0x7f00000023c0), 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030400000100000085000000030000009500"/70], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 3m31.271910778s ago: executing program 7 (id=8788): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x200, 0x200, 0x6, 0x6b4b, r2}, 0x10) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000100)={0x4, @sliced={0x8, [0x3, 0x6, 0x0, 0x6, 0x43de, 0x8, 0x100, 0x8d2d, 0x7a2, 0x8, 0x3ff, 0xfff, 0x2, 0x79, 0x3, 0x0, 0x997, 0xb25, 0x800a, 0x9, 0xc, 0xdb61, 0x5, 0x7f, 0x9, 0x0, 0x101, 0x3ff, 0x1, 0x7, 0x800, 0x4, 0x2, 0x7ff, 0x1000, 0x6, 0x3, 0x8, 0x8, 0x1, 0x41, 0x2, 0x2, 0x7242, 0xd075, 0x7f, 0x6, 0x7], 0x2}}) 3m29.671742154s ago: executing program 7 (id=8792): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) openat$comedi(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/comedi4\x00', 0x40, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000a6b27c0bf99f4e3b35d539d79e72805000000086452d9e000c0000000209000000000000000000b363cfc900000027cd9a5c17be9d6190cfbc2ddffae39cb30236ee63c76a499e72b2a8fb9e932c45462319d99bfe"], 0x0, 0x26, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x64004044) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) 3m28.120869186s ago: executing program 7 (id=8794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffe, 0x1, 0xc, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="ea", 0x0, 0x4, 0x10, 0x40002, 0x0}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 3m27.411754446s ago: executing program 7 (id=8796): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xdca61ca98f1f8bf7, 0x0, 0xffffffffffffffff}, {0x0, 0x2000000, 0x9, 0x0, 0x0, 0x5, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x2}}]}, 0xc4}}, 0x10) 3m26.914625456s ago: executing program 48 (id=8796): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xdca61ca98f1f8bf7, 0x0, 0xffffffffffffffff}, {0x0, 0x2000000, 0x9, 0x0, 0x0, 0x5, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x2}}]}, 0xc4}}, 0x10) 3m25.83126549s ago: executing program 6 (id=8803): readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x1, 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3m24.848178735s ago: executing program 6 (id=8805): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1200000000000000, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x7]}}) 3m24.361897503s ago: executing program 6 (id=8808): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_open_procfs(0x0, 0x0) sendto$inet6(r3, &(0x7f0000000540), 0x0, 0x20040141, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'ip_vti0\x00', 0x0}) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendfile(r7, r6, 0x0, 0x110000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0xff4, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ffffffff0000000006000000184a00000000000000000000000000001837000004000000000000000000000018160000", @ANYRES32=r3, @ANYBLOB="000000000000000043170200080400009500000000000000"], &(0x7f0000000340)='GPL\x00', 0xfffffffe, 0xc8, &(0x7f0000000400)=""/200, 0x41000, 0x58, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000540)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r7, 0xffffffffffffffff, r8, r9, r10, 0xffffffffffffffff], 0x0, 0x10, 0xffff}, 0x94) (async) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r11, 0x3b86, &(0x7f0000000240)={0x18, r12, 0x3f}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYRES64=r11, @ANYRES16=r2, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000da94f4594d", @ANYRESHEX=r12], 0x54}}, 0x8800) (async) r13 = socket$netlink(0x10, 0x3, 0x13) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x0) socket$key(0xf, 0x3, 0x2) r14 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r14, 0x540a, 0x0) writev(r14, &(0x7f0000000040)=[{&(0x7f0000000140)="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", 0x148}], 0x1) (async) ioctl$TIOCSERGETLSR(r14, 0x5459, &(0x7f0000000080)) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) (async) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r15, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) close_range(r13, 0xffffffffffffffff, 0x0) 3m21.153913354s ago: executing program 6 (id=8816): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) openat$comedi(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/comedi4\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x64004044) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) 3m20.718790206s ago: executing program 6 (id=8819): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40000, 0x144) getdents64(r5, 0xfffffffffffffffe, 0x29) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_freeze_timeout', 0xa0042, 0x4d) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r4, @ANYRES32, @ANYBLOB='\t\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) 3m17.875587249s ago: executing program 6 (id=8830): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) creat(0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x9) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000010c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) 3m17.035635671s ago: executing program 49 (id=8830): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) creat(0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x9) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000010c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) 10.392527748s ago: executing program 1 (id=9543): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f1f050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (fail_nth: 9) 9.563736483s ago: executing program 1 (id=9546): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f00000003c0)=""/235, 0xeb) 9.049248453s ago: executing program 1 (id=9548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 8.245709634s ago: executing program 1 (id=9559): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.240005198s ago: executing program 1 (id=9560): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x100, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0x1, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@remote}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0x2, 0xa0}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x4}]}]}, 0x17c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0x108, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@mcast1, @in=@multicast1, 0xfffe, 0x0, 0x0, 0x0, 0xa}, {0x1}}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d5, 0x2b}, 0xa, @in=@empty, 0x0, 0x2}]}, @policy_type={0xa, 0x10, {0x1}}]}, 0x108}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) 8.057713267s ago: executing program 1 (id=9563): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000040c0009800800014005"], 0x90}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 6.779742155s ago: executing program 8 (id=9574): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f000037a000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 6.491907037s ago: executing program 2 (id=9578): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0423", @ANYRES16], 0x10) 6.477729086s ago: executing program 8 (id=9579): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0xe0000000, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0xf, 0xe1b2, 0x1}}, 0x44) 6.306277924s ago: executing program 2 (id=9580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) gettid() read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x4f, 0x205) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r3, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000000)=0xc, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35271, 0x51a23}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}]}}}]}, 0x38}, 0x1, 0x0, 0x300000000000000, 0x8005}, 0x20040040) 5.227660711s ago: executing program 2 (id=9581): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) 5.10618517s ago: executing program 8 (id=9583): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e00, @local}, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426c"], &(0x7f0000000100)='GPL\x00'}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 4.103096037s ago: executing program 8 (id=9587): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000340)={0xa000001c}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x5, 0x4000000000000e52, 0x8000000000000001, 0x205479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0xfffffffd, 0x1, 0x4020000000c, 0x8000000000006, 0x800040068], 0x2000, 0x15010}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.547636233s ago: executing program 2 (id=9592): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) close(0x3) 3.476168569s ago: executing program 4 (id=9594): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000017c0)={@in6={{0xa, 0x4e22, 0xc1, @empty, 0x5}}, 0x0, 0x0, 0x18, 0x0, "e07cdb96a021a60e90685e855b5fa304354f1161998649cee89ca36e5e5d8b7fd7172ac84b0ff701fb62db65fd7055f5bb273077d33d4f30ebc8470d07dfb3b3e117ee8de891218e137e070f0d357e0b"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmdt(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64, 0x0, 0xffffffffffffffff, 0x39}, 0x48) 3.319567611s ago: executing program 8 (id=9595): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) unshare(0x2a020480) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r4, 0x0, 0x6, &(0x7f0000000240)='xfrm0\x00'}, 0x30) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0, 0x0) socket(0x6, 0xa, 0xff) 2.145517394s ago: executing program 4 (id=9596): pipe2$9p(&(0x7f0000000280), 0x0) syz_io_uring_setup(0x1766, &(0x7f0000000080)={0x0, 0x0, 0x10300}, &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_io_uring_setup(0x73db, &(0x7f0000000240)={0x0, 0x0, 0x80, 0x3}, &(0x7f0000000100), &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000040d000/0x3000)=nil, 0x3000, 0x9) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) mlock2(&(0x7f00005bb000/0x1000)=nil, 0x1000, 0x1) 2.145297349s ago: executing program 2 (id=9597): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x1) 2.14479539s ago: executing program 8 (id=9598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x2d2683, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) socket(0x10, 0x3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/netfilter\x00') r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) 1.83148007s ago: executing program 2 (id=9599): timer_settime(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[], 0xb4}}, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) capset(0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in, @in=@empty}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311320000000000851000000200000085000000ac00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x3fe, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, {{0xa, 0x4e21, 0x9, @mcast1, 0xfffff7fe}}}, 0x108) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = timerfd_create(0x7, 0x100000) timerfd_gettime(r3, &(0x7f00000001c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) r6 = socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x3, 0xff) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @dev={0xfe, 0x80, '\x00', 0x15}, 0xbff}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r4, 0xffffffffffffffff, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) 1.249198778s ago: executing program 3 (id=9602): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c3223", 0x33}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f42b2dda515bffbb8de861e60d4ee6dad628fdf1055f9a1", 0x2e}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfbca479a17e7420ec938e84ad449c00288b126e26d6d80fb16c3c64ebcecade0b529986f4cfbcfa9c1c7138091b2ba9da4c7af757ac4d7990bfb36460a2eaaa3b786e6a14e457460793e0fdd4bdc6ef20050bc1ae8a5de6e0f", 0x7a}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="f81d8c33ebeeebaec8f7b1e9333639f8bd8fdeb92d78b4a97911591fe679fb36a704110504a9a3fe19cb63d815dcd55dc3ccfceb58afaa1415db7fad56514bd8d49b846ab5b07e16a500963d4a69281a26c3b8ab91e9e32f35a912009fd04773303ee09e3bcf18294eabdb287e6e9ab67f90", 0x72}, {&(0x7f0000000e40)="5449a6f1790f7090e2241d102fe867bcc9e6912d0323ec893d5745268a445f78328a0d0e3a125b29e072fcc834c3e643cb1801ab653acf9a854e0627568693bf40e3c6def891dc5d", 0x48}], 0x2}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000009c0)="6a7f82b8f9e8c540d6921f0edb0e1bd4c1fae7199a1156849b475972bc59c2f87ce5a34e5c2c1070d184d1795daddcf0d74ddc135b5a2b0d13b49020728c535c306888362013bc28699b1feeee2b327bff97a73ace436ed5592f", 0x5a, 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 1.071665589s ago: executing program 4 (id=9603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000e5ffff6a00000008000300", @ANYRES32=r2], 0x28}}, 0x0) 901.686841ms ago: executing program 3 (id=9604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = epoll_create1(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r3, 0x406, r4) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0x20000002}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f00000002c0)={0xa0000013}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000580)={0xa0002008}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_80211_join_ibss(0x0, &(0x7f00000000c0)=@default_ibss_ssid, 0x6, 0x0) 680.557133ms ago: executing program 4 (id=9605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 680.301025ms ago: executing program 3 (id=9606): syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x4) 539.143475ms ago: executing program 3 (id=9607): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0xfffffffc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {}, 0x35, [0x800, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x80, 0x0, 0x3d8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x81, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2) close(0x3) 311.608208ms ago: executing program 3 (id=9608): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x38, r2, 0x91b, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) 246.566034ms ago: executing program 4 (id=9609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x101, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008004}, 0x800c014) 179.532296ms ago: executing program 3 (id=9610): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000100)='qnx6\x00', 0x8007, 0x0) 0s ago: executing program 4 (id=9611): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x2c}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ed promiscuous mode [ 2264.013360][ T5842] macsec1: entered promiscuous mode [ 2264.021839][ T5842] bridge0: port 3(macsec1) entered blocking state [ 2264.028574][ T5842] bridge0: port 3(macsec1) entered disabled state [ 2264.035495][ T5842] macsec1: entered allmulticast mode [ 2264.040815][ T5842] bridge0: entered allmulticast mode [ 2264.614057][ T5842] macsec1: left allmulticast mode [ 2264.619242][ T5842] bridge0: left allmulticast mode [ 2264.634807][ T5842] bridge0: left promiscuous mode [ 2264.812552][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8883'. [ 2264.844704][ T5856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2264.903287][ T5632] veth0_vlan: entered promiscuous mode [ 2264.937586][ T5856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2264.966595][ T30] audit: type=1400 audit(2099690.884:5102): avc: denied { map } for pid=5848 comm="syz.4.8882" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2264.968231][ T5632] veth1_vlan: entered promiscuous mode [ 2265.492120][ T5868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2265.749019][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8885'. [ 2265.828055][ T5632] veth0_macvtap: entered promiscuous mode [ 2265.850209][ T5632] veth1_macvtap: entered promiscuous mode [ 2266.036492][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2266.131835][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2266.174735][ T2960] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.188032][ T2960] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.211852][ T2960] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.222877][ T2960] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.279907][ T24] IPVS: starting estimator thread 0... [ 2266.404247][ T5872] IPVS: using max 52 ests per chain, 124800 per kthread [ 2266.419947][T14822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2266.473635][T16524] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 2266.494552][T14822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2266.669675][T26023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2266.723541][T26023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2266.741865][T16524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2266.781696][T16524] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2266.795246][T16524] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 2266.805342][T16524] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2266.836540][T16524] usb 4-1: config 0 descriptor?? [ 2266.842112][ T5870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2266.971772][ T5886] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8890'. [ 2266.987098][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 2266.995136][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 2267.222758][ T5892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8893'. [ 2267.250340][ T5893] mkiss: ax0: crc mode is auto. [ 2267.252978][ T30] audit: type=1400 audit(2099693.164:5103): avc: denied { connect } for pid=5887 comm="syz.8.8891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2267.257915][T16524] hid-retrode 0003:0403:97C1.0035: item fetching failed at offset 1/5 [ 2267.307969][ T5901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8893'. [ 2267.330244][T16524] hid-retrode 0003:0403:97C1.0035: probe with driver hid-retrode failed with error -22 [ 2268.039161][ T30] audit: type=1400 audit(2099693.954:5104): avc: denied { write } for pid=5911 comm="syz.8.8896" name="card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2269.028110][ T5926] erofs (device nbd2): cannot find valid erofs superblock [ 2269.172540][ T2135] usb 4-1: USB disconnect, device number 47 [ 2269.213282][ T5934] netlink: 'syz.4.8901': attribute type 1 has an invalid length. [ 2269.241015][ T5934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2269.291904][ T30] audit: type=1400 audit(2099695.204:5105): avc: denied { create } for pid=5940 comm="syz.8.8903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2269.315912][ T30] audit: type=1400 audit(2099695.234:5106): avc: denied { bind } for pid=5940 comm="syz.8.8903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2269.630769][ T5934] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 2269.736492][T28923] Bluetooth: hci1: command 0x0406 tx timeout [ 2269.743174][ T5900] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2269.967265][ T5946] vlan2: entered allmulticast mode [ 2269.999982][ T5946] veth1: entered allmulticast mode [ 2270.027478][ T5946] veth1: entered promiscuous mode [ 2270.033092][ T5946] veth1: left promiscuous mode [ 2270.043993][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 2270.045178][ T5946] bond1: (slave vlan2): making interface the new active one [ 2270.056197][ T5900] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2270.061634][ T5946] veth1: entered promiscuous mode [ 2270.071602][ T5946] vlan2: entered promiscuous mode [ 2270.085839][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2270.109286][ T5946] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 2270.122706][ T5900] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2270.170347][ T5900] pvrusb2: ********** [ 2270.174535][ T5900] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2270.186853][ T5900] pvrusb2: Important functionality might not be entirely working. [ 2270.199957][ T5900] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2270.333353][ T5900] pvrusb2: ********** [ 2270.346168][ T2335] pvrusb2: Invalid write control endpoint [ 2270.438172][ T5963] 9pnet_fd: p9_fd_create_tcp (5963): problem connecting socket to 127.0.0.1 [ 2270.822723][ T2335] pvrusb2: Invalid write control endpoint [ 2270.866947][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2271.436305][ T30] audit: type=1400 audit(2099696.943:5107): avc: denied { mount } for pid=5954 comm="syz.3.8908" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2271.489402][ T30] audit: type=1400 audit(2099697.103:5108): avc: denied { unmount } for pid=4017 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2271.531697][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2271.568698][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2271.584495][ T2335] pvrusb2: Device being rendered inoperable [ 2271.594718][ T5967] pvrusb2: Attempted to execute control transfer when device not ok [ 2271.602929][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2271.635172][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 2271.635401][T25111] usb 2-1: USB disconnect, device number 72 [ 2271.662446][ T2335] pvrusb2: Attached sub-driver cx25840 [ 2271.680403][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2271.726039][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2271.942119][ T5979] input: syz1 as /devices/virtual/input/input74 [ 2272.791292][ T5977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2272.813977][ T30] audit: type=1400 audit(2099698.723:5109): avc: denied { create } for pid=5987 comm="syz.1.8917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2272.875507][ T30] audit: type=1400 audit(2099698.753:5110): avc: denied { ioctl } for pid=5987 comm="syz.1.8917" path="socket:[183706]" dev="sockfs" ino=183706 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2272.900097][ C1] vkms_vblank_simulate: vblank timer overrun [ 2274.988122][ T6023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8925'. [ 2276.463233][ T6033] Bluetooth: MGMT ver 1.23 [ 2276.470359][ T6033] bond0: Removing last ns target with arp_interval on [ 2276.497443][T26023] bond0: (slave bond_slave_0): interface is now down [ 2276.520529][T26023] bond0: (slave bond_slave_1): interface is now down [ 2276.553541][T26023] bond0: now running without any active interface! [ 2276.784703][ T5880] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2277.315698][ T6043] bond1: option mode: unable to set because the bond device has slaves [ 2277.324893][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 2277.335962][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2277.645443][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2277.680995][ T5880] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2277.711318][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.738615][ T5880] usb 2-1: config 0 descriptor?? [ 2278.145298][T25111] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2278.317297][T25111] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2278.344976][T25111] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2278.382332][T25111] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2278.412092][T25111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2278.443360][ T6053] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2278.469183][T25111] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2278.535175][T28923] Bluetooth: hci2: command 0x0401 tx timeout [ 2278.541311][ T2199] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 2279.508689][ T1205] usb 3-1: USB disconnect, device number 73 [ 2279.629714][ T6065] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8936'. [ 2279.725345][ T5880] usbhid 2-1:0.0: can't add hid device: -71 [ 2279.744689][ T5880] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2279.778280][ T5880] usb 2-1: USB disconnect, device number 73 [ 2281.815728][ T30] audit: type=1326 audit(2099707.722:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.8944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2282.218617][ T30] audit: type=1326 audit(2099707.762:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.8944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2282.320332][ T6103] netlink: 'syz.1.8946': attribute type 2 has an invalid length. [ 2282.410078][ T30] audit: type=1326 audit(2099707.762:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.8944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2282.492839][ T30] audit: type=1326 audit(2099707.762:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.8944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2282.590333][ T30] audit: type=1326 audit(2099707.762:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.8944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2282.685086][ T30] audit: type=1326 audit(2099707.762:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.8944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2282.758455][ T30] audit: type=1326 audit(2099707.762:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.8944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2282.819004][ T30] audit: type=1326 audit(2099707.762:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.8944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2282.913547][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2282.919869][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.178358][ T30] audit: type=1326 audit(2099707.762:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.8944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2283.262259][ T30] audit: type=1326 audit(2099707.762:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.8944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2283.308042][ T2199] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 2283.354256][ T6119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6119 comm=syz.8.8951 [ 2283.565690][ T5873] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2283.612710][ T6127] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8953'. [ 2283.718233][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2283.730127][ T5873] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2283.739640][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2283.761840][ T5873] usb 3-1: config 0 descriptor?? [ 2284.186641][ T5873] steelseries 0003:1038:12B6.0036: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 2284.490806][ T6117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2284.530505][ T6117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2284.613296][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8960'. [ 2286.912700][T32541] usb 3-1: USB disconnect, device number 74 [ 2286.968043][T14831] vlan2: left promiscuous mode [ 2287.366084][ T2199] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2287.377436][ T2199] Bluetooth: hci3: Injecting HCI hardware error event [ 2287.390330][ T2199] Bluetooth: hci3: hardware error 0x00 [ 2287.748582][ T6181] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8973'. [ 2287.917652][ T6184] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 2288.356247][ T1205] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 2288.364386][ T6199] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.686151][ T1205] usb 9-1: Using ep0 maxpacket: 8 [ 2288.692551][ T1205] usb 9-1: too many endpoints for config 252 interface 0 altsetting 55: 41, using maximum allowed: 30 [ 2288.707785][ T1205] usb 9-1: config 252 interface 0 altsetting 55 has 0 endpoint descriptors, different from the interface descriptor's value: 41 [ 2288.734681][ T1205] usb 9-1: config 252 interface 0 has no altsetting 0 [ 2288.743139][ T1205] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2288.752264][ T1205] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2288.764827][ T1205] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2288.772158][ T1205] pvrusb2: ********** [ 2288.776217][ T1205] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2288.786396][ T1205] pvrusb2: Important functionality might not be entirely working. [ 2288.794246][ T1205] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2288.805629][ T1205] pvrusb2: ********** [ 2288.811335][ T1205] usb 9-1: selecting invalid altsetting 0 [ 2288.818667][ T2335] pvrusb2: Invalid write control endpoint [ 2289.161276][ T2335] pvrusb2: Invalid write control endpoint [ 2289.182711][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2289.192389][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2289.211718][ T6210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2289.223377][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2289.236659][ T6210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2289.250429][ T2335] pvrusb2: Device being rendered inoperable [ 2289.300560][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2289.336738][ T6218] pvrusb2: Attempted to execute control transfer when device not ok [ 2289.396609][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 2289.405494][ T2335] pvrusb2: Attached sub-driver cx25840 [ 2289.414682][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2289.425574][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2289.631646][ T2199] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2289.980460][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8989'. [ 2290.024484][ T6228] : entered promiscuous mode [ 2290.283574][ T6237] FAULT_INJECTION: forcing a failure. [ 2290.283574][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 2290.306026][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.4.8993 Not tainted syzkaller #0 PREEMPT(full) [ 2290.306052][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2290.306062][ T6237] Call Trace: [ 2290.306068][ T6237] [ 2290.306075][ T6237] dump_stack_lvl+0x16c/0x1f0 [ 2290.306102][ T6237] should_fail_ex+0x512/0x640 [ 2290.306124][ T6237] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 2290.306152][ T6237] should_failslab+0xc2/0x120 [ 2290.306168][ T6237] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 2290.306192][ T6237] ? proc_alloc_inode+0x25/0x200 [ 2290.306216][ T6237] ? __pfx_proc_alloc_inode+0x10/0x10 [ 2290.306239][ T6237] proc_alloc_inode+0x25/0x200 [ 2290.306257][ T6237] alloc_inode+0x64/0x240 [ 2290.306276][ T6237] new_inode+0x22/0x1c0 [ 2290.306297][ T6237] proc_pid_make_inode+0x22/0x160 [ 2290.306319][ T6237] proc_ns_dir_lookup+0x25b/0x390 [ 2290.306342][ T6237] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 2290.306361][ T6237] lookup_open.isra.0+0x4da/0x1580 [ 2290.306387][ T6237] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 2290.306433][ T6237] ? lookup_fast+0x156/0x610 [ 2290.306458][ T6237] path_openat+0x893/0x2cb0 [ 2290.306491][ T6237] ? __pfx_path_openat+0x10/0x10 [ 2290.306523][ T6237] do_filp_open+0x20b/0x470 [ 2290.306549][ T6237] ? __pfx_do_filp_open+0x10/0x10 [ 2290.306584][ T6237] ? __pfx_kfree_link+0x10/0x10 [ 2290.306611][ T6237] ? alloc_fd+0x471/0x7d0 [ 2290.306643][ T6237] do_sys_openat2+0x11b/0x1d0 [ 2290.306662][ T6237] ? __pfx_do_sys_openat2+0x10/0x10 [ 2290.306684][ T6237] ? __fget_files+0x20e/0x3c0 [ 2290.306714][ T6237] __x64_sys_openat+0x174/0x210 [ 2290.306732][ T6237] ? __pfx___x64_sys_openat+0x10/0x10 [ 2290.306749][ T6237] ? ksys_write+0x1ac/0x250 [ 2290.306781][ T6237] do_syscall_64+0xcd/0x4e0 [ 2290.306803][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.306820][ T6237] RIP: 0033:0x7fd1a478d710 [ 2290.306834][ T6237] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 2290.306849][ T6237] RSP: 002b:00007fd1a56a8f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2290.306864][ T6237] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd1a478d710 [ 2290.306874][ T6237] RDX: 0000000000000000 RSI: 00007fd1a481207e RDI: 00000000ffffff9c [ 2290.306884][ T6237] RBP: 00007fd1a481207e R08: 0000000000000000 R09: 0000000000000000 [ 2290.306895][ T6237] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2290.306905][ T6237] R13: 00007fd1a49e6038 R14: 00007fd1a49e5fa0 R15: 00007ffcd929e078 [ 2290.306927][ T6237] [ 2291.078121][ T5880] usb 9-1: USB disconnect, device number 10 [ 2291.298041][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8997'. [ 2291.376259][ T6263] input input75: cannot allocate more than FF_MAX_EFFECTS effects [ 2291.394276][ T6264] input input76: cannot allocate more than FF_MAX_EFFECTS effects [ 2291.636198][ T6267] netlink: 96 bytes leftover after parsing attributes in process `syz.8.9003'. [ 2291.752952][ T6269] netlink: 300 bytes leftover after parsing attributes in process `syz.3.9004'. [ 2291.809274][ T6271] tipc: Failed to remove unknown binding: 66,1,1/0:1204632249/1204632251 [ 2292.088624][T32541] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2292.246812][T32541] usb 4-1: Using ep0 maxpacket: 16 [ 2292.259094][T32541] usb 4-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 2292.276717][T32541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2292.303304][T32541] usb 4-1: Product: syz [ 2292.317349][T32541] usb 4-1: Manufacturer: syz [ 2292.329557][T32541] usb 4-1: SerialNumber: syz [ 2292.348915][T32541] usb 4-1: config 0 descriptor?? [ 2292.379728][T32541] gspca_main: spca501-2.14.0 probing 0497:c001 [ 2292.506841][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2292.817142][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2292.817161][ T30] audit: type=1400 audit(2624006.620:5128): avc: denied { write } for pid=6270 comm="syz.3.9005" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2292.897749][T32541] gspca_spca501: reg write: error -110 [ 2292.903238][T32541] spca501 4-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 2292.942468][T32541] spca501 4-1:0.0: probe with driver spca501 failed with error -22 [ 2293.155193][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 2293.180234][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2293.191658][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 2293.201082][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2293.221915][ T24] usb 3-1: config 0 descriptor?? [ 2293.373189][ T6284] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.9009'. [ 2293.651872][ T24] lua 0003:1E7D:2C2E.0037: global environment stack underflow [ 2293.661168][ T24] lua 0003:1E7D:2C2E.0037: item 0 4 1 11 parsing failed [ 2293.672712][ T24] lua 0003:1E7D:2C2E.0037: parse failed [ 2293.682784][ T24] lua 0003:1E7D:2C2E.0037: probe with driver lua failed with error -22 [ 2293.923710][ T1205] usb 3-1: USB disconnect, device number 75 [ 2294.654962][ T30] audit: type=1400 audit(2624008.560:5129): avc: denied { mount } for pid=6291 comm="syz.2.9012" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 2294.707017][ T1205] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2294.872376][ T5880] usb 4-1: USB disconnect, device number 48 [ 2294.899643][ T1205] usb 2-1: Using ep0 maxpacket: 32 [ 2294.919262][ T1205] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2294.948697][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2294.985872][ T1205] usb 2-1: config 0 descriptor?? [ 2295.311500][ T1205] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2295.368729][ T1205] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2295.378958][ T1205] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2295.386079][ T1205] usb 2-1: media controller created [ 2295.412624][ T1205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2295.506204][ T1205] az6027: usb out operation failed. (-71) [ 2295.512633][ T1205] az6027: usb out operation failed. (-71) [ 2295.518473][ T1205] stb0899_attach: Driver disabled by Kconfig [ 2295.525815][ T1205] az6027: no front-end attached [ 2295.525815][ T1205] [ 2295.548224][ T1205] az6027: usb out operation failed. (-71) [ 2295.566785][ T1205] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2295.604823][ T1205] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input77 [ 2295.617153][ T5873] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2295.633242][ T1205] dvb-usb: schedule remote query interval to 400 msecs. [ 2295.641003][ T1205] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2295.655906][ T1205] usb 2-1: USB disconnect, device number 74 [ 2295.829361][ T1205] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2295.851798][ T5873] usb 9-1: Using ep0 maxpacket: 16 [ 2296.311740][ T5873] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2296.321905][ T5873] usb 9-1: config 1 has no interface number 1 [ 2296.331587][ T5873] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2296.344871][ T5873] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2296.356439][ T5873] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2296.371707][ T5873] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2296.383189][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2296.391263][ T5873] usb 9-1: Product: syz [ 2296.395473][ T5873] usb 9-1: Manufacturer: syz [ 2296.400135][ T5873] usb 9-1: SerialNumber: syz [ 2296.722370][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9018'. [ 2296.790484][ T6305] netlink: 'syz.8.9015': attribute type 1 has an invalid length. [ 2296.973827][ T6305] netlink: 'syz.8.9015': attribute type 1 has an invalid length. [ 2297.046017][ T6321] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9019'. [ 2297.081545][ T6321] binder: BINDER_SET_CONTEXT_MGR already set [ 2297.087764][ T6321] binder: 6314:6321 ioctl 4018620d 200000004a80 returned -16 [ 2297.237453][ T5873] usb 9-1: USB disconnect, device number 11 [ 2299.014267][ T6351] netlink: 272 bytes leftover after parsing attributes in process `syz.1.9028'. [ 2299.095292][ T6353] syz.8.9029 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2299.628442][T16524] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 2300.317871][T16524] usb 9-1: Using ep0 maxpacket: 8 [ 2300.482857][T16524] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2300.492152][T16524] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2300.504303][T16524] usb 9-1: Product: syz [ 2300.508594][T16524] usb 9-1: Manufacturer: syz [ 2300.514318][T16524] usb 9-1: SerialNumber: syz [ 2300.595844][T16524] usb 9-1: config 0 descriptor?? [ 2300.952773][ T6374] netlink: 'syz.1.9034': attribute type 12 has an invalid length. [ 2300.991721][ T6376] input input78: cannot allocate more than FF_MAX_EFFECTS effects [ 2301.082638][T16524] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2301.100220][ T6378] input input79: cannot allocate more than FF_MAX_EFFECTS effects [ 2301.490888][ T30] audit: type=1400 audit(2624015.409:5130): avc: denied { watch watch_reads } for pid=6385 comm="syz.2.9040" path="/29" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2301.516986][ T30] audit: type=1400 audit(2624015.429:5131): avc: denied { name_bind } for pid=6385 comm="syz.2.9040" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2302.592774][ T6412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9046'. [ 2302.626670][ T30] audit: type=1400 audit(2624016.539:5132): avc: denied { read } for pid=6411 comm="syz.2.9046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2302.898855][ T6416] ubi: mtd0 is already attached to ubi31 [ 2303.709360][T16524] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2303.740998][T16524] usb 9-1: USB disconnect, device number 12 [ 2304.882315][ T5880] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 2305.103168][ T5880] usb 2-1: config 3 has an invalid descriptor of length 241, skipping remainder of the config [ 2305.260425][ T5880] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 2 [ 2305.296535][ T5880] usb 2-1: string descriptor 0 read error: -22 [ 2305.306468][ T5880] usb 2-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=11.9b [ 2305.328328][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2305.707342][ T6450] smc: net device bond0 applied user defined pnetid SYZ0 [ 2305.814434][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9061'. [ 2305.828554][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9061'. [ 2305.872604][ T1205] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 2305.884101][ T6456] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.9060'. [ 2306.048709][ T1205] usb 9-1: device descriptor read/64, error -71 [ 2306.447919][ T30] audit: type=1326 audit(2624020.358:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.3.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2306.477538][ T30] audit: type=1326 audit(2624020.358:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.3.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2306.518995][ T30] audit: type=1326 audit(2624020.358:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.3.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2306.680783][ T1205] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 2306.747411][ T30] audit: type=1326 audit(2624020.358:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.3.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2306.794886][ T30] audit: type=1326 audit(2624020.358:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.3.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2306.823251][ T30] audit: type=1326 audit(2624020.358:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.3.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2306.954119][ T2135] usb 2-1: USB disconnect, device number 75 [ 2306.972263][ T30] audit: type=1326 audit(2624020.358:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.3.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2306.997637][ T30] audit: type=1326 audit(2624020.358:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.3.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2307.058879][ T1205] usb 9-1: device descriptor read/64, error -71 [ 2307.078449][ T30] audit: type=1326 audit(2624020.358:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.3.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2307.348467][ T1205] usb usb9-port1: attempt power cycle [ 2307.499928][ T6481] netlink: 'syz.1.9066': attribute type 2 has an invalid length. [ 2307.948723][ T1205] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 2308.541037][ T30] audit: type=1326 audit(2624020.358:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.3.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2308.547886][ T1205] usb 9-1: device descriptor read/8, error -71 [ 2308.579096][ T30] audit: type=1326 audit(2624020.358:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.3.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2308.602768][ T30] audit: type=1326 audit(2624020.358:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6463 comm="syz.3.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2309.683847][ T6509] overlay: Unknown parameter 'uid>00000000000000000000' [ 2310.658495][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9078'. [ 2312.629373][ T5900] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2312.663056][ T6540] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9082'. [ 2312.909595][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 2312.924321][ T5900] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2312.933487][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2312.941536][ T5900] usb 3-1: Product: syz [ 2312.957071][ T5900] usb 3-1: Manufacturer: syz [ 2313.029447][ T5900] usb 3-1: SerialNumber: syz [ 2313.044105][ T5900] usb 3-1: config 0 descriptor?? [ 2313.305352][ T5900] gspca_main: se401-2.14.0 probing 047d:5003 [ 2313.317518][ T6546] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9083'. [ 2313.708827][ T5900] gspca_se401: ExtraFeatures: 97 [ 2313.714225][ T5900] gspca_se401: Too many frame sizes [ 2313.864954][ T6552] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9086'. [ 2313.906813][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9086'. [ 2313.976748][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2313.976927][ T30] audit: type=1400 audit(2624027.887:5153): avc: denied { mounton } for pid=6531 comm="syz.2.9080" path="/39/file0" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2314.026085][ T6554] netlink: 'syz.2.9080': attribute type 10 has an invalid length. [ 2314.168607][ T6557] 9pnet_fd: Insufficient options for proto=fd [ 2314.203616][ T6557] 9pnet_fd: Insufficient options for proto=fd [ 2314.214670][ T6552] hsr_slave_1 (unregistering): left promiscuous mode [ 2314.214778][ T6557] 9pnet_fd: Insufficient options for proto=fd [ 2314.239665][ T6535] lo: entered allmulticast mode [ 2314.246623][ T6535] tunl0: entered allmulticast mode [ 2314.293784][ T6535] gre0: entered allmulticast mode [ 2314.364755][ T6535] gretap0: entered allmulticast mode [ 2314.429279][ T6563] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 2314.435829][ T6563] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2314.460091][ T6535] erspan0: entered allmulticast mode [ 2314.465586][ T6563] vhci_hcd vhci_hcd.0: Device attached [ 2314.491188][ T6535] ip_vti0: entered allmulticast mode [ 2314.501698][ T6535] ip6_vti0: entered allmulticast mode [ 2314.523893][ T6535] sit0: entered allmulticast mode [ 2314.553532][ T6535] ip6tnl0: entered allmulticast mode [ 2314.717488][ T6535] ip6gre0: entered allmulticast mode [ 2314.774251][ T6535] syz_tun: entered allmulticast mode [ 2314.791659][ T6535] ip6gretap0: entered allmulticast mode [ 2314.881405][ T5900] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 2314.889108][ T1205] usb 50-1: SetAddress Request (2) to port 0 [ 2314.935134][ T30] audit: type=1400 audit(2624028.817:5154): avc: denied { execute } for pid=6569 comm="syz.3.9091" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 2314.949687][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 2314.960178][ T1205] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2314.966438][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 2315.121746][ T5900] usb 9-1: config 0 has no interfaces? [ 2315.128013][ T5900] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2315.137158][ T6535] bridge0: entered allmulticast mode [ 2315.151532][ T6535] vcan0: entered allmulticast mode [ 2315.168909][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2315.180851][ T6535] bond0: entered allmulticast mode [ 2315.199564][ T6535] bond_slave_0: entered allmulticast mode [ 2315.210932][ T5900] usb 9-1: config 0 descriptor?? [ 2315.225084][ T6535] bond_slave_1: entered allmulticast mode [ 2315.315689][ T6535] team0: entered allmulticast mode [ 2315.356929][ T6535] team_slave_0: entered allmulticast mode [ 2315.364520][ T6535] team_slave_1: entered allmulticast mode [ 2315.437994][ T6535] dummy0: entered allmulticast mode [ 2315.465018][ T6564] usbip_core: unknown command [ 2315.471325][ T2135] usb 9-1: USB disconnect, device number 17 [ 2315.477239][ T6564] vhci_hcd: unknown pdu 0 [ 2315.493417][ T6535] nlmon0: entered allmulticast mode [ 2315.513479][ T6564] usbip_core: unknown command [ 2315.524036][ T6535] caif0: entered allmulticast mode [ 2315.541435][ T2960] vhci_hcd: stop threads [ 2315.551883][ T2960] vhci_hcd: release socket [ 2315.556847][ T2960] vhci_hcd: disconnect device [ 2315.565947][ T6535] batadv0: entered allmulticast mode [ 2315.608500][ T6535] vxcan0: entered allmulticast mode [ 2315.623338][ T6535] vxcan1: entered allmulticast mode [ 2315.634626][ T6535] veth0: entered allmulticast mode [ 2315.696075][ T6535] veth1: entered allmulticast mode [ 2315.756880][ T6535] wg0: entered allmulticast mode [ 2315.779627][ T6535] wg1: entered allmulticast mode [ 2315.828601][ T6535] wg2: entered allmulticast mode [ 2315.851371][ T6535] veth0_to_bridge: entered allmulticast mode [ 2315.919305][ T6535] veth1_to_bridge: entered allmulticast mode [ 2315.977212][ T6535] veth0_to_bond: entered allmulticast mode [ 2316.041436][ T6535] veth1_to_bond: entered allmulticast mode [ 2316.120225][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9094'. [ 2316.383300][ T6535] veth0_to_team: entered allmulticast mode [ 2316.938991][ T30] audit: type=1400 audit(2624030.737:5155): avc: denied { read append } for pid=6588 comm="syz.8.9095" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2316.940102][ T2199] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 2317.021777][ T2199] Bluetooth: hci2: command 0x0401 tx timeout [ 2317.590490][ T30] audit: type=1400 audit(2624030.757:5156): avc: denied { open } for pid=6588 comm="syz.8.9095" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2317.595836][ T6535] veth1_to_team: entered allmulticast mode [ 2317.665290][ T6535] veth0_to_batadv: entered allmulticast mode [ 2317.675008][ T6535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2317.694078][ T6535] batadv_slave_0: entered allmulticast mode [ 2317.706767][ T6535] veth1_to_batadv: entered allmulticast mode [ 2317.725498][ T6535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2317.734748][ T6535] batadv_slave_1: entered allmulticast mode [ 2317.750325][ T6535] xfrm0: entered allmulticast mode [ 2317.776820][ T6535] veth0_to_hsr: entered allmulticast mode [ 2317.794795][ T6535] hsr_slave_0: entered allmulticast mode [ 2317.819362][ T6535] veth1_to_hsr: entered allmulticast mode [ 2317.839780][ T6535] hsr_slave_1: entered allmulticast mode [ 2317.925451][ T6535] hsr0: entered allmulticast mode [ 2317.967349][ T6535] veth1_virt_wifi: entered allmulticast mode [ 2317.982865][ T6535] veth0_virt_wifi: entered allmulticast mode [ 2318.005629][ T6535] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 2318.019769][ T6535] veth1_vlan: entered allmulticast mode [ 2318.032516][ T6535] veth0_vlan: entered allmulticast mode [ 2318.059846][ T6535] vlan0: entered allmulticast mode [ 2318.077158][ T6535] vlan1: entered allmulticast mode [ 2318.089135][ T6535] macvlan0: entered allmulticast mode [ 2318.118178][ T6535] macvlan1: entered allmulticast mode [ 2318.138413][ T6535] ipvlan0: entered allmulticast mode [ 2318.149480][ T6535] ipvlan1: entered allmulticast mode [ 2318.158854][ T6535] veth1_macvtap: entered allmulticast mode [ 2318.173495][ T6535] veth0_macvtap: entered allmulticast mode [ 2318.190559][ T6535] macvtap0: entered allmulticast mode [ 2318.205102][ T6535] macsec0: entered allmulticast mode [ 2318.226879][ T6535] geneve0: entered allmulticast mode [ 2318.237973][ T6535] geneve1: entered allmulticast mode [ 2318.252901][ T6535] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 2318.281987][ T6535] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 2318.317270][ T6535] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 2318.394940][ T6607] netlink: 'syz.3.9098': attribute type 2 has an invalid length. [ 2318.619769][ T6535] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 2318.661248][ T6535] mac80211_hwsim hwsim103 wlan0: entered allmulticast mode [ 2318.686561][ T6535] mac80211_hwsim hwsim104 wlan1: entered allmulticast mode [ 2318.707350][ T6535] mac80211_hwsim hwsim107 wlan2: entered allmulticast mode [ 2318.720975][ T6554] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 2318.729275][ T6554] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 2318.738234][ T6554] team0: Port device netdevsim0 added [ 2318.744518][ T6577] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9093'. [ 2318.773461][ T6581] bond0: Removing last ns target with arp_interval on [ 2318.773654][T28322] bond0: (slave bond_slave_0): interface is now down [ 2318.795419][T24531] usb 3-1: USB disconnect, device number 76 [ 2318.890311][T28322] bond0: (slave bond_slave_1): interface is now down [ 2318.902523][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9099'. [ 2318.980254][T28322] bond0: (slave batadv0): interface is now down [ 2319.104348][T28322] bond0: (slave bond_slave_0): interface is now down [ 2319.189497][T28322] bond0: (slave bond_slave_1): interface is now down [ 2319.257511][T28322] bond0: (slave batadv0): interface is now down [ 2319.372866][ T2960] bond0: (slave bond_slave_0): interface is now down [ 2319.437053][ T2960] bond0: (slave bond_slave_1): interface is now down [ 2319.550938][ T6617] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9101'. [ 2319.580400][ T2960] bond0: (slave batadv0): interface is now down [ 2320.058080][ T6624] binder: BINDER_SET_CONTEXT_MGR already set [ 2320.070381][ T1205] usb 50-1: device descriptor read/8, error -110 [ 2320.171014][ T6624] binder: 6611:6624 ioctl 4018620d 200000004a80 returned -16 [ 2320.242426][ T2960] bond0: now running without any active interface! [ 2320.486685][ T6957] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2320.638529][ T6957] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2320.777032][ T6957] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2320.904252][ T6957] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2321.247612][ T6632] SELinux: failed to load policy [ 2321.276789][ T6634] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9104'. [ 2321.560832][ T5873] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2321.755084][ T5873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2321.895098][ T5873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2321.953398][ T5873] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2321.991903][ T1205] usb usb50-port1: attempt power cycle [ 2322.007710][ T5873] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2322.030865][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.050624][ T5873] usb 2-1: Product: syz [ 2322.054812][ T5873] usb 2-1: Manufacturer: syz [ 2322.059399][ T5873] usb 2-1: SerialNumber: syz [ 2322.093339][ T5873] cdc_mbim 2-1:1.0: skipping garbage [ 2322.098666][ T5873] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 2322.106021][ T5873] cdc_mbim 2-1:1.0: bind() failure [ 2322.420266][ T6647] tmpfs: Bad value for 'nr_inodes' [ 2322.584485][ T1205] usb usb50-port1: unable to enumerate USB device [ 2324.656714][ T2135] usb 2-1: USB disconnect, device number 76 [ 2324.668883][ T6654] mac80211_hwsim hwsim106 wlan1: entered allmulticast mode [ 2324.698384][ T6656] bridge_slave_0: left allmulticast mode [ 2324.725040][ T6659] 9pnet_fd: Insufficient options for proto=fd [ 2324.733906][ T6656] bridge_slave_0: left promiscuous mode [ 2324.784905][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 2324.852880][ T6656] bridge_slave_1: left allmulticast mode [ 2324.870851][ T6656] bridge_slave_1: left promiscuous mode [ 2324.935164][ T6668] binder: BINDER_SET_CONTEXT_MGR already set [ 2324.960469][ T6668] binder: 6663:6668 ioctl 4018620d 200000004a80 returned -16 [ 2324.976933][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state [ 2325.041134][ T6656] bond0: (slave bond_slave_0): Releasing backup interface [ 2325.109570][ T6656] bond0: (slave bond_slave_1): Releasing backup interface [ 2325.306269][ T6656] team0: Port device team_slave_0 removed [ 2325.348905][ T6656] team0: Port device team_slave_1 removed [ 2325.364702][ T6656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2325.406973][ T6656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2325.420853][ T6656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2325.432841][ T6656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2325.805750][ T6667] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9113'. [ 2325.922286][ T6679] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9118'. [ 2326.091270][ T1205] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2326.261293][ T1205] usb 9-1: Using ep0 maxpacket: 8 [ 2326.275732][ T1205] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2326.285151][ T1205] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2326.322701][ T1205] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2326.344925][ T1205] pvrusb2: ********** [ 2326.353404][ T1205] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2326.511033][ T1205] pvrusb2: Important functionality might not be entirely working. [ 2326.949183][ T1205] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2326.960542][ T1205] pvrusb2: ********** [ 2326.993263][ T2335] pvrusb2: Invalid write control endpoint [ 2327.108952][ T2335] pvrusb2: Invalid write control endpoint [ 2327.117237][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2327.128286][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2327.224916][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2327.517334][ T2335] pvrusb2: Device being rendered inoperable [ 2327.590955][ T6693] pvrusb2: Attempted to execute control transfer when device not ok [ 2327.601077][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2327.604154][ T3763] usb 9-1: USB disconnect, device number 18 [ 2327.766567][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 2327.885902][ T2335] pvrusb2: Attached sub-driver cx25840 [ 2327.901888][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2327.924378][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2328.126139][ T6701] No control pipe specified [ 2328.940391][ T6711] fuse: Bad value for 'fd' [ 2329.093847][ T6718] netlink: 'syz.2.9129': attribute type 3 has an invalid length. [ 2329.421750][ T2135] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2329.710896][ T2135] usb 2-1: Using ep0 maxpacket: 16 [ 2329.735596][ T2135] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2329.765379][ T2135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2329.787034][ T30] audit: type=1400 audit(2624043.695:5157): avc: denied { create } for pid=6731 comm="syz.2.9133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2329.821703][ T2135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2329.843740][ T2135] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2329.858394][ T30] audit: type=1400 audit(2624043.745:5158): avc: denied { getopt } for pid=6731 comm="syz.2.9133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2329.883945][ T2135] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2329.904841][ T2135] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2329.914303][ T2135] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2329.923554][ T2135] usb 2-1: Manufacturer: syz [ 2329.930317][ T2135] usb 2-1: config 0 descriptor?? [ 2330.161873][ T5873] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2330.184882][ T2135] rc_core: IR keymap rc-hauppauge not found [ 2330.190857][ T2135] Registered IR keymap rc-empty [ 2330.195809][ T2135] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2330.224468][ T2135] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2330.252472][ T2135] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2330.265458][ T2135] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input81 [ 2330.278838][ T2135] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2330.301855][ T2135] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2330.311807][ T5873] usb 9-1: Using ep0 maxpacket: 16 [ 2330.318117][ T5873] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2330.328778][ T2135] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2330.336178][ T5873] usb 9-1: config 0 has no interfaces? [ 2330.345708][ T5873] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2330.354945][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2330.363158][ T2135] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2330.370317][ T5873] usb 9-1: Product: syz [ 2330.374506][ T5873] usb 9-1: Manufacturer: syz [ 2330.379083][ T5873] usb 9-1: SerialNumber: syz [ 2330.383908][ T2135] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2330.393153][ T5873] usb 9-1: config 0 descriptor?? [ 2330.401784][ T2135] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2330.421782][ T2135] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2330.442931][ T2135] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2330.462060][ T2135] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2330.481792][ T2135] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2330.502983][ T2135] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2330.512198][ T2135] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2330.616842][ T6737] netlink: 72 bytes leftover after parsing attributes in process `syz.8.9135'. [ 2330.635764][ T6742] FAULT_INJECTION: forcing a failure. [ 2330.635764][ T6742] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.648863][ T6742] CPU: 0 UID: 0 PID: 6742 Comm: syz.2.9136 Not tainted syzkaller #0 PREEMPT(full) [ 2330.648888][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2330.648898][ T6742] Call Trace: [ 2330.648904][ T6742] [ 2330.648911][ T6742] dump_stack_lvl+0x16c/0x1f0 [ 2330.648938][ T6742] should_fail_ex+0x512/0x640 [ 2330.648956][ T6742] ? fs_reclaim_acquire+0xae/0x150 [ 2330.648979][ T6742] should_failslab+0xc2/0x120 [ 2330.648995][ T6742] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2330.649020][ T6742] ? security_inode_alloc+0x3b/0x2b0 [ 2330.649044][ T6742] security_inode_alloc+0x3b/0x2b0 [ 2330.649064][ T6742] inode_init_always_gfp+0xce4/0x1030 [ 2330.649094][ T6742] alloc_inode+0x86/0x240 [ 2330.649115][ T6742] new_inode+0x22/0x1c0 [ 2330.649137][ T6742] proc_pid_make_inode+0x22/0x160 [ 2330.649160][ T6742] proc_ns_dir_lookup+0x25b/0x390 [ 2330.649184][ T6742] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 2330.649204][ T6742] lookup_open.isra.0+0x4da/0x1580 [ 2330.649233][ T6742] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 2330.649272][ T6742] ? lookup_fast+0x156/0x610 [ 2330.649298][ T6742] path_openat+0x893/0x2cb0 [ 2330.649332][ T6742] ? __pfx_path_openat+0x10/0x10 [ 2330.649364][ T6742] do_filp_open+0x20b/0x470 [ 2330.649390][ T6742] ? __pfx_do_filp_open+0x10/0x10 [ 2330.649423][ T6742] ? __pfx_kfree_link+0x10/0x10 [ 2330.649452][ T6742] ? alloc_fd+0x471/0x7d0 [ 2330.649484][ T6742] do_sys_openat2+0x11b/0x1d0 [ 2330.649504][ T6742] ? __pfx_do_sys_openat2+0x10/0x10 [ 2330.649525][ T6742] ? __fget_files+0x20e/0x3c0 [ 2330.649556][ T6742] __x64_sys_openat+0x174/0x210 [ 2330.649576][ T6742] ? __pfx___x64_sys_openat+0x10/0x10 [ 2330.649594][ T6742] ? ksys_write+0x1ac/0x250 [ 2330.649627][ T6742] do_syscall_64+0xcd/0x4e0 [ 2330.649650][ T6742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2330.649667][ T6742] RIP: 0033:0x7f210478d710 [ 2330.649682][ T6742] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 2330.649698][ T6742] RSP: 002b:00007f210565df60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2330.649713][ T6742] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f210478d710 [ 2330.649724][ T6742] RDX: 0000000000000000 RSI: 00007f210481207e RDI: 00000000ffffff9c [ 2330.649734][ T6742] RBP: 00007f210481207e R08: 0000000000000000 R09: 0000000000000000 [ 2330.649744][ T6742] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2330.649753][ T6742] R13: 00007f21049e6038 R14: 00007f21049e5fa0 R15: 00007fffadd1d3d8 [ 2330.649777][ T6742] [ 2330.898477][ C0] vkms_vblank_simulate: vblank timer overrun [ 2330.960382][ T30] audit: type=1400 audit(2624044.865:5159): avc: denied { ioctl } for pid=6719 comm=6C2586CE36DB0CCF197CC94F7FCE8F path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2330.992797][T24531] usb 9-1: USB disconnect, device number 19 [ 2331.009110][ T30] audit: type=1400 audit(2624044.915:5160): avc: denied { checkpoint_restore } for pid=6744 comm="syz.2.9137" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2331.030659][ C0] vkms_vblank_simulate: vblank timer overrun [ 2331.684536][ T6755] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2331.760840][ T6757] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9142'. [ 2332.666552][ T24] usb 2-1: USB disconnect, device number 77 [ 2332.898493][T24531] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2333.007200][ T6771] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9146'. [ 2333.072527][T24531] usb 4-1: Using ep0 maxpacket: 32 [ 2333.085816][T24531] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2333.106491][T24531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2333.198040][ T6779] netlink: 'syz.8.9150': attribute type 2 has an invalid length. [ 2333.373799][T24531] usb 4-1: config 0 descriptor?? [ 2333.381504][ T6780] bridge0: entered allmulticast mode [ 2333.388195][ T6780] bridge0: left allmulticast mode [ 2333.606633][T24531] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2333.634112][T24531] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2333.654807][T24531] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2333.682185][T24531] usb 4-1: media controller created [ 2333.742631][T24531] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2334.510687][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 2334.517963][T24531] az6027: usb out operation failed. (-32) [ 2334.531573][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 2334.550198][T24531] az6027: usb out operation failed. (-32) [ 2334.903622][T24531] stb0899_attach: Driver disabled by Kconfig [ 2334.909633][T24531] az6027: no front-end attached [ 2334.909633][T24531] [ 2334.917065][T24531] az6027: usb out operation failed. (-71) [ 2334.929939][T24531] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2335.082767][T24531] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input82 [ 2335.251537][T24531] dvb-usb: schedule remote query interval to 400 msecs. [ 2335.262518][T24531] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2335.326329][T24531] usb 4-1: USB disconnect, device number 49 [ 2335.336039][ T30] audit: type=1400 audit(2624049.244:5161): avc: denied { read write } for pid=6781 comm="syz.4.9151" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2335.338873][ T6800] 9pnet_fd: Insufficient options for proto=fd [ 2335.493518][ T6804] netlink: 'syz.8.9155': attribute type 2 has an invalid length. [ 2335.586001][ T30] audit: type=1400 audit(2624049.244:5162): avc: denied { open } for pid=6781 comm="syz.4.9151" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2335.781534][T24531] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2336.996634][ T30] audit: type=1400 audit(2624050.904:5163): avc: denied { read write } for pid=6816 comm="syz.3.9160" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2337.112673][ T30] audit: type=1400 audit(2624050.904:5164): avc: denied { open } for pid=6816 comm="syz.3.9160" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2337.148568][ T30] audit: type=1400 audit(2624050.944:5165): avc: denied { ioctl } for pid=6816 comm="syz.3.9160" path="/dev/input/mice" dev="devtmpfs" ino=915 ioctlcmd=0x5662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2337.182465][ T6818] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9160'. [ 2338.859689][ T6838] binder: BINDER_SET_CONTEXT_MGR already set [ 2338.865948][ T6838] binder: 6832:6838 ioctl 4018620d 200000004a80 returned -16 [ 2339.218837][ T6840] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9166'. [ 2339.275021][ T6841] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9167'. [ 2339.303924][ T6840] binder: BINDER_SET_CONTEXT_MGR already set [ 2339.310030][ T6840] binder: 6834:6840 ioctl 4018620d 200000004a80 returned -16 [ 2339.367217][ T6841] binder_alloc: 6837: binder_alloc_buf, no vma [ 2339.609513][ T30] audit: type=1400 audit(2624053.513:5166): avc: denied { write } for pid=6847 comm="syz.4.9169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2339.977410][ T6857] netlink: 56 bytes leftover after parsing attributes in process `syz.8.9172'. [ 2340.542407][ T6866] sctp: [Deprecated]: syz.2.9176 (pid 6866) Use of int in max_burst socket option deprecated. [ 2340.542407][ T6866] Use struct sctp_assoc_value instead [ 2340.666648][ T30] audit: type=1400 audit(2624054.573:5167): avc: denied { ioctl } for pid=6871 comm="syz.2.9178" path="socket:[188274]" dev="sockfs" ino=188274 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2341.053507][ T5900] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2341.290153][ T6883] binder: 6882:6883 ioctl 40046205 0 returned -22 [ 2341.298009][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 2341.304540][ T5900] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 2341.315698][ T6883] binder: 6882:6883 ioctl c0306201 200000000380 returned -11 [ 2341.323931][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2341.345019][ T5900] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2341.361571][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2341.373482][ T5900] usb 3-1: Product: syz [ 2341.377654][ T5900] usb 3-1: Manufacturer: syz [ 2341.392736][ T5900] usb 3-1: SerialNumber: syz [ 2341.453603][T24531] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2341.614970][T24531] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2341.640482][T24531] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2341.652159][T24531] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2341.661405][T24531] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2341.692449][ T5900] usb 3-1: 0:2 : does not exist [ 2341.701277][ T6879] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2341.711735][ T5900] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 2341.726725][ T5900] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 2341.740206][ T5900] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 2341.754794][ T5900] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 2341.782077][ T5900] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 2341.794581][T24531] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2341.805390][ T5900] usb 3-1: USB disconnect, device number 77 [ 2341.917831][T24531] usb 9-1: USB disconnect, device number 20 [ 2342.291741][ T6895] fuse: Bad value for 'fd' [ 2342.763954][ T30] audit: type=1326 audit(2624056.673:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.8.9188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7de2d8eec9 code=0x0 [ 2342.786478][ C0] vkms_vblank_simulate: vblank timer overrun [ 2344.087255][ T30] audit: type=1400 audit(2624057.993:5169): avc: denied { bind } for pid=6920 comm="syz.4.9194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2344.148822][ T6928] netlink: 96 bytes leftover after parsing attributes in process `syz.8.9195'. [ 2344.239598][ T6932] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2344.306747][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.313025][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.605758][ T6937] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.9198'. [ 2346.365331][ T6962] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9206'. [ 2346.450284][ T6966] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9208'. [ 2346.461172][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 2346.468478][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 2346.728025][ T6970] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 2346.788226][ T30] audit: type=1400 audit(2624060.632:5170): avc: denied { ioctl } for pid=6969 comm="syz.3.9209" path="socket:[189599]" dev="sockfs" ino=189599 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2347.124437][T24531] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2347.723166][T24531] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2347.740491][T24531] usb 4-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 2347.752795][T24531] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2347.764513][T24531] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 2347.776556][T24531] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2347.785695][T24531] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2347.809269][T24531] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2347.836761][T24531] usb 4-1: invalid MIDI out EP 0 [ 2347.880026][T24531] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2348.275088][ T24] usb 4-1: USB disconnect, device number 50 [ 2348.330852][ T6990] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.9213'. [ 2349.659395][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9218'. [ 2349.702825][ T7006] dummy0: entered promiscuous mode [ 2349.768853][ T7006] dummy0: left promiscuous mode [ 2350.434312][ T30] audit: type=1326 audit(2624064.332:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2350.587836][ T30] audit: type=1326 audit(2624064.332:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2350.626653][ T30] audit: type=1326 audit(2624064.332:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2350.651621][ T30] audit: type=1326 audit(2624064.332:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2350.676687][ T30] audit: type=1326 audit(2624064.332:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2350.702171][ T30] audit: type=1326 audit(2624064.332:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2350.914688][ T30] audit: type=1326 audit(2624064.332:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2351.293113][ T30] audit: type=1326 audit(2624064.332:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2351.357230][ T30] audit: type=1326 audit(2624064.332:5179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.3.9220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9f3018eec9 code=0x7ffc0000 [ 2351.756524][ T7037] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9225'. [ 2351.794980][ T7037] netlink: 'syz.8.9225': attribute type 6 has an invalid length. [ 2351.811925][ T7037] netlink: 'syz.8.9225': attribute type 5 has an invalid length. [ 2351.837862][ T7037] netlink: 'syz.8.9225': attribute type 4 has an invalid length. [ 2352.956483][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2352.956559][ T30] audit: type=1400 audit(2624066.852:5191): avc: denied { create } for pid=7053 comm="syz.8.9230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2352.988050][ T30] audit: type=1400 audit(2624066.892:5192): avc: denied { setopt } for pid=7053 comm="syz.8.9230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2353.072708][ T7049] netlink: 'syz.2.9227': attribute type 21 has an invalid length. [ 2353.080660][ T7049] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9227'. [ 2353.321641][ T7061] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9231'. [ 2353.353969][ T7061] binder: BINDER_SET_CONTEXT_MGR already set [ 2353.360101][ T7061] binder: 7059:7061 ioctl 4018620d 200000004a80 returned -16 [ 2354.538699][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9234'. [ 2356.889097][ T7101] kvm: kvm [7100]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2700006eb7 [ 2356.898317][ T7101] kvm: kvm [7100]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x2700002eb7 [ 2356.907833][ T7101] kvm: kvm [7100]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4200006a27 [ 2356.917152][ T7101] kvm: kvm [7100]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4200002a27 [ 2356.931539][ T7101] kvm: kvm [7100]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xed00006e67 [ 2356.940681][ T7101] kvm: kvm [7100]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0xed00002e67 [ 2356.956950][ T7101] kvm: kvm [7100]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x34000078b0 [ 2356.966229][ T7101] kvm: kvm [7100]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x34000038b0 [ 2358.333935][ T7115] /dev/nullb0: Can't lookup blockdev [ 2358.399812][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9246'. [ 2358.506303][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9249'. [ 2358.565457][ T7121] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 2358.574640][ T7121] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (120341367256071) [ 2358.727434][ T7125] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.9248'. [ 2360.439845][ T7151] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2361.239267][ T30] audit: type=1400 audit(2624075.141:5193): avc: denied { mounton } for pid=7166 comm="syz.2.9263" path="/syzcgroup/unified/syz2" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 2361.262533][ C0] vkms_vblank_simulate: vblank timer overrun [ 2361.276123][ T7171] SQUASHFS error: Failed to read block 0x0: -5 [ 2361.283472][ T7171] unable to read squashfs_super_block [ 2361.326182][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2361.659883][ T30] audit: type=1400 audit(2624075.510:5194): avc: denied { accept } for pid=7166 comm="syz.2.9263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2361.716900][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2361.731617][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 53807, setting to 1024 [ 2361.752489][T28923] Bluetooth: hci2: command 0x0401 tx timeout [ 2361.932921][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 2361.989401][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2362.021817][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2362.053142][ T7160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2362.067802][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2362.376687][ T24] usb 4-1: USB disconnect, device number 51 [ 2362.761357][ T7185] netlink: 96 bytes leftover after parsing attributes in process `syz.8.9265'. [ 2363.102245][ T7185] binder_alloc: 7181: binder_alloc_buf, no vma [ 2364.117785][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9270'. [ 2364.136648][ T7197] netlink: 'syz.3.9271': attribute type 10 has an invalid length. [ 2364.188830][ T7205] netlink: 'syz.4.9270': attribute type 1 has an invalid length. [ 2364.229359][ T7197] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 2364.976819][ T30] audit: type=1400 audit(2624078.530:5195): avc: denied { append } for pid=7207 comm="syz.2.9274" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2365.040848][ T30] audit: type=1326 audit(2624078.920:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.8.9273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de2d8eec9 code=0x7fc00000 [ 2365.063978][ C1] vkms_vblank_simulate: vblank timer overrun [ 2365.143766][ T7215] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 2365.150288][ T7215] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2365.188546][ T7215] vhci_hcd vhci_hcd.0: Device attached [ 2365.219100][ T7216] vhci_hcd: connection closed [ 2365.219407][ T6957] vhci_hcd: stop threads [ 2365.239614][ T6957] vhci_hcd: release socket [ 2365.255358][ T6957] vhci_hcd: disconnect device [ 2367.097772][ T7249] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9285'. [ 2367.580289][ T7249] binder_alloc: 7246: binder_alloc_buf, no vma [ 2367.776471][ T7258] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9289'. [ 2367.893736][ T7258] binder_alloc: 7253: binder_alloc_buf, no vma [ 2368.547725][ T7266] tipc: Started in network mode [ 2368.553615][ T7266] tipc: Node identity 16e517b8a5a1, cluster identity 4711 [ 2368.561499][ T7266] tipc: Enabled bearer , priority 0 [ 2368.598606][ T7266] syzkaller0: entered promiscuous mode [ 2368.615561][ T7266] syzkaller0: entered allmulticast mode [ 2368.890168][ T7266] tipc: Resetting bearer [ 2368.911088][ T7265] tipc: Resetting bearer [ 2368.979124][ T7265] tipc: Disabling bearer [ 2368.984971][ T30] audit: type=1400 audit(2624082.879:5197): avc: denied { mount } for pid=7271 comm="syz.3.9294" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2369.535775][ T7293] No control pipe specified [ 2370.098216][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 2371.042573][ T30] audit: type=1400 audit(2624084.939:5198): avc: denied { create } for pid=7306 comm="syz.2.9301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2371.090198][ T30] audit: type=1326 audit(2624084.939:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7306 comm="syz.2.9301" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f210478eec9 code=0x0 [ 2371.444963][ T30] audit: type=1326 audit(2624085.339:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.4.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a478eec9 code=0x7ffc0000 [ 2371.531235][ T30] audit: type=1326 audit(2624085.379:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.4.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a478eec9 code=0x7ffc0000 [ 2371.563995][ T7320] netlink: 'syz.8.9306': attribute type 61 has an invalid length. [ 2371.579121][ T30] audit: type=1326 audit(2624085.379:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.4.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd1a478eec9 code=0x7ffc0000 [ 2371.607503][ T30] audit: type=1326 audit(2624085.389:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.4.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a478eec9 code=0x7ffc0000 [ 2371.722977][ T30] audit: type=1326 audit(2624085.459:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.4.9303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a478eec9 code=0x7ffc0000 [ 2371.748963][ T30] audit: type=1400 audit(2624085.649:5205): avc: denied { bind } for pid=7319 comm="syz.8.9306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2371.769768][ T7320] sctp: [Deprecated]: syz.8.9306 (pid 7320) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2371.769768][ T7320] Use struct sctp_sack_info instead [ 2372.001001][T28923] Bluetooth: hci4: command 0x0406 tx timeout [ 2372.010201][ T30] audit: type=1400 audit(2624085.909:5206): avc: denied { ioctl } for pid=7333 comm="syz.8.9309" path="/dev/ptyr5" dev="devtmpfs" ino=139 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2372.010885][ T7337] usb usb8: usbfs: process 7337 (syz.8.9309) did not claim interface 0 before use [ 2372.473066][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9314'. [ 2372.491302][ T7348] : entered promiscuous mode [ 2373.784629][ T7358] batadv_slave_1: entered promiscuous mode [ 2374.041834][ T7371] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9321'. [ 2374.107190][ T7366] batadv_slave_1: left promiscuous mode [ 2376.099154][ T3763] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 2376.298107][ T3763] usb 9-1: Using ep0 maxpacket: 8 [ 2376.651496][ T3763] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2376.668258][ T3763] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2376.683751][ T3763] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2376.704259][ T3763] pvrusb2: ********** [ 2376.710487][ T3763] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2376.727186][ T3763] pvrusb2: Important functionality might not be entirely working. [ 2376.736190][ T3763] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2376.748628][ T3763] pvrusb2: ********** [ 2376.811692][ T7401] input input85: cannot allocate more than FF_MAX_EFFECTS effects [ 2376.974714][ T2335] pvrusb2: Invalid write control endpoint [ 2377.018077][ T1205] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2378.578799][ T1205] usb 4-1: Using ep0 maxpacket: 8 [ 2378.794128][ T2335] pvrusb2: Invalid write control endpoint [ 2378.817405][ T1205] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2378.822338][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2379.188181][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2379.189542][ T24] usb 9-1: USB disconnect, device number 21 [ 2379.214487][ T1205] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2379.223298][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2379.230881][ T1205] pvrusb2: ********** [ 2379.234864][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2379.244909][ T1205] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2379.281290][ T2335] pvrusb2: Device being rendered inoperable [ 2379.291660][ T1205] pvrusb2: Important functionality might not be entirely working. [ 2379.326539][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2379.423941][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9335'. [ 2379.617660][ T1205] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2379.636994][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 2379.654564][ T2335] pvrusb2: Attached sub-driver cx25840 [ 2379.660548][ T1205] pvrusb2: ********** [ 2379.675606][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2379.761955][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2379.773576][ T2335] pvrusb2: Invalid write control endpoint [ 2380.349819][ T2335] pvrusb2: Invalid write control endpoint [ 2380.355716][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2380.365269][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2380.372851][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2380.382890][ T2335] pvrusb2: Device being rendered inoperable [ 2380.391383][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2380.408808][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 2380.418372][ T2335] pvrusb2: Attached sub-driver cx25840 [ 2380.447371][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2380.572030][ T7438] pvrusb2: Attempted to execute control transfer when device not ok [ 2380.607060][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2381.026279][ T7447] netlink: 96 bytes leftover after parsing attributes in process `syz.8.9343'. [ 2382.093530][ T7464] syz_tun: entered allmulticast mode [ 2382.402142][ T7463] syz_tun: left allmulticast mode [ 2382.782234][ T2135] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2382.969181][T16524] usb 4-1: USB disconnect, device number 52 [ 2383.001512][ T2135] usb 2-1: Using ep0 maxpacket: 8 [ 2383.019561][ T2135] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2383.105409][ T1205] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 2383.129082][ T2135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2383.152695][ T2135] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2383.167431][ T2135] pvrusb2: ********** [ 2383.258982][ T1205] usb 9-1: Using ep0 maxpacket: 8 [ 2383.274437][ T1205] usb 9-1: config 0 has an invalid interface number: 168 but max is 0 [ 2383.731644][ T1205] usb 9-1: config 0 has no interface number 0 [ 2383.738557][ T1205] usb 9-1: config 0 interface 168 has no altsetting 0 [ 2383.739579][ T2135] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2383.745884][ T1205] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2383.765189][ T1205] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2383.774742][ T1205] usb 9-1: config 0 descriptor?? [ 2383.807993][ T2135] pvrusb2: Important functionality might not be entirely working. [ 2383.825971][ T2135] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2383.848823][ T2135] pvrusb2: ********** [ 2383.915184][ T2335] pvrusb2: Invalid write control endpoint [ 2383.978291][ T2335] pvrusb2: Invalid write control endpoint [ 2384.121105][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2384.671975][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2384.679656][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2384.690687][ T2335] pvrusb2: Device being rendered inoperable [ 2384.723073][ T7483] pvrusb2: Attempted to execute control transfer when device not ok [ 2384.732168][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2384.740598][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 2384.872246][ T2335] pvrusb2: Attached sub-driver cx25840 [ 2384.895785][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2384.917305][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2384.917379][ T2135] usb 2-1: USB disconnect, device number 78 [ 2384.944033][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9353'. [ 2385.905457][ T2135] usb 9-1: USB disconnect, device number 22 [ 2386.423371][ T7507] FAULT_INJECTION: forcing a failure. [ 2386.423371][ T7507] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.442430][ T7507] CPU: 1 UID: 0 PID: 7507 Comm: syz.4.9357 Not tainted syzkaller #0 PREEMPT(full) [ 2386.442455][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2386.442465][ T7507] Call Trace: [ 2386.442471][ T7507] [ 2386.442478][ T7507] dump_stack_lvl+0x16c/0x1f0 [ 2386.442504][ T7507] should_fail_ex+0x512/0x640 [ 2386.442524][ T7507] ? fs_reclaim_acquire+0xae/0x150 [ 2386.442545][ T7507] ? tomoyo_encode2+0x100/0x3e0 [ 2386.442565][ T7507] should_failslab+0xc2/0x120 [ 2386.442582][ T7507] __kmalloc_noprof+0xd2/0x510 [ 2386.442606][ T7507] ? d_absolute_path+0x136/0x1a0 [ 2386.442631][ T7507] tomoyo_encode2+0x100/0x3e0 [ 2386.442656][ T7507] tomoyo_encode+0x29/0x50 [ 2386.442676][ T7507] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2386.442705][ T7507] tomoyo_path_number_perm+0x245/0x580 [ 2386.442723][ T7507] ? tomoyo_path_number_perm+0x237/0x580 [ 2386.442743][ T7507] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2386.442763][ T7507] ? find_held_lock+0x2b/0x80 [ 2386.442810][ T7507] ? find_held_lock+0x2b/0x80 [ 2386.442831][ T7507] ? hook_file_ioctl_common+0x145/0x410 [ 2386.442861][ T7507] ? __fget_files+0x20e/0x3c0 [ 2386.442891][ T7507] security_file_ioctl+0x9b/0x240 [ 2386.442914][ T7507] __x64_sys_ioctl+0xb7/0x210 [ 2386.442938][ T7507] do_syscall_64+0xcd/0x4e0 [ 2386.442962][ T7507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2386.442979][ T7507] RIP: 0033:0x7fd1a478eec9 [ 2386.442993][ T7507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2386.443008][ T7507] RSP: 002b:00007fd1a56a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2386.443025][ T7507] RAX: ffffffffffffffda RBX: 00007fd1a49e5fa0 RCX: 00007fd1a478eec9 [ 2386.443036][ T7507] RDX: 00002000000000c0 RSI: 000000008028640c RDI: 0000000000000003 [ 2386.443047][ T7507] RBP: 00007fd1a56a9090 R08: 0000000000000000 R09: 0000000000000000 [ 2386.443057][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2386.443066][ T7507] R13: 00007fd1a49e6038 R14: 00007fd1a49e5fa0 R15: 00007ffcd929e078 [ 2386.443090][ T7507] [ 2386.443106][ T7507] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2387.115643][ T3763] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2387.269590][ T3763] usb 3-1: Using ep0 maxpacket: 8 [ 2387.278774][ T3763] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2387.297894][ T3763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2387.322963][ T3763] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2387.344716][ T3763] pvrusb2: ********** [ 2387.362276][ T3763] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2387.385481][ T3763] pvrusb2: Important functionality might not be entirely working. [ 2387.405768][ T3763] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2387.438513][ T3763] pvrusb2: ********** [ 2387.523542][ T2335] pvrusb2: Invalid write control endpoint [ 2387.565430][ T2335] pvrusb2: Invalid write control endpoint [ 2387.581911][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2387.600696][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2387.615698][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2387.663884][ T2335] pvrusb2: Device being rendered inoperable [ 2387.676618][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2387.692648][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 2387.708241][ T2335] pvrusb2: Attached sub-driver cx25840 [ 2387.719550][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2387.791665][ T7541] pvrusb2: Attempted to execute control transfer when device not ok [ 2387.964977][T24531] usb 3-1: USB disconnect, device number 78 [ 2387.980850][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2389.432578][ T30] audit: type=1400 audit(2624103.277:5207): avc: denied { bind } for pid=7548 comm="syz.1.9371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2389.783667][ T7557] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9372'. [ 2389.882610][ T7559] binder: BINDER_SET_CONTEXT_MGR already set [ 2389.917311][ T7559] binder: 7553:7559 ioctl 4018620d 200000004a80 returned -16 [ 2391.444715][ T7575] dlm: no locking on control device [ 2392.173208][ T7578] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9379'. [ 2392.490283][T24531] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2392.836111][T24531] usb 3-1: Using ep0 maxpacket: 8 [ 2392.849899][T24531] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2392.904888][T24531] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2393.030579][T24531] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2393.070360][T24531] pvrusb2: ********** [ 2393.074443][T24531] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2393.090607][T24531] pvrusb2: Important functionality might not be entirely working. [ 2393.190687][T24531] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2393.203025][T24531] pvrusb2: ********** [ 2393.258770][ T2335] pvrusb2: Invalid write control endpoint [ 2393.285553][ T2335] pvrusb2: Invalid write control endpoint [ 2393.291382][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2393.310297][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2393.318339][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2393.344743][ T2335] pvrusb2: Device being rendered inoperable [ 2393.369399][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2393.376587][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 2393.453545][ T2335] pvrusb2: Attached sub-driver cx25840 [ 2393.527970][ T7597] pvrusb2: Attempted to execute control transfer when device not ok [ 2393.712850][ T3763] usb 3-1: USB disconnect, device number 79 [ 2393.743717][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2393.754431][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2393.986555][ T7606] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 2394.429860][ T7606] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 2395.114963][ T7625] fuse: Unknown parameter 'user_id00000000000000000000' [ 2395.734350][ T7631] input input86: cannot allocate more than FF_MAX_EFFECTS effects [ 2396.291209][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9396'. [ 2397.080597][T16524] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2397.211170][ T1205] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2397.230815][T16524] usb 3-1: Using ep0 maxpacket: 8 [ 2397.261931][T16524] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2397.273617][T16524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2397.302996][T16524] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2397.325501][T16524] pvrusb2: ********** [ 2397.340854][T16524] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2397.360013][T16524] pvrusb2: Important functionality might not be entirely working. [ 2397.372887][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2397.375599][T16524] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2397.389338][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2397.394581][T16524] pvrusb2: ********** [ 2397.409059][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2397.421192][ T1205] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 2397.430322][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2397.450855][ T1205] usb 4-1: config 0 descriptor?? [ 2397.491860][ T1205] usb 4-1: bad CDC descriptors [ 2397.502063][ T2335] pvrusb2: Invalid write control endpoint [ 2397.583856][ T2335] pvrusb2: Invalid write control endpoint [ 2397.602343][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2397.615024][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2397.624543][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2397.636999][ T2335] pvrusb2: Device being rendered inoperable [ 2397.647145][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2397.664163][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 2397.673688][ T2335] pvrusb2: Attached sub-driver cx25840 [ 2397.679169][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2397.694923][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2397.794940][ T7670] pvrusb2: Attempted to execute control transfer when device not ok [ 2398.119605][ T2135] usb 3-1: USB disconnect, device number 80 [ 2399.004315][ T2135] usb 4-1: USB disconnect, device number 53 [ 2399.110330][ T7686] comedi comedi3: pcl726: I/O port conflict (0x5,16) [ 2400.020338][ T7694] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.9408'. [ 2400.452067][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9411'. [ 2401.181131][ T7706] FAULT_INJECTION: forcing a failure. [ 2401.181131][ T7706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2401.223718][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9412'. [ 2401.337617][ T7706] CPU: 0 UID: 0 PID: 7706 Comm: syz.2.9411 Not tainted syzkaller #0 PREEMPT(full) [ 2401.337641][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2401.337652][ T7706] Call Trace: [ 2401.337658][ T7706] [ 2401.337665][ T7706] dump_stack_lvl+0x16c/0x1f0 [ 2401.337690][ T7706] should_fail_ex+0x512/0x640 [ 2401.337712][ T7706] _copy_from_user+0x2e/0xd0 [ 2401.337734][ T7706] sctp_setsockopt+0x2045/0xb870 [ 2401.337769][ T7706] ? __pfx_sctp_setsockopt+0x10/0x10 [ 2401.337797][ T7706] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2401.337823][ T7706] ? __pfx_sctp_setsockopt+0x10/0x10 [ 2401.337847][ T7706] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2401.337874][ T7706] do_sock_setsockopt+0xf3/0x1d0 [ 2401.337901][ T7706] __sys_setsockopt+0x1a0/0x230 [ 2401.337922][ T7706] __x64_sys_setsockopt+0xbd/0x160 [ 2401.337940][ T7706] ? do_syscall_64+0x91/0x4e0 [ 2401.337959][ T7706] ? lockdep_hardirqs_on+0x7c/0x110 [ 2401.337978][ T7706] do_syscall_64+0xcd/0x4e0 [ 2401.337999][ T7706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2401.338015][ T7706] RIP: 0033:0x7f210478eec9 [ 2401.338029][ T7706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2401.338043][ T7706] RSP: 002b:00007f210563d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2401.338058][ T7706] RAX: ffffffffffffffda RBX: 00007f21049e6090 RCX: 00007f210478eec9 [ 2401.338069][ T7706] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000006 [ 2401.338078][ T7706] RBP: 00007f210563d090 R08: 000000000000009c R09: 0000000000000000 [ 2401.338087][ T7706] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 2401.338097][ T7706] R13: 00007f21049e6128 R14: 00007f21049e6090 R15: 00007fffadd1d3d8 [ 2401.338117][ T7706] [ 2404.098533][ T7723] syzkaller0: entered promiscuous mode [ 2404.126193][ T7723] syzkaller0: entered allmulticast mode [ 2404.745477][ T7737] netlink: 'syz.3.9420': attribute type 10 has an invalid length. [ 2405.106936][ T7744] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2405.730885][ T3763] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2405.777143][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.793198][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.007294][ T3763] usb 4-1: Using ep0 maxpacket: 8 [ 2406.063391][ T3763] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2406.108826][ T3763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2406.137001][ T3763] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2406.144200][ T3763] pvrusb2: ********** [ 2406.148222][ T3763] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2406.158446][ T3763] pvrusb2: Important functionality might not be entirely working. [ 2406.166563][ T3763] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2406.330167][ T3763] pvrusb2: ********** [ 2406.361726][ T2335] pvrusb2: Invalid write control endpoint [ 2406.614634][ T2335] pvrusb2: Invalid write control endpoint [ 2406.620770][ T1205] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2406.624173][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2406.758983][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2406.759100][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2406.759283][ T2335] pvrusb2: Device being rendered inoperable [ 2406.759526][ T7770] pvrusb2: Attempted to execute control transfer when device not ok [ 2406.760024][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2406.831370][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 2406.843392][ T2335] pvrusb2: Attached sub-driver cx25840 [ 2406.849648][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2406.860841][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2407.040470][T16524] usb 4-1: USB disconnect, device number 54 [ 2407.103912][ T1205] usb 3-1: Using ep0 maxpacket: 16 [ 2407.110543][ T1205] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 2407.119535][ T1205] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2407.266206][ T1205] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2407.438768][ T1205] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 2407.447026][ T1205] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2407.459392][ T1205] usb 3-1: config 0 has no interface number 0 [ 2407.465577][ T1205] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2407.481038][ T1205] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2407.502854][ T1205] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2407.525358][ T1205] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2407.584242][ T1205] usb 3-1: config 0 interface 125 has no altsetting 0 [ 2407.601117][ T1205] usb 3-1: config 0 interface 125 has no altsetting 2 [ 2407.831578][ T1205] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2407.848859][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2407.867460][ T1205] usb 3-1: Product: syz [ 2407.897063][ T1205] usb 3-1: Manufacturer: syz [ 2407.910629][ T1205] usb 3-1: SerialNumber: syz [ 2407.929155][ T1205] usb 3-1: config 0 descriptor?? [ 2407.997203][ T1205] usb 3-1: selecting invalid altsetting 2 [ 2408.026903][ T7783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9434'. [ 2408.210650][ C0] usb 3-1: async_complete: urb error -71 [ 2408.216361][ C0] usb 3-1: async_complete: urb error -71 [ 2408.223994][ T1205] get_1284_register: usb error -71 [ 2408.229152][ T1205] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 2408.239655][ T1205] usb 3-1: USB disconnect, device number 81 [ 2408.278427][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9436'. [ 2408.308635][ T7786] : entered promiscuous mode [ 2408.316989][ T30] audit: type=1400 audit(2408.203:5208): avc: denied { ioctl } for pid=7790 comm="syz.3.9437" path="socket:[192238]" dev="sockfs" ino=192238 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2408.390433][ T30] audit: type=1400 audit(2408.203:5209): avc: denied { write } for pid=7790 comm="syz.3.9437" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 2408.432154][ T30] audit: type=1400 audit(2408.213:5210): avc: denied { write } for pid=7790 comm="syz.3.9437" path="socket:[192239]" dev="sockfs" ino=192239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 2408.600789][ T1205] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2408.800824][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 2408.919981][ T1205] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2408.928804][ T1205] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2408.947776][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.972847][ T1205] usb 3-1: Product: syz [ 2408.978048][ T1205] usb 3-1: Manufacturer: syz [ 2408.988164][ T1205] usb 3-1: SerialNumber: syz [ 2409.078267][ T1205] usb 3-1: config 0 descriptor?? [ 2409.288516][ T7805] netlink: 'syz.2.9438': attribute type 1 has an invalid length. [ 2409.304305][ T7805] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9438'. [ 2409.330757][ T7805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9438'. [ 2409.845032][ T1205] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 2409.853904][ T1205] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 2410.063332][ T1205] usb 3-1: USB disconnect, device number 82 [ 2412.184340][ T30] audit: type=1400 audit(526700.084:5211): avc: denied { mounton } for pid=7818 comm="syz.3.9447" path="/214/file0/file0" dev="afs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 2412.206449][ C0] vkms_vblank_simulate: vblank timer overrun [ 2412.213430][ T7826] 9pnet_fd: Insufficient options for proto=fd [ 2412.286786][ T7830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7830 comm=syz.2.9450 [ 2412.629804][ T30] audit: type=1400 audit(526700.504:5212): avc: denied { append } for pid=7834 comm="syz.3.9452" name="loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2415.209156][ T5900] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2415.373729][ T5900] usb 3-1: config 0 has no interfaces? [ 2415.418364][ T2199] Bluetooth: hci1: unexpected event for opcode 0x040d [ 2415.421504][ T5900] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2415.421529][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2415.421548][ T5900] usb 3-1: Product: syz [ 2415.421563][ T5900] usb 3-1: Manufacturer: syz [ 2415.421578][ T5900] usb 3-1: SerialNumber: syz [ 2415.423736][ T5900] usb 3-1: config 0 descriptor?? [ 2415.754197][ T30] audit: type=1400 audit(526703.435:5213): avc: denied { write } for pid=7884 comm="syz.1.9466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2415.997879][ T7881] netlink: 'syz.8.9464': attribute type 1 has an invalid length. [ 2415.997896][ T7881] netlink: 224 bytes leftover after parsing attributes in process `syz.8.9464'. [ 2416.355784][ T7892] FAULT_INJECTION: forcing a failure. [ 2416.355784][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 2416.355852][ T7892] CPU: 1 UID: 0 PID: 7892 Comm: syz.3.9468 Not tainted syzkaller #0 PREEMPT(full) [ 2416.355873][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2416.355883][ T7892] Call Trace: [ 2416.355889][ T7892] [ 2416.355897][ T7892] dump_stack_lvl+0x16c/0x1f0 [ 2416.355923][ T7892] should_fail_ex+0x512/0x640 [ 2416.355949][ T7892] should_failslab+0xc2/0x120 [ 2416.355965][ T7892] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2416.355991][ T7892] ? dst_alloc+0x99/0x1a0 [ 2416.356012][ T7892] dst_alloc+0x99/0x1a0 [ 2416.356031][ T7892] rt_dst_alloc+0x35/0x3a0 [ 2416.356057][ T7892] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 2416.356082][ T7892] ip_route_output_key_hash+0x137/0x2e0 [ 2416.356100][ T7892] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 2416.356125][ T7892] ? find_held_lock+0x2b/0x80 [ 2416.356149][ T7892] ip_route_output_flow+0x27/0x150 [ 2416.356168][ T7892] raw_sendmsg+0xd5b/0x37e0 [ 2416.356194][ T7892] ? __pfx_raw_sendmsg+0x10/0x10 [ 2416.356224][ T7892] ? security_socket_sendmsg+0x21c/0x240 [ 2416.356247][ T7892] ? irqentry_exit+0x3b/0x90 [ 2416.356262][ T7892] ? lockdep_hardirqs_on+0x7c/0x110 [ 2416.356283][ T7892] ? inet_sendmsg+0x4e/0x140 [ 2416.356296][ T7892] ? __pfx_raw_sendmsg+0x10/0x10 [ 2416.356315][ T7892] inet_sendmsg+0x11c/0x140 [ 2416.356329][ T7892] ____sys_sendmsg+0x973/0xc70 [ 2416.356350][ T7892] ? copy_msghdr_from_user+0x10a/0x160 [ 2416.356366][ T7892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2416.356395][ T7892] ___sys_sendmsg+0x134/0x1d0 [ 2416.356422][ T7892] ? __pfx____sys_sendmsg+0x10/0x10 [ 2416.356446][ T7892] ? find_held_lock+0x2b/0x80 [ 2416.356476][ T7892] __sys_sendmmsg+0x200/0x420 [ 2416.356494][ T7892] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2416.356525][ T7892] ? fput+0x9b/0xd0 [ 2416.356550][ T7892] ? xfd_validate_state+0x61/0x180 [ 2416.356568][ T7892] __x64_sys_sendmmsg+0x9c/0x100 [ 2416.356583][ T7892] ? lockdep_hardirqs_on+0x7c/0x110 [ 2416.356598][ T7892] do_syscall_64+0xcd/0x4e0 [ 2416.356616][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2416.356629][ T7892] RIP: 0033:0x7f9f3018eec9 [ 2416.356641][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2416.356654][ T7892] RSP: 002b:00007f9f31058038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2416.356667][ T7892] RAX: ffffffffffffffda RBX: 00007f9f303e5fa0 RCX: 00007f9f3018eec9 [ 2416.356676][ T7892] RDX: 0000000000000002 RSI: 0000200000001640 RDI: 0000000000000003 [ 2416.356685][ T7892] RBP: 00007f9f31058090 R08: 0000000000000000 R09: 0000000000000000 [ 2416.356692][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2416.356700][ T7892] R13: 00007f9f303e6038 R14: 00007f9f303e5fa0 R15: 00007ffec18b58e8 [ 2416.356719][ T7892] [ 2416.525152][ T7895] veth0_vlan: left promiscuous mode [ 2416.525662][ T7895] veth0_vlan: entered promiscuous mode [ 2416.651886][T16524] usb 3-1: USB disconnect, device number 83 [ 2416.755769][ T30] audit: type=1400 audit(526704.656:5214): avc: denied { execute } for pid=7896 comm="syz.3.9469" path="/dev/nullb0" dev="devtmpfs" ino=4033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 2416.756002][ T30] audit: type=1800 audit(526704.656:5215): pid=7899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.9469" name="nullb0" dev="devtmpfs" ino=4033 res=0 errno=0 [ 2417.330996][ T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2417.478363][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 2417.480284][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2417.480309][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2417.480332][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2417.480354][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2417.480389][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2417.480408][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2417.968482][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 2417.987255][ T24] usbtmc 2-1:16.0: can't read capabilities [ 2418.173504][ T24] usb 2-1: USB disconnect, device number 79 [ 2418.325647][ T7922] netlink: 96 bytes leftover after parsing attributes in process `syz.8.9477'. [ 2418.433279][ T7922] binder: BINDER_SET_CONTEXT_MGR already set [ 2418.439467][ T7922] binder: 7919:7922 ioctl 4018620d 200000004a80 returned -16 [ 2418.889089][ T7927] SELinux: failed to load policy [ 2419.292251][ T7936] netlink: 'syz.3.9481': attribute type 2 has an invalid length. [ 2420.364274][ T7946] bridge3: entered allmulticast mode [ 2420.881498][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9486'. [ 2420.909955][ T7954] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2421.150099][ T7964] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.9489'. [ 2421.790795][T16524] libceph: connect (1)[c::]:6789 error -101 [ 2421.799407][T16524] libceph: mon0 (1)[c::]:6789 connect error [ 2421.997520][T16524] libceph: connect (1)[c::]:6789 error -101 [ 2422.083687][T16524] libceph: mon0 (1)[c::]:6789 connect error [ 2422.122309][ T7968] ceph: No mds server is up or the cluster is laggy [ 2422.426878][ T1205] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 2422.836678][ T1205] usb 3-1: device descriptor read/64, error -71 [ 2423.138213][ T1205] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 2423.286482][ T1205] usb 3-1: device descriptor read/64, error -71 [ 2423.510733][ T1205] usb usb3-port1: attempt power cycle [ 2423.906322][ T1205] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 2423.938350][ T1205] usb 3-1: device descriptor read/8, error -71 [ 2424.176253][ T1205] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 2424.206121][T32541] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2424.274792][ T1205] usb 3-1: device descriptor read/8, error -71 [ 2424.386368][ T1205] usb usb3-port1: unable to enumerate USB device [ 2424.458018][T32541] usb 4-1: config index 0 descriptor too short (expected 25970, got 45) [ 2424.476669][T32541] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2424.509507][T32541] usb 4-1: config 0 has no interfaces? [ 2424.525769][T32541] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 2424.545043][T32541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2424.565478][T32541] usb 4-1: config 0 descriptor?? [ 2424.845725][ T5873] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2425.035661][ T5873] usb 9-1: Using ep0 maxpacket: 8 [ 2425.041869][ T5873] usb 9-1: config 0 has an invalid interface number: 168 but max is 0 [ 2425.065999][ T5873] usb 9-1: config 0 has no interface number 0 [ 2425.086517][ T5873] usb 9-1: config 0 interface 168 has no altsetting 0 [ 2425.113587][ T5873] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2425.123178][T32541] usb 4-1: USB disconnect, device number 55 [ 2425.130981][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2425.151756][ T5873] usb 9-1: config 0 descriptor?? [ 2426.281247][ T8028] binder: BINDER_SET_CONTEXT_MGR already set [ 2426.287465][ T8028] binder: 8027:8028 ioctl 4018620d 200000004a80 returned -16 [ 2427.846045][T32541] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2428.052153][T32541] usb 2-1: Using ep0 maxpacket: 16 [ 2428.066481][T32541] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2428.096397][T32541] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2428.184963][T32541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2428.316876][T32541] usb 2-1: config 0 descriptor?? [ 2428.691564][ T5873] usb 9-1: USB disconnect, device number 23 [ 2428.742305][T32541] hid (null): global environment stack underflow [ 2428.768600][T32541] hid (null): global environment stack underflow [ 2428.798992][T32541] hid (null): report_id 0 is invalid [ 2428.804549][T32541] hid (null): global environment stack underflow [ 2428.821183][T32541] hid (null): report_id 0 is invalid [ 2428.857982][T32541] hid (null): report_id 0 is invalid [ 2428.863317][T32541] hid (null): global environment stack underflow [ 2428.871677][T32541] hid (null): global environment stack underflow [ 2428.878761][T32541] hid (null): report_id 0 is invalid [ 2428.888928][T32541] hid (null): global environment stack underflow [ 2428.895432][T32541] hid (null): unknown global tag 0xc [ 2428.901752][T32541] hid (null): report_id 25068 is invalid [ 2428.909968][T32541] hid (null): report_id 0 is invalid [ 2428.915300][T32541] hid (null): global environment stack overflow [ 2428.926402][T32541] hid (null): unknown global tag 0xc [ 2428.931732][T32541] hid (null): unknown global tag 0x58 [ 2428.947223][T32541] usb 2-1: USB disconnect, device number 80 [ 2428.959793][ T8059] binder: 8054:8059 ioctl c0306201 2000000003c0 returned -14 [ 2429.276245][ T30] audit: type=1400 audit(526717.173:5216): avc: denied { getopt } for pid=8062 comm="syz.3.9518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2429.331131][ T30] audit: type=1400 audit(526717.183:5217): avc: denied { setattr } for pid=8062 comm="syz.3.9518" name="/" dev="configfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2429.702671][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9521'. [ 2429.736366][ T8075] trusted_key: encrypted_key: insufficient parameters specified [ 2429.865938][T32541] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 2429.884597][ T8082] netlink: 'syz.1.9525': attribute type 1 has an invalid length. [ 2429.974738][ T8082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2430.054529][ T8082] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 2430.070339][T32541] usb 4-1: config 3 has an invalid descriptor of length 241, skipping remainder of the config [ 2430.082753][T32541] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 2 [ 2430.096993][T32541] usb 4-1: string descriptor 0 read error: -22 [ 2430.100813][ T8082] vlan2: entered allmulticast mode [ 2430.103323][T32541] usb 4-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=11.9b [ 2430.126141][T32541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2430.136438][ T8082] veth1: entered allmulticast mode [ 2430.142740][ T8082] veth1: entered promiscuous mode [ 2430.150721][ T8082] veth1: left promiscuous mode [ 2430.160711][ T8082] bond1: (slave vlan2): making interface the new active one [ 2430.181294][ T8082] veth1: entered promiscuous mode [ 2430.189392][ T8082] vlan2: entered promiscuous mode [ 2430.194984][ T8082] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 2430.219001][ T8079] pim6reg: entered allmulticast mode [ 2430.349436][ T5900] usb 4-1: USB disconnect, device number 56 [ 2431.056966][ T30] audit: type=1400 audit(526718.953:5218): avc: denied { bind } for pid=8102 comm="syz.2.9529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2432.475194][ T8131] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9536'. [ 2432.529984][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9536'. [ 2432.673666][ T8131] hsr_slave_1 (unregistering): left promiscuous mode [ 2432.749117][ T8079] pim6reg: left allmulticast mode [ 2433.238217][ T30] audit: type=1400 audit(526721.143:5219): avc: denied { create } for pid=8145 comm="syz.8.9542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2433.257794][ T8146] delete_channel: no stack [ 2433.283035][ T8151] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9543'. [ 2433.494130][ T8151] FAULT_INJECTION: forcing a failure. [ 2433.494130][ T8151] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.517045][ T30] audit: type=1400 audit(526721.423:5220): avc: denied { read } for pid=8145 comm="syz.8.9542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2433.549168][ T8151] CPU: 0 UID: 0 PID: 8151 Comm: syz.1.9543 Not tainted syzkaller #0 PREEMPT(full) [ 2433.549190][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2433.549200][ T8151] Call Trace: [ 2433.549206][ T8151] [ 2433.549219][ T8151] dump_stack_lvl+0x16c/0x1f0 [ 2433.549246][ T8151] should_fail_ex+0x512/0x640 [ 2433.549279][ T8151] should_failslab+0xc2/0x120 [ 2433.549297][ T8151] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2433.549323][ T8151] ? skb_clone+0x190/0x3f0 [ 2433.549348][ T8151] skb_clone+0x190/0x3f0 [ 2433.549369][ T8151] netlink_deliver_tap+0xabd/0xd30 [ 2433.549397][ T8151] netlink_unicast+0x71f/0x870 [ 2433.549424][ T8151] ? __pfx_netlink_unicast+0x10/0x10 [ 2433.549446][ T8151] ? genl_rcv_msg+0x4bb/0x800 [ 2433.549478][ T8151] netlink_ack+0x696/0xb80 [ 2433.549508][ T8151] netlink_rcv_skb+0x332/0x420 [ 2433.549528][ T8151] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2433.549553][ T8151] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2433.549586][ T8151] ? netlink_deliver_tap+0x1ae/0xd30 [ 2433.549611][ T8151] genl_rcv+0x28/0x40 [ 2433.549633][ T8151] netlink_unicast+0x5a7/0x870 [ 2433.549658][ T8151] ? __pfx_netlink_unicast+0x10/0x10 [ 2433.549681][ T8151] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2433.549710][ T8151] netlink_sendmsg+0x8d1/0xdd0 [ 2433.549737][ T8151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2433.549768][ T8151] ____sys_sendmsg+0xa98/0xc70 [ 2433.549795][ T8151] ? copy_msghdr_from_user+0x10a/0x160 [ 2433.549815][ T8151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2433.549851][ T8151] ___sys_sendmsg+0x134/0x1d0 [ 2433.549873][ T8151] ? __pfx____sys_sendmsg+0x10/0x10 [ 2433.549924][ T8151] __sys_sendmsg+0x16d/0x220 [ 2433.549946][ T8151] ? __pfx___sys_sendmsg+0x10/0x10 [ 2433.549983][ T8151] do_syscall_64+0xcd/0x4e0 [ 2433.550006][ T8151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2433.550023][ T8151] RIP: 0033:0x7f581638eec9 [ 2433.550037][ T8151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2433.550053][ T8151] RSP: 002b:00007f5817271038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2433.550070][ T8151] RAX: ffffffffffffffda RBX: 00007f58165e5fa0 RCX: 00007f581638eec9 [ 2433.550081][ T8151] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 2433.550091][ T8151] RBP: 00007f5817271090 R08: 0000000000000000 R09: 0000000000000000 [ 2433.550101][ T8151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2433.550111][ T8151] R13: 00007f58165e6038 R14: 00007f58165e5fa0 R15: 00007ffc80319708 [ 2433.550135][ T8151] [ 2434.508610][ T30] audit: type=1400 audit(526722.413:5221): avc: denied { link } for pid=8161 comm="syz.8.9547" name="file1" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2434.597405][ T30] audit: type=1400 audit(526722.443:5222): avc: denied { mounton } for pid=8161 comm="syz.8.9547" path="/126/file0/file0" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2434.766389][ T8164] binder: 8163:8164 ioctl c0306201 0 returned -14 [ 2434.833995][ T8169] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2435.020110][ T30] audit: type=1400 audit(526722.923:5223): avc: denied { create } for pid=8172 comm="syz.4.9552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 2435.143571][ T8184] bridge0: port 3(syz_tun) entered blocking state [ 2435.150728][ T8184] bridge0: port 3(syz_tun) entered disabled state [ 2435.157544][ T8184] syz_tun: entered allmulticast mode [ 2435.163621][ T8184] syz_tun: entered promiscuous mode [ 2435.173038][ T8184] bridge0: port 3(syz_tun) entered blocking state [ 2435.179509][ T8184] bridge0: port 3(syz_tun) entered forwarding state [ 2435.253192][ T5900] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2435.345898][T32541] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2435.365637][ T8188] bridge0: port 1(bridge_slave_0) entered disabled state [ 2435.379438][ T8188] bridge0: port 1(bridge_slave_0) entered blocking state [ 2435.386607][ T8188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2435.406029][ T5900] usb 9-1: Using ep0 maxpacket: 32 [ 2435.427855][ T5900] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 2435.437552][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2435.459359][ T5900] usb 9-1: config 0 descriptor?? [ 2435.468382][ T5900] as10x_usb: device has been detected [ 2435.474854][ T5900] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 2435.512621][ T5900] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 2435.523048][T32541] usb 3-1: Using ep0 maxpacket: 16 [ 2435.565566][T32541] usb 3-1: config 0 has no interfaces? [ 2435.646615][T32541] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2435.669471][T32541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2435.678533][T32541] usb 3-1: Product: syz [ 2435.683337][T32541] usb 3-1: Manufacturer: syz [ 2435.713966][ T5900] as10x_usb: error during firmware upload part1 [ 2435.720354][T32541] usb 3-1: SerialNumber: syz [ 2435.726090][ T5900] Registered device nBox DVB-T Dongle [ 2435.730295][T32541] usb 3-1: config 0 descriptor?? [ 2435.967777][ T2139] usb 3-1: USB disconnect, device number 88 [ 2435.975794][ T30] audit: type=1400 audit(526723.863:5224): avc: denied { search } for pid=8181 comm="syz.2.9555" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 2436.075317][T32541] usb 9-1: USB disconnect, device number 24 [ 2436.098366][ T8214] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9567'. [ 2436.100557][T32541] Unregistered device nBox DVB-T Dongle [ 2436.112619][ T8214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9567'. [ 2436.122120][T32541] as10x_usb: device has been disconnected [ 2436.145780][ T8214] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9567'. [ 2436.166730][ T8214] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9567'. [ 2437.284946][T25111] IPVS: starting estimator thread 0... [ 2438.326052][ T8244] IPVS: using max 54 ests per chain, 129600 per kthread [ 2439.266692][T28923] Bluetooth: hci2: command 0x0401 tx timeout [ 2439.351341][ T30] audit: type=1400 audit(526727.253:5225): avc: denied { read } for pid=8257 comm="syz.4.9585" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2439.382770][ T8263] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2439.422712][ T8263] block device autoloading is deprecated and will be removed. [ 2439.471906][ T30] audit: type=1400 audit(526727.253:5226): avc: denied { open } for pid=8257 comm="syz.4.9585" path="/227/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2439.740244][ T8267] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2441.408555][ T2199] Bluetooth: hci2: command 0x0401 tx timeout [ 2442.067399][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9600'. [ 2442.685708][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9603'. [ 2442.895987][T32541] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2443.106836][T32541] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2443.139543][ T8315] input: syz0 as /devices/virtual/input/input88 [ 2443.148164][T32541] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2443.217158][T32541] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2443.240766][T32541] usb 3-1: config 1 has no interface number 1 [ 2443.255541][T32541] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2443.295497][T32541] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2443.355028][T32541] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2443.385134][T32541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2443.415545][T32541] usb 3-1: Product: syz [ 2443.419958][T32541] usb 3-1: Manufacturer: syz [ 2443.445233][T32541] usb 3-1: SerialNumber: syz [ 2443.570006][ T8321] qnx6: unable to read the first superblock [ 2443.606127][ T8321] ------------[ cut here ]------------ [ 2443.611637][ T8321] WARNING: CPU: 0 PID: 8321 at fs/buffer.c:1125 __getblk_slow+0x4cc/0x560 [ 2443.620340][ T8321] Modules linked in: [ 2443.624591][ T8321] CPU: 0 UID: 0 PID: 8321 Comm: syz.3.9610 Not tainted syzkaller #0 PREEMPT(full) [ 2443.634049][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2443.644463][ T8321] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 2443.649881][ T8321] Code: 80 8b 48 89 df e8 64 94 bb ff 90 0f 0b e8 bc d6 71 ff 48 c7 c6 60 86 80 8b 48 89 df e8 4d 94 bb ff 90 0f 0b e8 a5 d6 71 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 c0 87 80 8b 31 db e8 3d 77 50 [ 2443.669700][ T8321] RSP: 0018:ffffc9000412fa88 EFLAGS: 00010287 [ 2443.675856][ T8321] RAX: 0000000000004dd2 RBX: 0000000000000200 RCX: ffffc9000cad9000 [ 2443.683925][ T8321] RDX: 0000000000080000 RSI: ffffffff8249426b RDI: 0000000000000005 [ 2443.691903][ T8321] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 2443.700118][ T8321] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888148c18b80 [ 2443.708096][ T8321] R13: 0000000000000000 R14: 0000000000000200 R15: ffff888148c18b80 [ 2443.716065][ T8321] FS: 00007f9f310586c0(0000) GS:ffff888124e71000(0000) knlGS:0000000000000000 [ 2443.724983][ T8321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2443.731725][ T8321] CR2: 0000200000004a00 CR3: 00000000669bf000 CR4: 00000000003526f0 [ 2443.739709][ T8321] Call Trace: [ 2443.742978][ T8321] [ 2443.745908][ T8321] ? __pfx___might_resched+0x10/0x10 [ 2443.751192][ T8321] bdev_getblk+0xd4/0xe0 [ 2443.755423][ T8321] __bread_gfp+0x86/0x3c0 [ 2443.759784][ T8321] qnx6_check_first_superblock+0xab/0x2d0 [ 2443.765701][ T8321] qnx6_fill_super+0xd8d/0x1520 [ 2443.770540][ T8321] ? sb_set_blocksize+0x176/0x1d0 [ 2443.775570][ T8321] ? setup_bdev_super+0x369/0x730 [ 2443.780586][ T8321] get_tree_bdev_flags+0x389/0x620 [ 2443.785844][ T8321] ? __pfx_qnx6_fill_super+0x10/0x10 [ 2443.791136][ T8321] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 2443.796963][ T8321] ? bpf_lsm_capable+0x9/0x10 [ 2443.801635][ T8321] ? security_capable+0x7e/0x260 [ 2443.806575][ T8321] vfs_get_tree+0x8b/0x340 [ 2443.810982][ T8321] path_mount+0x1516/0x2060 [ 2443.815511][ T8321] ? __pfx_path_mount+0x10/0x10 [ 2443.820362][ T8321] ? kmem_cache_free+0x2d1/0x4d0 [ 2443.825289][ T8321] ? putname+0x154/0x1a0 [ 2443.829699][ T8321] ? putname+0x154/0x1a0 [ 2443.833928][ T8321] ? __x64_sys_mount+0x28d/0x310 [ 2443.838894][ T8321] __x64_sys_mount+0x28d/0x310 [ 2443.843644][ T8321] ? __pfx___x64_sys_mount+0x10/0x10 [ 2443.848953][ T8321] do_syscall_64+0xcd/0x4e0 [ 2443.853442][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2443.859512][ T8321] RIP: 0033:0x7f9f3018eec9 [ 2443.863902][ T8321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2443.883517][ T8321] RSP: 002b:00007f9f31058038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2443.892157][ T8321] RAX: ffffffffffffffda RBX: 00007f9f303e5fa0 RCX: 00007f9f3018eec9 [ 2443.900137][ T8321] RDX: 0000200000000100 RSI: 0000200000004a00 RDI: 00002000000000c0 [ 2443.908109][ T8321] RBP: 00007f9f30211f91 R08: 0000000000000000 R09: 0000000000000000 [ 2443.916250][ T8321] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 2443.924199][ T8321] R13: 00007f9f303e6038 R14: 00007f9f303e5fa0 R15: 00007ffec18b58e8 [ 2443.932187][ T8321] [ 2443.935185][ T8321] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2443.942436][ T8321] CPU: 0 UID: 0 PID: 8321 Comm: syz.3.9610 Not tainted syzkaller #0 PREEMPT(full) [ 2443.951698][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2443.961726][ T8321] Call Trace: [ 2443.964982][ T8321] [ 2443.967900][ T8321] dump_stack_lvl+0x3d/0x1f0 [ 2443.972471][ T8321] vpanic+0x6e8/0x7a0 [ 2443.976425][ T8321] ? __pfx_vpanic+0x10/0x10 [ 2443.980902][ T8321] ? __getblk_slow+0x4cc/0x560 [ 2443.985641][ T8321] panic+0xca/0xd0 [ 2443.989336][ T8321] ? __pfx_panic+0x10/0x10 [ 2443.993729][ T8321] check_panic_on_warn+0xab/0xb0 [ 2443.998641][ T8321] __warn+0xf6/0x3c0 [ 2444.002507][ T8321] ? __getblk_slow+0x4cc/0x560 [ 2444.007257][ T8321] report_bug+0x3c3/0x580 [ 2444.011560][ T8321] ? __getblk_slow+0x4cc/0x560 [ 2444.016298][ T8321] handle_bug+0x184/0x210 [ 2444.020604][ T8321] exc_invalid_op+0x17/0x50 [ 2444.025092][ T8321] asm_exc_invalid_op+0x1a/0x20 [ 2444.029924][ T8321] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 2444.035284][ T8321] Code: 80 8b 48 89 df e8 64 94 bb ff 90 0f 0b e8 bc d6 71 ff 48 c7 c6 60 86 80 8b 48 89 df e8 4d 94 bb ff 90 0f 0b e8 a5 d6 71 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 c0 87 80 8b 31 db e8 3d 77 50 [ 2444.054862][ T8321] RSP: 0018:ffffc9000412fa88 EFLAGS: 00010287 [ 2444.060902][ T8321] RAX: 0000000000004dd2 RBX: 0000000000000200 RCX: ffffc9000cad9000 [ 2444.068845][ T8321] RDX: 0000000000080000 RSI: ffffffff8249426b RDI: 0000000000000005 [ 2444.076787][ T8321] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 2444.084731][ T8321] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888148c18b80 [ 2444.092672][ T8321] R13: 0000000000000000 R14: 0000000000000200 R15: ffff888148c18b80 [ 2444.100620][ T8321] ? __getblk_slow+0x4cb/0x560 [ 2444.105361][ T8321] ? __getblk_slow+0x4cb/0x560 [ 2444.110103][ T8321] ? __pfx___might_resched+0x10/0x10 [ 2444.115380][ T8321] bdev_getblk+0xd4/0xe0 [ 2444.119604][ T8321] __bread_gfp+0x86/0x3c0 [ 2444.123909][ T8321] qnx6_check_first_superblock+0xab/0x2d0 [ 2444.129608][ T8321] qnx6_fill_super+0xd8d/0x1520 [ 2444.134432][ T8321] ? sb_set_blocksize+0x176/0x1d0 [ 2444.139445][ T8321] ? setup_bdev_super+0x369/0x730 [ 2444.144444][ T8321] get_tree_bdev_flags+0x389/0x620 [ 2444.149531][ T8321] ? __pfx_qnx6_fill_super+0x10/0x10 [ 2444.154792][ T8321] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 2444.160419][ T8321] ? bpf_lsm_capable+0x9/0x10 [ 2444.165071][ T8321] ? security_capable+0x7e/0x260 [ 2444.169986][ T8321] vfs_get_tree+0x8b/0x340 [ 2444.174398][ T8321] path_mount+0x1516/0x2060 [ 2444.178877][ T8321] ? __pfx_path_mount+0x10/0x10 [ 2444.183700][ T8321] ? kmem_cache_free+0x2d1/0x4d0 [ 2444.188613][ T8321] ? putname+0x154/0x1a0 [ 2444.192831][ T8321] ? putname+0x154/0x1a0 [ 2444.197048][ T8321] ? __x64_sys_mount+0x28d/0x310 [ 2444.201955][ T8321] __x64_sys_mount+0x28d/0x310 [ 2444.206704][ T8321] ? __pfx___x64_sys_mount+0x10/0x10 [ 2444.211964][ T8321] do_syscall_64+0xcd/0x4e0 [ 2444.216444][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2444.222309][ T8321] RIP: 0033:0x7f9f3018eec9 [ 2444.226708][ T8321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2444.246285][ T8321] RSP: 002b:00007f9f31058038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2444.254667][ T8321] RAX: ffffffffffffffda RBX: 00007f9f303e5fa0 RCX: 00007f9f3018eec9 [ 2444.262609][ T8321] RDX: 0000200000000100 RSI: 0000200000004a00 RDI: 00002000000000c0 [ 2444.270551][ T8321] RBP: 00007f9f30211f91 R08: 0000000000000000 R09: 0000000000000000 [ 2444.278493][ T8321] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 2444.286443][ T8321] R13: 00007f9f303e6038 R14: 00007f9f303e5fa0 R15: 00007ffec18b58e8 [ 2444.294411][ T8321] [ 2444.297601][ T8321] Kernel Offset: disabled [ 2444.301900][ T8321] Rebooting in 86400 seconds..