last executing test programs: 9.681988473s ago: executing program 2 (id=872): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_CHANINFO(r4, 0x80306403, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2, 0xffe4}}, 0x2e) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0xffffff27, @empty}, 0x1c) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000340)={r8, 0x0, 0x0}, 0x20) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'rr\x00', 0x1, 0x4, 0x8}, 0x2c) r10 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) 8.509301887s ago: executing program 2 (id=874): r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000140)='\x00') close_range(r0, 0xffffffffffffffff, 0x0) 8.085880927s ago: executing program 4 (id=877): r0 = semget$private(0x0, 0x7, 0x191) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0xe8c7, 0x1000}], 0x1) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000080)=0x4) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xa, 0x58, 0x5d, 0x20, 0x40a, 0x2, 0x518f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x8, 0x10, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xfb, 0x52, 0x99}}]}}]}}, 0x0) 6.546117524s ago: executing program 2 (id=882): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x4, 0xb3, 0xe}, {0x9, 0x5, 0x80, 0x2, 0x0, 0x3, 0x3, 0x4}, {0x9, 0x5, 0xb, 0x3, 0x10, 0x9, 0x7, 0x2}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x20, 0x6, 0x53, {0x53, 0xe, "2a2fcdf8b0690dde9b4cb0459160a6ede92d8e0c4931bd73465b6becf7e997be9ed8504ef5d616ae05acb3b05c86ce34db328688478fd67042997127a01efdcb3703ae1b35cfd01248ff2231f387419799"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x40, 0x0, 0x9, "4f34454506dde01a74"}, &(0x7f00000004c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000280)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 5.134798741s ago: executing program 1 (id=890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) 5.070092393s ago: executing program 1 (id=892): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="71716f54612c00803baa9c610c7f68b638577f57a701e706039af2706d59464156b2748eff8f4274728f7ff46a158f479ef6a0159241730f28da502080426b709741c2da35f536a7d705a6d7f2333abd05848a6eeb692a330d2a49961f7c"]) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$igmp6(0xa, 0x3, 0x2) socket(0x6, 0x3, 0x8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 4.949907422s ago: executing program 4 (id=893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) (fail_nth: 1) 4.632381276s ago: executing program 4 (id=895): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) iopl(0x3) r4 = syz_open_dev$audion(0x0, 0x589, 0x100) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x3c) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000340)=0xfffffffffffff697, 0x6}], 0x1, 0x0, 0x0, 0x1) openat$comedi(0xffffffffffffff9c, 0x0, 0x108c2, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r5, 0x5, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7}, @device_b, @broadcast, @random="d0291dc581e9", {0x8, 0x9}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x3, 0x0, 0x2}}, @void, @val={0x1, 0xfffffe00}, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x2, 0x0, {0x5, 0x1ff1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x2, 0x2}}, @val={0x72, 0x6}, [{0xdd, 0x46, "d11954aea0b8bc708b033f4cfe1b613b6f2e8748ba5b3d7450bf3e514ff28cadff31894d33a26f0c4ff9fec31121a263d0981db612f6db6a85f7b06279a61ada61ce5483a9c5"}, {0xdd, 0xa, "3c8295fec149cec496f3"}]}, 0x96) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x36) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.009084175s ago: executing program 1 (id=898): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f00000003c0)=""/91) listen(r4, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xe0b, 0xfeffbffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0xe, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x95, 0x6, @local}, 0x14) 3.963198801s ago: executing program 3 (id=899): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4c884}, 0x4080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000010c0), 0xfffffffffffffffd, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2000, @rand_addr=0x64010102}, 0x10) listen(r3, 0x8) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f0000000200)={0x18, 0x2, {0x3, @loopback}}, 0x1e) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x4044000, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000400), 0x0, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000001040)={0x0, 0x6}, 0x8) 3.728791328s ago: executing program 3 (id=901): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x3a8ba000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3ff, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000066c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [], 0xa, "3efc45969f1264a502599d70e1f591024543ca2fb8d38b75e387a11ada4902b1f47e4476d4fd67585bd87ff2f96ed5eb3de89bcb0f1936c11cc130cc4f4f187889812ca7466e088c3eab3e42dcde875a5f9142b04853482a7c551fbe664e186c130b3a2abcd210ff094d766138ae6b42cfcf3f0f62afca628e4977f9c41ac5c05999e8940386422895365e4e6dd12dc51e1c53"}, 0x1009d) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000200)=0x8) readlink(0x0, 0x0, 0x0) 3.278815918s ago: executing program 2 (id=902): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.083955529s ago: executing program 1 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000091}, 0x8040) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x80) (fail_nth: 10) 2.998262454s ago: executing program 1 (id=904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.960528723s ago: executing program 1 (id=905): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f00"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000c80)=ANY=[], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.65845566s ago: executing program 0 (id=907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x100000001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000000)=0x401) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}]}, 0x30}}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r3) 1.993973076s ago: executing program 3 (id=908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff1b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x8040) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) 1.790032061s ago: executing program 0 (id=909): r0 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xfffc, 0x1, @mcast1, 0xffff}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpu.idle\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 1.633668365s ago: executing program 0 (id=910): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000001dc0)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r3, r4, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000008e80)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2990a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba30e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c437ce831b209f3337979f6e0c46d8bf272a3ac6076c7940f905536167d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fef8b213b26794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81b541514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee5524acb456ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf48923289162544db8fb29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9a73bddb1d40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f75d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf63d2bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555ca96ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014ecf7dc94ab97061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11db3dd6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadda045c57d1c864cbaabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb92e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac997c843e647bebeddc33eeb70201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219fa9ca37955e3c25fd5872172ed2f5651d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27e2379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36bdb47d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e34595820cedd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc39730f1f02107477c215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e621cd12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90dbeeffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a551189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b40f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205342400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175848a9f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834813b34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cf05210cc4bca2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0145af67388d2153dbcb8856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, r3, r4, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="fe45982a621b80c7b0ea160474bbaa78e95e9b0930eb84788995a0ce7f4cb600c13d183e25ef1ca03670650b02af58b19050557af0c3da7fc9427a3a49695cc9283c428076f881aa5b782007a3f237effb83f399ef8608e92613783de4dfece836bfccfff228fc0363dc8ceb6057768e005c6ba8ee0f90e994db63cf6adf8b49555d0ba9005b2707ec084ca8567ccb7265baa4", 0x93}, {&(0x7f00000005c0)="afa982fea45658ba2fc7f637192bf9fc69f25ba9845aea6d23590176ade0dc2a403bc74dc23dee4670404ad9b206b0a276565b841d6e286f34d83086257be33a3589ce441060b55d259832e4958b3258ef2361eaf364974f7756572043010025bdc7830d45434d7b8f2cb3e72cdc4b072eca26edd790fd092e11f443cb30941a735e5182bc0c5cb171b5c622249ad1527219dd7a32fa8cfb5ac33000e720402902443a18d5aba67753e27ad90d78fee9874372ecd6a2a90fddda0cb71a9890d5de845bbc", 0xc4}, {&(0x7f00000006c0)="d42a469053380297a3ca97bd6592f94eb2f2bf67816d8610eb2d8d608ba7d2fd05f89378a191b716d7cdefbcd5d8b902e120ad4937032860347260a056610fe108be78163a0b4592e5321c5087c61675b9decca841bd2f66abd9b65085dc1703479a869651208fb63cc141e9876e5a18c9360ec54dbb5ddc70fc1e32fbb9411cc2b92b15f819e495708bf13b930a4dc87b7e827698c262130c1cd7fd635bc7b29c123b29303cb2528edaa73cf81dd4ffa5912f8dda8e2a4c4f2b29c49b0ec353ad590b65c4", 0xc5}, {&(0x7f0000000140)="8d0787111fc878df15648a17d5c6159f705d97293345df719fca5cde8909a95a2dc2dfd25766a777e8a691e485", 0x2d}], 0x4, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r0, r3, 0xee00}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000007c0)="f9eafab83910b18ca5f5d3d79e4b250e4c5d405cd190ec30cbf8940353c88f089528ed43d7ca017b88f908b2fa8697edcc2f97b2376b68d7a7aea0e171c956e474bc61e77b021f685310eb575ee8c1485e66f5a74d412960f8916a1d443e6cd330bf1916d1cae00057650fff68cb10c0a7601a3bfeb6621fe94870f1508ec7e38150479697b698be861c88c2723b95af7a981011da07d18ca4602742dfa2dbb353682141319bcfc4f620d92c07f09966f72d43c7b5c90aae005aae91e5b27c937f4192ecac83e6801d4d33586c53f290", 0xd0}], 0x1, 0x0, 0x0, 0x8040}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000000050005000a0000001100030068617368706f72740000000000000000"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x3b}}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a3100000000050001412e0007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.591480473s ago: executing program 0 (id=911): prlimit64(0x0, 0x7, &(0x7f0000000080)={0x1, 0x1ff}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0xffff, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x28) 1.563067499s ago: executing program 4 (id=912): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="aefdda9d090000005a90f57f22e8bb22314edd2a", 0x14}, {0x0}], 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff92c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0xc0c0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) accept4(r0, 0x0, 0x0, 0x0) 1.475362262s ago: executing program 3 (id=913): mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [], 0x3a}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) waitid(0x0, r5, 0x0, 0x8, &(0x7f0000000080)) ptrace$getenv(0x4201, r5, 0x37e, &(0x7f0000000040)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x6a01, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000540), 0x700000000000002) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900"/15, @ANYBLOB="0bb1000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040200020000000095000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 1.473521309s ago: executing program 0 (id=914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000004cc0)=ANY=[@ANYBLOB="28000000000703000000000000000000010000090900010073797a30000000000800054034"], 0x28}}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}, {}]}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@private, @private}, &(0x7f0000000180)=0xc) r2 = socket(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)={'U-', 0x4}, 0x16, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0xc, 0x6, 0xc, 0x60, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x80, 0x8, 0x2}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000040)=0x45, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtaction={0x18, 0x30, 0xb, 0x70bd2b, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r10, @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) 548.952176ms ago: executing program 3 (id=915): sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x8000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x3a4, &(0x7f00000000c0)=ANY=[]) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000500ffff240007801800018014de0240fe8000000000000000000000000000aa08000a40000000020900020073797a3100000000050001"], 0x4c}}, 0x4000080) 385.609008ms ago: executing program 4 (id=916): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x4000) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x4000000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000140)="8000", 0x2}], 0x1, &(0x7f0000000180)=ANY=[], 0x2}}], 0x1, 0x4000010) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) read$dsp(r3, &(0x7f0000000080)=""/124, 0x7c) (async) read$dsp(r3, &(0x7f0000000080)=""/124, 0x7c) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) (async) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x12, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x4, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xb60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) (async) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000002000)=""/102400, 0x19000) (async) read$msr(r9, &(0x7f0000002000)=""/102400, 0x19000) openat$comedi(0xffffff9c, 0x0, 0x2000, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000800)={0x4, {0x0, 0x0, 0xa, 0x80000040, 0x3, 0x10000008}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 196.890621ms ago: executing program 2 (id=917): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001380)={0x4, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket(0x15, 0x5, 0x0) sched_getscheduler(0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x80}}, 0x8000) 97.877613ms ago: executing program 2 (id=918): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 25.514289ms ago: executing program 4 (id=919): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="53ccdaeb5f7721a987a7819d89297c4d9104e576ca8112b601c16734255744c1253ef6f07a0136d948716432249c928136b6ef5727a283f6d8ea5e87a3272448a38147d1c5db3f6ba52b1596f8a73a25ba45b3581ed029f823b0003bbf37b69e0204e8c76eff34f0b03eab", 0x6b}], 0x1, 0x0, 0x0, 0x1}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000017c0), 0x0, 0x4000}}, {{&(0x7f0000001840)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x3, 0x24000001) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r2, &(0x7f0000002880)={0x60, 0x0, r3, {{0x5, 0x1, 0x8, 0x9, 0x80000000, 0xd7, 0x5}}}, 0x60) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000100005070000000000", @ANYRES32], 0x38}}, 0x0) (async) syz_usb_connect(0x0, 0x59, &(0x7f00000000c0)=ANY=[], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_open_dev$admmidi(&(0x7f0000002a80), 0x49cf, 0x80000) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000002ac0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000002b00)={{r4}, r6, 0x0, @unused=[0x1, 0x6a36, 0xeec6, 0xfff], @subvolid=0xffffffff80000001}) (async) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r4) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), r4) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x74, r8, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x10801) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) (async) syz_usb_connect$uac1(0x0, 0xd7, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0xff, 0xb0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xc3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0x8, 0x56, 'og\b'}, @as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x4}, @as_header={0x7, 0x24, 0x1, 0x8a, 0xf9, 0x3}, @as_header={0x7, 0x24, 0x1, 0xff, 0x2, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xe3, 0x4, 0xfd, 0x43, "b81e"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x1, 0x6, 0xe5, "c5d3af", 'qp'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xf, 0x4, 0xf0, {0x7, 0x25, 0x1, 0x82, 0x49, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x4, 0x6, 0x5, "af17"}, @as_header={0x7, 0x24, 0x1, 0x8, 0xd, 0x1001}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x0, 0x5, "ea636769160da6"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0x9, 0xfa, "ec15d7d54d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0xc, 0x49, {0x7, 0x25, 0x1, 0x80, 0x6, 0x8001}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x9f, 0x10, 0x40, 0xa}, 0x6d, &(0x7f0000000180)={0x5, 0xf, 0x6d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x7b, 0xce, 0x8}, @generic={0x3e, 0x10, 0x4, "329a555b3ffa2506f893717d8b225ae05ba2eddbd1432b63b997c8f01cb42d4a5990bc55b8062520f5f580b2daedb18f789b68e8a876b40285038a"}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0xe, 0x0, 0xcb, [0xff0000, 0x3f00, 0xff3f0f, 0xc000, 0x0]}]}, 0x7, [{0xb8, &(0x7f0000000280)=@string={0xb8, 0x3, "d8d93a785b3170bcec872244b09185483dcd3bfdd720a4301e9b230ff620461a8e1bce3b6cc02748ba1141f0b512eb33971a91973fe719447d3cd44e9b2ff65bec373b184b7e25ba25329a180fd846532c409985b47e077c4f82b5ff824982364370be6531957198370d77bf6ee137ca082c4881053bfa98bbc60cd2e6f6bb612f77b1470d04ae164a47c7f72c6317cf447a4074a3e6b26aceccbffb454bd39fca422b376758712371a6e0e02df9007186b130bc2e4a"}}, {0xfb, &(0x7f0000000340)=@string={0xfb, 0x3, "49f45aa31648ffaf03358fefd02281e11095e89bac86dc29ffb16ee91d79bdc78a956092d2a7fb95628b031bced4625785991ef14e5256e1db7a7ccfe5562feb103f53ddd143d8be0b654a9d3e9d2650a2b592c9817a05f6a4fc5a526993d06011adc2402180b2cf27c650cf392e7044d3265bf2bc855b10eb6a0ca088a1e253a7b4ea551b7b50ac83ccd349e1ffd8e4b739ff965f72f9dda66d2d2e931bcf5112d662cce748607dc03cce1e4c2f5c6fcad757975aac3fab3213bda2137dff74e55f343bffb89c9591dcc0742f4a2adfc8b7367dd15c9d0b3f7cac87607b6b37b0404e0c08228762039044a9fef5fdebc85da636b376b68996"}}, {0x82, &(0x7f0000000580)=@string={0x82, 0x3, "c6a55910db0d24bce5eb8c9ae2a08659ed27e806412115fbcf248518fd15c19cf62d3fd5e007f89921a15c9906ca28189ec4c01d07dd1df401dcf00478dfed1200c5111c610f0e037fa13b6b36d188eb7c4fe106c005b8bef56837a6cd3245b45229d6a540c1d16241eabd163ac44b5d6f99e6b10ef9aeaaac9ca58fd07750c7"}}, {0x8e, &(0x7f0000000640)=@string={0x8e, 0x3, "3e7731ddcb334dcf760e3d4ca946d1d151ecce1ac9399835cd1550ed5bf935270f6e38ad7238d7dee91b1b3d1302a45baa09b5835e54e0e1ff3ce8536c66eb1e7125757b7a17f33a055c24bef029f84b68d2194934d579f605f26b1e787bf8ad91690898b557bea166ad931683468987a23948bb0c168298c1f980aafd6d11dfdc7a23351cbb2bfff98adf92"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x861}}, {0xac, &(0x7f0000000700)=@string={0xac, 0x3, "0edec1a3518dad163289c7145f0863ee5aa2ecb04b73da9645434c7198f4d79a090bf1a7a86020384449769b5093f3e1f20a1cd295bf343cd086100da9f910c5443ca9d74db86ef89dc6969d54c69663bebe40ec47ae8b419b2bff573d0824fa2f4643e0a0aa3f0e27a8ab9f4cb21faac25d386690ce12b945b01cb4cd3d295de99aafa394c48d252e8336736b3ca08f108cffa88a742e526f922a477deb7b4ec0c4e47d2abc84ab25a5"}}]}) (async) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000003bc0)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040081) (async) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 4.964305ms ago: executing program 3 (id=920): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x41, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x28) r4 = socket$inet_smc(0x2b, 0x1, 0x0) close(r4) r5 = fsopen(&(0x7f00000004c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=921): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES8=0x0], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001440)=@mangle={'mangle\x00', 0x64, 0x6, 0x790, 0x0, 0x408, 0x548, 0x120, 0x408, 0x6c0, 0x6c0, 0x6c0, 0x6c0, 0x6c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0xf}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000da6d97833484a372ec614741db495a5bb8deff863302cf3b55f668972d262440dc16692be1fd8d2d517fa58a6535bc3546bdffbccc378fc3e837eee62f491cd9166510615918c5cbe8e3eba6b208246a049cd3d71af61b5c9f4ff777bc4fb040f89f3093a99dc671327f1ec960ea6144abc14716635f654d634100fa30a5f005c98e379744869a93f52f6e0ec5a777cd976d353eaba15047cd7ea6fb67eb2f8fb650a74af72d6d9a7c3a54db8406", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd0100000000001400000060e1fd2800082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r7, 0x90004) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) write$khugepaged_scan(r7, &(0x7f00000001c0), 0x8) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x1) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r7, 0x60}], 0x1, 0x0, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x80, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r3, 0x58, &(0x7f00000002c0)}, 0x10) kernel console output (not intermixed with test programs): dm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 188.435689][ T6241] usb 2-1: Using ep0 maxpacket: 32 [ 188.493514][ T5935] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 188.522417][ T6241] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 188.533091][ T6241] usb 2-1: can't read configurations, error -71 [ 188.653688][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 188.660513][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.678049][ T5935] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 188.688209][ T5935] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 188.701505][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.714047][ T6544] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 188.720622][ T5935] usb 1-1: config 0 descriptor?? [ 188.743724][ T5879] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 188.789925][ T7474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.036472][ T6544] usb 4-1: config 0 interface 0 has no altsetting 0 [ 189.043718][ T6544] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 189.059860][ T6544] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.070478][ T6544] usb 4-1: config 0 descriptor?? [ 189.173567][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 189.180323][ T5879] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 189.189753][ T5879] usb 3-1: config 0 has no interface number 0 [ 189.196788][ T5879] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 189.209273][ T5879] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 189.219260][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.228126][ T5879] usb 3-1: Product: syz [ 189.232301][ T5879] usb 3-1: Manufacturer: syz [ 189.237852][ T5879] usb 3-1: SerialNumber: syz [ 189.254344][ T5879] usb 3-1: config 0 descriptor?? [ 189.266094][ T5879] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 189.277212][ T5879] em28xx 3-1:0.132: Video interface 132 found: [ 189.381870][ T5935] usb 5-1: USB disconnect, device number 25 [ 189.506433][ T30] audit: type=1326 audit(1764937939.691:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b538f749 code=0x7fc00000 [ 189.561494][ T30] audit: type=1326 audit(1764937939.711:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f87b538f749 code=0x7fc00000 [ 189.619014][ T30] audit: type=1326 audit(1764937939.711:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b538f749 code=0x7fc00000 [ 189.646463][ T30] audit: type=1326 audit(1764937939.711:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b538f749 code=0x7fc00000 [ 189.699412][ T30] audit: type=1326 audit(1764937939.711:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b538f749 code=0x7fc00000 [ 189.736135][ T30] audit: type=1326 audit(1764937939.711:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b538f749 code=0x7fc00000 [ 189.761088][ T30] audit: type=1326 audit(1764937939.711:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b538f749 code=0x7fc00000 [ 189.810666][ T30] audit: type=1326 audit(1764937939.711:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b538f749 code=0x7fc00000 [ 189.842401][ T30] audit: type=1326 audit(1764937939.711:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b538f749 code=0x7fc00000 [ 189.849114][ T5879] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 190.033224][ T6241] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 190.103565][ T6544] video4linux radio48: keene_cmd_set failed (-71) [ 190.110273][ T6544] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 190.187377][ T6544] usb 4-1: USB disconnect, device number 25 [ 190.197254][ T6241] usb 2-1: Using ep0 maxpacket: 8 [ 190.227835][ T6241] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 190.284836][ T6241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.357039][ T6241] usb 2-1: Product: syz [ 190.361328][ T6241] usb 2-1: Manufacturer: syz [ 190.366719][ T6241] usb 2-1: SerialNumber: syz [ 190.377271][ T6241] usb 2-1: config 0 descriptor?? [ 190.391618][ T6241] gspca_main: sq930x-2.14.0 probing 2770:930c [ 190.693688][ T845] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 190.791489][ T6241] gspca_sq930x: ucbus_write failed -71 [ 190.806886][ T5935] usb 1-1: USB disconnect, device number 24 [ 190.862005][ T845] usb 5-1: Using ep0 maxpacket: 8 [ 190.903736][ T5879] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 190.910733][ T5879] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 190.931989][ T845] usb 5-1: unable to get BOS descriptor or descriptor too short [ 190.964056][ T845] usb 5-1: config 4 interface 0 has no altsetting 0 [ 191.008375][ T845] usb 5-1: string descriptor 0 read error: -22 [ 191.016606][ T845] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 191.026707][ T845] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 191.141894][ T845] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 191.258666][ T845] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 191.275040][ T845] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 191.284640][ T845] usb 5-1: media controller created [ 191.648092][ T845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.723619][ T6241] gspca_sq930x: Unknown sensor [ 191.861125][ T6241] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 191.899116][ T6241] usb 2-1: USB disconnect, device number 29 [ 192.110404][ T7503] em28xx 3-1:0.132: failed to trigger write to i2c address 0x0 (error=-5) [ 192.162031][ T5879] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 192.199960][ T5879] em28xx 3-1:0.132: analog set to bulk mode. [ 192.315215][ T6413] em28xx 3-1:0.132: Registering V4L2 extension [ 192.328774][ T5879] usb 3-1: USB disconnect, device number 21 [ 192.350686][ T5879] em28xx 3-1:0.132: Disconnecting em28xx [ 192.455322][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 193.194352][ T845] zl10353_read_register: readreg error (reg=127, ret==0) [ 193.618715][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 193.618730][ T30] audit: type=1400 audit(1764937943.801:931): avc: denied { name_bind } for pid=7524 comm="syz.0.519" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 193.643493][ T5935] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 193.697945][ T845] usb 5-1: USB disconnect, device number 26 [ 193.831982][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.842837][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.334724][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 194.408148][ T5935] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 194.423186][ T5935] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 194.431812][ T5935] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 194.458058][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.474479][ T5935] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 194.493591][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 194.508035][ T6413] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 194.517147][ T6413] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 194.527958][ T5935] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 194.539534][ T6413] em28xx 3-1:0.132: No AC97 audio processor [ 194.546862][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.558560][ T6413] usb 3-1: Decoder not found [ 194.565889][ T6413] em28xx 3-1:0.132: failed to create media graph [ 194.588089][ T5935] usb 2-1: config 0 descriptor?? [ 194.598569][ T6413] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 194.611052][ T6413] em28xx 3-1:0.132: Remote control support is not available for this card. [ 194.622152][ T5879] em28xx 3-1:0.132: Closing input extension [ 194.640516][ T5879] em28xx 3-1:0.132: Freeing device [ 194.820292][ T5935] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 194.862290][ T5935] usb 2-1: USB disconnect, device number 30 [ 194.885609][ T5935] usblp0: removed [ 194.945605][ T5879] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 195.105163][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 195.111938][ T5879] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 195.129819][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.631145][ T6413] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 195.639812][ T30] audit: type=1400 audit(1764937945.401:932): avc: denied { read write } for pid=7541 comm="syz.4.523" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 195.686495][ T5879] usb 3-1: config 0 descriptor?? [ 195.751490][ T30] audit: type=1400 audit(1764937945.401:933): avc: denied { open } for pid=7541 comm="syz.4.523" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 195.779576][ T37] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 195.823491][ T6413] usb 1-1: Using ep0 maxpacket: 32 [ 195.840723][ T6413] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.857252][ T6413] usb 1-1: no configurations [ 195.867244][ T6413] usb 1-1: can't read configurations, error -22 [ 195.883140][ T5904] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 195.953773][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 195.960586][ T37] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 195.969653][ T37] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 195.986768][ T37] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 196.003466][ T6413] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 196.011102][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.031593][ T37] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.047380][ T5935] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 196.059235][ T5904] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 196.070397][ T5904] usb 5-1: config 0 has no interface number 0 [ 196.080711][ T37] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 196.101128][ T5904] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 196.108292][ T37] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 196.110975][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.120858][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.134961][ T5904] usb 5-1: Product: syz [ 196.141003][ T5879] acrux 0003:1A34:0802.0006: report_id 3768584087 is invalid [ 196.148059][ T5904] usb 5-1: Manufacturer: syz [ 196.150264][ T5879] acrux 0003:1A34:0802.0006: item 0 4 1 8 parsing failed [ 196.155053][ T5904] usb 5-1: SerialNumber: syz [ 196.174212][ T5879] acrux 0003:1A34:0802.0006: parse failed [ 196.180005][ T5879] acrux 0003:1A34:0802.0006: probe with driver acrux failed with error -22 [ 196.183891][ T5904] usb 5-1: config 0 descriptor?? [ 196.189720][ T6413] usb 1-1: Using ep0 maxpacket: 32 [ 196.243773][ T37] usb 2-1: config 0 descriptor?? [ 196.249428][ T37] usb 2-1: can't set config #0, error -71 [ 196.259454][ T6413] usb 1-1: unable to get BOS descriptor or descriptor too short [ 196.268114][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 196.280804][ T37] usb 2-1: USB disconnect, device number 31 [ 196.288640][ T6413] usb 1-1: no configurations [ 196.294788][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.306896][ T6413] usb 1-1: can't read configurations, error -22 [ 196.318532][ T5935] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.334905][ T6413] usb usb1-port1: attempt power cycle [ 196.341244][ T5935] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.348741][ T5935] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 196.358593][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.370346][ T5935] usb 4-1: config 0 descriptor?? [ 196.381282][ T5935] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 196.486824][ T7548] Set syz1 is full, maxelem 65536 reached [ 196.658105][ T5904] usb 5-1: Firmware: major: 0, minor: 107, hardware type: UNKNOWN (11) [ 196.884606][ T6413] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 196.893915][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.894765][ T30] audit: type=1326 audit(1764937946.871:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 196.906709][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.927267][ T30] audit: type=1326 audit(1764937946.871:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 196.959438][ T6413] usb 1-1: Using ep0 maxpacket: 32 [ 196.966301][ T30] audit: type=1326 audit(1764937946.871:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 196.992131][ T30] audit: type=1326 audit(1764937946.871:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 197.035721][ T6413] usb 1-1: unable to get BOS descriptor or descriptor too short [ 197.063558][ T6413] usb 1-1: no configurations [ 197.083363][ T6413] usb 1-1: can't read configurations, error -22 [ 197.091890][ T30] audit: type=1326 audit(1764937946.871:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 197.118136][ T30] audit: type=1326 audit(1764937946.871:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 197.144935][ T30] audit: type=1326 audit(1764937946.871:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 197.223679][ T6413] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 197.244052][ T6413] usb 1-1: Using ep0 maxpacket: 32 [ 197.249541][ T6413] usb 1-1: unable to get BOS descriptor or descriptor too short [ 197.249594][ T6413] usb 1-1: no configurations [ 197.249606][ T6413] usb 1-1: can't read configurations, error -22 [ 197.249826][ T6413] usb usb1-port1: unable to enumerate USB device [ 197.403602][ T7559] sp0: Synchronizing with TNC [ 198.083798][ T5904] usb 5-1: failed to fetch extended address, random address set [ 198.112289][ T37] usb 3-1: USB disconnect, device number 22 [ 198.180319][ T5904] usb 5-1: atusb_probe: initialization failed, error = -524 [ 198.203939][ T5904] atusb 5-1:0.128: probe with driver atusb failed with error -524 [ 198.233034][ T5904] usb 5-1: USB disconnect, device number 27 [ 198.970925][ T6241] usb 4-1: USB disconnect, device number 26 [ 199.193851][ T7581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.476704][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 200.083082][ T6413] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 200.253606][ T6413] usb 4-1: Using ep0 maxpacket: 32 [ 200.260395][ T6413] usb 4-1: config 2 has an invalid interface number: 139 but max is 0 [ 200.273808][ T6413] usb 4-1: config 2 has no interface number 0 [ 200.275785][ T7618] Set syz1 is full, maxelem 65536 reached [ 200.279912][ T6413] usb 4-1: config 2 interface 139 has no altsetting 0 [ 200.295112][ T6413] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0203, bcdDevice=36.c4 [ 200.305532][ T6413] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.330104][ T6413] usb 4-1: Product: syz [ 200.339207][ T6413] usb 4-1: Manufacturer: syz [ 200.348434][ T6413] usb 4-1: SerialNumber: syz [ 200.565136][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 200.565175][ T30] audit: type=1326 audit(1764937950.751:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 200.744222][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.801482][ T30] audit: type=1326 audit(1764937950.791:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 200.841010][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.884246][ T30] audit: type=1326 audit(1764937950.791:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 200.919756][ T30] audit: type=1326 audit(1764937950.791:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 201.055156][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 201.141744][ T30] audit: type=1326 audit(1764937950.791:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 201.210735][ T30] audit: type=1326 audit(1764937950.791:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 201.223448][ T37] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 201.245628][ T5879] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 201.258467][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 201.276103][ T30] audit: type=1326 audit(1764937950.791:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 201.305484][ T30] audit: type=1326 audit(1764937950.791:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 201.473658][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 201.484643][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 201.494161][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 201.501022][ T30] audit: type=1326 audit(1764937950.791:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b3cb8df90 code=0x7ffc0000 [ 201.505224][ T5879] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 201.896362][ T37] usb 3-1: no configurations [ 201.905721][ T37] usb 3-1: can't read configurations, error -22 [ 202.035695][ T6241] IPVS: starting estimator thread 0... [ 202.041467][ T30] audit: type=1326 audit(1764937950.791:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7621 comm="syz.1.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3cb8f749 code=0x7ffc0000 [ 202.068472][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.078782][ T5879] usb 5-1: Product: syz [ 202.084155][ T5879] usb 5-1: Manufacturer: syz [ 202.088889][ T5879] usb 5-1: SerialNumber: syz [ 202.186286][ T5879] usb 5-1: config 0 descriptor?? [ 202.195329][ T5879] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 202.233558][ T37] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 202.372146][ T7641] IPVS: using max 48 ests per chain, 115200 per kthread [ 202.404895][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 202.410251][ T5879] ssu100 5-1:0.0: probe with driver ssu100 failed with error -5 [ 202.436661][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.234520][ T6413] option 4-1:2.139: GSM modem (1-port) converter detected [ 203.245037][ T37] usb 3-1: no configurations [ 203.251344][ T37] usb 3-1: can't read configurations, error -22 [ 203.261137][ T6413] usb 4-1: USB disconnect, device number 27 [ 203.269280][ T6413] option 4-1:2.139: device disconnected [ 203.278168][ T37] usb usb3-port1: attempt power cycle [ 203.508022][ T7652] Set syz1 is full, maxelem 65536 reached [ 203.623699][ T37] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 203.654111][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 203.662305][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.675836][ T37] usb 3-1: no configurations [ 203.685854][ T37] usb 3-1: can't read configurations, error -22 [ 203.689840][ T7658] Set syz1 is full, maxelem 65536 reached [ 203.823806][ T37] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 203.843767][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 203.851382][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.867761][ T37] usb 3-1: no configurations [ 203.872422][ T37] usb 3-1: can't read configurations, error -22 [ 203.887402][ T37] usb usb3-port1: unable to enumerate USB device [ 204.075253][ T6690] usb 5-1: USB disconnect, device number 28 [ 204.623528][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 205.013743][ T7691] tmpfs: Bad value for 'mpol' [ 205.259258][ T7700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.558'. [ 205.847577][ T7704] Set syz1 is full, maxelem 65536 reached [ 206.333164][ T5879] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 206.458721][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 206.550991][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 206.580296][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short [ 206.593675][ T5879] usb 5-1: no configurations [ 206.598314][ T5879] usb 5-1: can't read configurations, error -22 [ 206.820049][ T5879] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 206.852258][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 206.852270][ T30] audit: type=1400 audit(1764937957.031:993): avc: denied { sqpoll } for pid=7719 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 206.993646][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 207.151826][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short [ 207.175125][ T5879] usb 5-1: no configurations [ 207.299298][ T5879] usb 5-1: can't read configurations, error -22 [ 207.391424][ T5879] usb usb5-port1: attempt power cycle [ 207.414539][ T30] audit: type=1400 audit(1764937957.591:994): avc: denied { mount } for pid=7733 comm="syz.3.569" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 207.449201][ T7735] overlayfs: failed to clone lowerpath [ 207.681414][ T30] audit: type=1400 audit(1764937957.861:995): avc: denied { read write } for pid=7733 comm="syz.3.569" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 207.753645][ T5879] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 207.776456][ T30] audit: type=1400 audit(1764937957.891:996): avc: denied { open } for pid=7733 comm="syz.3.569" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 207.844103][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 207.927472][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short [ 207.956768][ T5879] usb 5-1: no configurations [ 207.961501][ T5879] usb 5-1: can't read configurations, error -22 [ 208.145108][ T5879] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 208.685131][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 208.692010][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short [ 208.704930][ T5879] usb 5-1: no configurations [ 208.717885][ T5879] usb 5-1: can't read configurations, error -22 [ 208.794604][ T5879] usb usb5-port1: unable to enumerate USB device [ 209.142084][ T7763] Set syz1 is full, maxelem 65536 reached [ 209.441370][ T30] audit: type=1400 audit(1764937959.621:997): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 209.461854][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 210.233115][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 210.239903][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.253951][ T9] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.270827][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 210.278171][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 210.287751][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.304313][ T9] usb 1-1: config 0 descriptor?? [ 210.312196][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 210.738917][ T30] audit: type=1400 audit(1764937960.921:998): avc: denied { execute } for pid=7774 comm="syz.3.576" path="/101/cpuacct.usage_percpu" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 211.170487][ T5879] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 211.323675][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 211.380757][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.469722][ T5879] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 211.503862][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.575914][ T5879] usb 2-1: config 0 descriptor?? [ 211.739267][ T6413] usb 1-1: USB disconnect, device number 29 [ 212.207268][ T7794] Set syz1 is full, maxelem 65536 reached [ 212.488328][ T5904] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 212.543946][ T5879] usbhid 2-1:0.0: can't add hid device: -71 [ 212.711736][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 4 [ 212.747013][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 13368, setting to 1023 [ 212.801128][ T5904] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 212.863719][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.951554][ T5904] usb 1-1: config 0 descriptor?? [ 214.115966][ T7817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.457950][ T5904] ath6kl: Failed to submit usb control message: -110 [ 214.467102][ T30] audit: type=1400 audit(1764937964.231:999): avc: denied { create } for pid=7813 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 214.471825][ T5904] ath6kl: unable to send the bmi data to the device: -110 [ 214.495508][ T5904] ath6kl: Unable to send get target info: -110 [ 214.503245][ T5904] ath6kl: Failed to init ath6kl core: -110 [ 214.527625][ T5904] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 214.688438][ T5879] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 214.715643][ T5879] usb 2-1: USB disconnect, device number 32 [ 214.725045][ T30] audit: type=1400 audit(1764937964.241:1000): avc: denied { setopt } for pid=7813 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 214.773642][ T30] audit: type=1400 audit(1764937964.241:1001): avc: denied { ioctl } for pid=7813 comm="syz.1.588" path="socket:[15655]" dev="sockfs" ino=15655 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 215.923262][ T5904] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 216.093571][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 216.104463][ T5904] usb 4-1: unable to get BOS descriptor or descriptor too short [ 216.171643][ T6544] usb 1-1: USB disconnect, device number 30 [ 216.178165][ T6241] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 216.209929][ T5904] usb 4-1: config 4 interface 0 has no altsetting 0 [ 216.230229][ T5904] usb 4-1: string descriptor 0 read error: -22 [ 216.236692][ T5904] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 216.246739][ T5904] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 216.265869][ T5904] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 216.276623][ T5904] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 216.287927][ T5904] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 216.299528][ T5904] usb 4-1: media controller created [ 216.319618][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.373257][ T6241] usb 5-1: Using ep0 maxpacket: 8 [ 216.379940][ T6241] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 216.390485][ T6241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.413920][ T5879] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 216.426260][ T6241] pvrusb2: Hardware description: Terratec Grabster AV400 [ 216.433925][ T6241] pvrusb2: ********** [ 216.437951][ T6241] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 216.463223][ T6241] pvrusb2: Important functionality might not be entirely working. [ 216.583786][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 216.596588][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.673344][ T6241] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 216.693299][ T6241] pvrusb2: ********** [ 216.885735][ T2339] pvrusb2: Invalid write control endpoint [ 216.998869][ T5879] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.017347][ T7845] Set syz1 is full, maxelem 65536 reached [ 217.019052][ T2339] pvrusb2: Invalid write control endpoint [ 217.024327][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 217.039997][ T7853] tmpfs: Bad value for 'mpol' [ 217.048328][ T30] audit: type=1400 audit(1764937967.241:1002): avc: denied { ioctl } for pid=7835 comm="syz.4.593" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 217.077242][ T7853] input: syz1 as /devices/virtual/input/input10 [ 217.088215][ T5879] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 217.107255][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.110486][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 217.144084][ T5879] usb 3-1: config 0 descriptor?? [ 217.171607][ T6413] IPVS: starting estimator thread 0... [ 217.175330][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 217.239042][ T5879] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 217.254999][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 217.263531][ T7854] IPVS: using max 44 ests per chain, 105600 per kthread [ 217.297901][ T2339] pvrusb2: Device being rendered inoperable [ 217.315140][ T2339] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 217.337503][ T2339] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 217.374996][ T2339] pvrusb2: Attached sub-driver cx25840 [ 217.385738][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 217.411034][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 217.426268][ T5904] zl10353_read_register: readreg error (reg=127, ret==0) [ 217.484277][ T7852] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 217.501623][ T5879] usb 5-1: USB disconnect, device number 33 [ 217.532357][ T5904] usb 4-1: USB disconnect, device number 28 [ 217.645283][ T7851] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 217.902613][ T7862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.270195][ T30] audit: type=1400 audit(1764937969.451:1003): avc: denied { listen } for pid=7868 comm="syz.0.600" lport=53752 faddr=::ffff:172.20.255.187 fport=8192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.416790][ T6241] usb 3-1: USB disconnect, device number 27 [ 219.555317][ T30] audit: type=1400 audit(1764937969.451:1004): avc: denied { accept } for pid=7868 comm="syz.0.600" lport=53752 faddr=::ffff:172.20.255.187 fport=8192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.654177][ T30] audit: type=1400 audit(1764937969.451:1005): avc: denied { write } for pid=7868 comm="syz.0.600" lport=53752 faddr=::ffff:172.20.255.187 fport=8192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 219.836273][ T30] audit: type=1400 audit(1764937969.451:1006): avc: denied { setopt } for pid=7868 comm="syz.0.600" lport=53752 faddr=::ffff:172.20.255.187 fport=8192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 220.537202][ T7890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.604'. [ 221.909848][ T1035] IPVS: stop unused estimator thread 0... [ 221.953334][ T845] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 222.103135][ T5904] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 222.113600][ T845] usb 5-1: Using ep0 maxpacket: 16 [ 222.135120][ T845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.154317][ T845] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.183699][ T845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 222.190396][ T845] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 222.233753][ T845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.276041][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 222.281566][ T845] usb 5-1: config 0 descriptor?? [ 222.299748][ T845] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 222.304609][ T5904] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 222.320757][ T7921] binder: 7918:7921 ioctl c0306201 200000000040 returned -22 [ 222.338316][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.346820][ T5904] usb 1-1: Product: syz [ 222.350993][ T5904] usb 1-1: Manufacturer: syz [ 222.356444][ T5904] usb 1-1: SerialNumber: syz [ 222.364007][ T5904] usb 1-1: config 0 descriptor?? [ 222.371809][ T5904] gspca_main: sq930x-2.14.0 probing 2770:930c [ 222.386749][ T7897] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 222.414372][ T30] audit: type=1400 audit(1764937972.571:1007): avc: denied { read write } for pid=7896 comm="syz.1.608" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 222.440795][ T30] audit: type=1400 audit(1764937972.571:1008): avc: denied { open } for pid=7896 comm="syz.1.608" path="/126/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 222.533592][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 222.621259][ T7925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.903206][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 222.956018][ T5904] gspca_sq930x: ucbus_write failed -71 [ 223.074306][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 223.083569][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 223.122095][ T9] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 223.143401][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.163266][ T9] usb 4-1: Product: syz [ 223.171726][ T9] usb 4-1: Manufacturer: syz [ 223.185218][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 223.187687][ T9] usb 4-1: SerialNumber: syz [ 223.195442][ T7931] bridge_slave_1: left allmulticast mode [ 223.205243][ T5904] gspca_sq930x: Sensor ov9630 not yet treated [ 223.205313][ T5904] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 223.207616][ T5904] usb 1-1: USB disconnect, device number 31 [ 223.212324][ T7931] bridge_slave_1: left promiscuous mode [ 223.228994][ T9] usb 4-1: config 0 descriptor?? [ 223.234683][ T7931] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.256771][ T7931] bridge_slave_0: left allmulticast mode [ 223.263546][ T7931] bridge_slave_0: left promiscuous mode [ 223.273492][ T7931] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.279592][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 223.331447][ T9] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 223.360581][ T9] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 223.549267][ T30] audit: type=1326 audit(1764937973.731:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a8d8f749 code=0x7ffc0000 [ 223.585530][ T30] audit: type=1326 audit(1764937973.761:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a8d8f749 code=0x7ffc0000 [ 223.627862][ T30] audit: type=1326 audit(1764937973.761:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a8d8f749 code=0x7ffc0000 [ 223.679652][ T30] audit: type=1326 audit(1764937973.761:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7ff6a8d8f749 code=0x7ffc0000 [ 223.721301][ T30] audit: type=1326 audit(1764937973.761:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a8d8f749 code=0x7ffc0000 [ 224.034730][ T7955] FAULT_INJECTION: forcing a failure. [ 224.034730][ T7955] name failslab, interval 1, probability 0, space 0, times 0 [ 224.048148][ T7955] CPU: 0 UID: 0 PID: 7955 Comm: syz.1.627 Not tainted syzkaller #0 PREEMPT(full) [ 224.048170][ T7955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.048178][ T7955] Call Trace: [ 224.048182][ T7955] [ 224.048187][ T7955] dump_stack_lvl+0x16c/0x1f0 [ 224.048206][ T7955] should_fail_ex+0x512/0x640 [ 224.048222][ T7955] ? __kmalloc_noprof+0xca/0x8f0 [ 224.048235][ T7955] should_failslab+0xc2/0x120 [ 224.048257][ T7955] __kmalloc_noprof+0xdd/0x8f0 [ 224.048271][ T7955] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 224.048288][ T7955] ? sock_kmalloc+0x111/0x170 [ 224.048301][ T7955] ? sock_kmalloc+0x111/0x170 [ 224.048309][ T7955] sock_kmalloc+0x111/0x170 [ 224.048320][ T7955] alg_setsockopt+0x3ff/0xef0 [ 224.048333][ T7955] ? __pfx_alg_setsockopt+0x10/0x10 [ 224.048345][ T7955] ? selinux_socket_setsockopt+0x6a/0x80 [ 224.048357][ T7955] ? __pfx_alg_setsockopt+0x10/0x10 [ 224.048369][ T7955] do_sock_setsockopt+0xf3/0x1d0 [ 224.048390][ T7955] __sys_setsockopt+0x1a0/0x230 [ 224.048407][ T7955] __x64_sys_setsockopt+0xbd/0x160 [ 224.048420][ T7955] ? do_syscall_64+0x91/0xf80 [ 224.048432][ T7955] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.048450][ T7955] do_syscall_64+0xcd/0xf80 [ 224.048463][ T7955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.048474][ T7955] RIP: 0033:0x7f5b3cb8f749 [ 224.048484][ T7955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.048494][ T7955] RSP: 002b:00007f5b3daa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 224.048505][ T7955] RAX: ffffffffffffffda RBX: 00007f5b3cde6090 RCX: 00007f5b3cb8f749 [ 224.048512][ T7955] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000005 [ 224.048518][ T7955] RBP: 00007f5b3daa0090 R08: 0000000000000018 R09: 0000000000000000 [ 224.048524][ T7955] R10: 0000200000c18000 R11: 0000000000000246 R12: 0000000000000001 [ 224.048530][ T7955] R13: 00007f5b3cde6128 R14: 00007f5b3cde6090 R15: 00007ffde3f49788 [ 224.048545][ T7955] [ 224.351022][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 224.567800][ T845] usb 5-1: USB disconnect, device number 34 [ 224.855300][ T7967] tmpfs: Unknown parameter 'qqoTa' [ 225.667218][ T845] usb 4-1: USB disconnect, device number 29 [ 225.928394][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 225.928404][ T30] audit: type=1400 audit(1764937976.111:1080): avc: denied { ioctl } for pid=7982 comm="syz.4.635" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 226.050539][ T7970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.076218][ T30] audit: type=1400 audit(1764937976.211:1081): avc: denied { view } for pid=7982 comm="syz.4.635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 226.495553][ T7988] Set syz1 is full, maxelem 65536 reached [ 226.733103][ T6241] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 226.918522][ T6241] usb 3-1: Using ep0 maxpacket: 16 [ 226.955457][ T6241] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.020688][ T6241] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.260951][ T6241] usb 3-1: config 0 interface 0 has no altsetting 0 [ 227.292693][ T6241] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 227.302089][ T6241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.332853][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'. [ 227.377273][ T6241] usb 3-1: config 0 descriptor?? [ 227.738813][ T6241] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 228.370723][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.645'. [ 228.393707][ T8028] tmpfs: Unknown parameter 'qqoTa' [ 228.533452][ T6241] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 228.703162][ T6241] usb 2-1: Using ep0 maxpacket: 32 [ 228.713927][ T6241] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 228.738928][ T6241] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 228.768430][ T6241] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 228.800871][ T6241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.864831][ T6241] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 228.885329][ T6241] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 228.917294][ T6241] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 228.939388][ T6241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.958685][ T6241] usb 2-1: config 0 descriptor?? [ 229.203547][ T8023] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 229.307633][ T6241] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 229.321499][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 229.351739][ T6241] usb 2-1: USB disconnect, device number 33 [ 229.370996][ T6241] usblp0: removed [ 229.632974][ T6413] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 229.710869][ T845] usb 3-1: USB disconnect, device number 28 [ 229.863296][ T6413] usb 4-1: Using ep0 maxpacket: 8 [ 229.942145][ T6413] usb 4-1: unable to get BOS descriptor or descriptor too short [ 230.011572][ T6413] usb 4-1: config 4 interface 0 has no altsetting 0 [ 230.074308][ T6413] usb 4-1: string descriptor 0 read error: -22 [ 230.107384][ T6413] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 230.153064][ T6241] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 230.162150][ T6413] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 230.347146][ T6413] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 230.445167][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 230.866996][ T6413] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 231.318077][ T6413] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 231.486939][ T6413] usb 4-1: media controller created [ 231.571645][ T6413] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.678218][ T8060] FAULT_INJECTION: forcing a failure. [ 231.678218][ T8060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.691668][ T30] audit: type=1400 audit(1764937981.881:1082): avc: denied { ioctl } for pid=8057 comm="syz.0.660" path="socket:[16721]" dev="sockfs" ino=16721 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 231.739331][ T8060] CPU: 0 UID: 0 PID: 8060 Comm: syz.1.659 Not tainted syzkaller #0 PREEMPT(full) [ 231.739356][ T8060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.739366][ T8060] Call Trace: [ 231.739371][ T8060] [ 231.739378][ T8060] dump_stack_lvl+0x16c/0x1f0 [ 231.739403][ T8060] should_fail_ex+0x512/0x640 [ 231.739431][ T8060] _copy_from_iter+0x2a4/0x16c0 [ 231.739456][ T8060] ? __alloc_skb+0x220/0x410 [ 231.739473][ T8060] ? __alloc_skb+0x35d/0x410 [ 231.739491][ T8060] ? __pfx__copy_from_iter+0x10/0x10 [ 231.739512][ T8060] ? netlink_autobind.isra.0+0x158/0x370 [ 231.739543][ T8060] netlink_sendmsg+0x820/0xdd0 [ 231.739564][ T8060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.739590][ T8060] ____sys_sendmsg+0xa5d/0xc30 [ 231.739608][ T8060] ? copy_msghdr_from_user+0x10a/0x160 [ 231.739629][ T8060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.739644][ T8060] ? __lock_acquire+0x433/0x22f0 [ 231.739675][ T8060] ___sys_sendmsg+0x134/0x1d0 [ 231.739698][ T8060] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.739719][ T8060] ? __lock_acquire+0x433/0x22f0 [ 231.739770][ T8060] __sys_sendmsg+0x16d/0x220 [ 231.739798][ T8060] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.739834][ T8060] do_syscall_64+0xcd/0xf80 [ 231.739855][ T8060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.739873][ T8060] RIP: 0033:0x7f5b3cb8f749 [ 231.739887][ T8060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.739903][ T8060] RSP: 002b:00007f5b3dac1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.739919][ T8060] RAX: ffffffffffffffda RBX: 00007f5b3cde5fa0 RCX: 00007f5b3cb8f749 [ 231.739930][ T8060] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 231.739940][ T8060] RBP: 00007f5b3dac1090 R08: 0000000000000000 R09: 0000000000000000 [ 231.739949][ T8060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.739959][ T8060] R13: 00007f5b3cde6038 R14: 00007f5b3cde5fa0 R15: 00007ffde3f49788 [ 231.739983][ T8060] [ 231.740185][ T30] audit: type=1400 audit(1764937981.911:1083): avc: denied { connect } for pid=8057 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.023202][ T5879] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 232.196210][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 232.243291][ T8048] netlink: 388 bytes leftover after parsing attributes in process `syz.2.656'. [ 232.257585][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short [ 232.324733][ T5879] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 232.405287][ T5879] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 232.519252][ T5879] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 232.596501][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.627713][ T6413] zl10353_read_register: readreg error (reg=127, ret==0) [ 232.644718][ T5879] usb 5-1: Product: syz [ 232.685766][ T5879] usb 5-1: Manufacturer: syz [ 232.709856][ T5879] usb 5-1: SerialNumber: syz [ 232.967193][ T8069] tmpfs: Unknown parameter 'qqoTa' [ 233.106359][ T6413] usb 4-1: USB disconnect, device number 30 [ 233.366629][ T8074] evm: overlay not supported [ 234.068620][ T8083] FAULT_INJECTION: forcing a failure. [ 234.068620][ T8083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.084308][ T8083] CPU: 1 UID: 0 PID: 8083 Comm: syz.1.668 Not tainted syzkaller #0 PREEMPT(full) [ 234.084339][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.084349][ T8083] Call Trace: [ 234.084355][ T8083] [ 234.084362][ T8083] dump_stack_lvl+0x16c/0x1f0 [ 234.084388][ T8083] should_fail_ex+0x512/0x640 [ 234.084418][ T8083] _copy_to_user+0x32/0xd0 [ 234.084443][ T8083] simple_read_from_buffer+0xcb/0x170 [ 234.084473][ T8083] proc_fail_nth_read+0x197/0x240 [ 234.084496][ T8083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.084520][ T8083] ? rw_verify_area+0xcf/0x6c0 [ 234.084542][ T8083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.084564][ T8083] vfs_read+0x1e4/0xcf0 [ 234.084589][ T8083] ? __pfx___mutex_lock+0x10/0x10 [ 234.084614][ T8083] ? __pfx_vfs_read+0x10/0x10 [ 234.084646][ T8083] ? __fget_files+0x20e/0x3c0 [ 234.084670][ T8083] ksys_read+0x12a/0x250 [ 234.084695][ T8083] ? __pfx_ksys_read+0x10/0x10 [ 234.084726][ T8083] do_syscall_64+0xcd/0xf80 [ 234.084749][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.084767][ T8083] RIP: 0033:0x7f5b3cb8e15c [ 234.084781][ T8083] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 234.084797][ T8083] RSP: 002b:00007f5b3dac1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.084815][ T8083] RAX: ffffffffffffffda RBX: 00007f5b3cde5fa0 RCX: 00007f5b3cb8e15c [ 234.084826][ T8083] RDX: 000000000000000f RSI: 00007f5b3dac10a0 RDI: 0000000000000005 [ 234.084837][ T8083] RBP: 00007f5b3dac1090 R08: 0000000000000000 R09: 0000000000000000 [ 234.084846][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.084857][ T8083] R13: 00007f5b3cde6038 R14: 00007f5b3cde5fa0 R15: 00007ffde3f49788 [ 234.084882][ T8083] [ 234.311604][ T8086] netlink: 40 bytes leftover after parsing attributes in process `syz.1.669'. [ 234.333335][ T6413] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 234.403646][ T5893] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 234.483165][ T6413] usb 4-1: Using ep0 maxpacket: 16 [ 234.490331][ T6413] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.501256][ T6413] usb 4-1: config 0 interface 0 has no altsetting 0 [ 234.508734][ T6413] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 234.519410][ T6413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.542008][ T845] usb 5-1: USB disconnect, device number 35 [ 234.553968][ T6413] usb 4-1: config 0 descriptor?? [ 234.563113][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 234.571896][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.582922][ T6413] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 234.996338][ T5893] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 235.007454][ T5893] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 235.018202][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.034671][ T5893] usb 1-1: config 0 descriptor?? [ 235.103779][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 235.247512][ T8107] 9pnet_fd: Insufficient options for proto=fd [ 235.267831][ T30] audit: type=1400 audit(1764937985.421:1084): avc: denied { write } for pid=8106 comm="syz.1.675" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 235.327587][ T30] audit: type=1400 audit(1764937985.421:1085): avc: denied { create } for pid=8106 comm="syz.1.675" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 235.349595][ T30] audit: type=1400 audit(1764937985.431:1086): avc: denied { read write } for pid=8106 comm="syz.1.675" name="file0" dev="tmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 235.507027][ T8115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.773928][ T30] audit: type=1400 audit(1764937985.431:1087): avc: denied { open } for pid=8106 comm="syz.1.675" path="/142/file0" dev="tmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 235.797186][ T30] audit: type=1400 audit(1764937985.431:1088): avc: denied { mounton } for pid=8106 comm="syz.1.675" path="/142/file0" dev="tmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 235.820900][ T30] audit: type=1400 audit(1764937985.451:1089): avc: denied { name_connect } for pid=8106 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 235.857974][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.676'. [ 236.074265][ T8128] tmpfs: Bad value for 'mpol' [ 236.247734][ T6544] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 236.404919][ T6544] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 236.415271][ T6544] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.426310][ T6544] usb 2-1: config 0 has no interface number 0 [ 236.434752][ T6544] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 236.444333][ T6544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.452338][ T6544] usb 2-1: Product: syz [ 236.457428][ T6544] usb 2-1: Manufacturer: syz [ 236.462054][ T6544] usb 2-1: SerialNumber: syz [ 236.470347][ T6544] usb 2-1: config 0 descriptor?? [ 236.683585][ T6544] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 236.691777][ T6544] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 82 [ 236.709671][ T6544] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 236.719399][ T6544] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 236.729465][ T6544] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 236.744461][ T6544] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 236.887022][ T6544] usb 4-1: USB disconnect, device number 31 [ 237.068214][ T123] usb 1-1: USB disconnect, device number 32 [ 237.207101][ T8145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.681'. [ 237.216977][ T30] audit: type=1400 audit(1764937987.401:1090): avc: denied { setopt } for pid=8123 comm="syz.1.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.305895][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 237.667722][ T30] audit: type=1400 audit(1764937987.421:1091): avc: denied { read } for pid=8123 comm="syz.1.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.709645][ T30] audit: type=1400 audit(1764937987.431:1092): avc: denied { getopt } for pid=8123 comm="syz.1.678" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.151509][ T6544] usb 2-1: USB disconnect, device number 35 [ 238.165859][ T6544] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 238.214714][ T6544] keyspan 2-1:0.133: device disconnected [ 239.249412][ T30] audit: type=1400 audit(1764937989.431:1093): avc: denied { create } for pid=8147 comm="syz.2.685" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 239.260958][ T8161] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 239.305612][ T845] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 239.328928][ T8161] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 239.343133][ T6544] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 239.380679][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 239.412167][ T8161] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 239.440220][ T8161] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 239.462407][ T8169] overlayfs: failed to resolve './file2': -2 [ 239.503746][ T6544] usb 1-1: Using ep0 maxpacket: 32 [ 239.510160][ T845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.510777][ T6544] usb 1-1: unable to get BOS descriptor or descriptor too short [ 239.529217][ T6544] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 239.575388][ T6544] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 239.585697][ T6544] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.591473][ T845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 239.602976][ T6544] usb 1-1: Product: syz [ 239.611808][ T6544] usb 1-1: Manufacturer: syz [ 239.623416][ T845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.629863][ T6544] usb 1-1: SerialNumber: syz [ 239.638303][ T123] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 239.643877][ T845] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 239.692236][ T845] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.722198][ T845] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.732293][ T845] usb 5-1: Manufacturer: syz [ 239.755483][ T845] usb 5-1: config 0 descriptor?? [ 239.813023][ T123] usb 2-1: Using ep0 maxpacket: 16 [ 239.819807][ T123] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.849904][ T123] usb 2-1: config 0 interface 0 has no altsetting 0 [ 239.880255][ T123] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 239.889836][ T6544] usb 1-1: Limiting number of CPorts to U8_MAX [ 239.924347][ T6544] usb 1-1: Not enough endpoints found in device, aborting! [ 239.936544][ T123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.955428][ T123] usb 2-1: config 0 descriptor?? [ 239.995102][ T123] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 240.175895][ T5879] usb 1-1: USB disconnect, device number 33 [ 240.653140][ T845] rc_core: IR keymap rc-hauppauge not found [ 240.659046][ T845] Registered IR keymap rc-empty [ 240.678207][ T845] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.724037][ T845] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.753720][ T845] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 240.768535][ T845] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 240.840902][ T30] audit: type=1400 audit(1764937991.021:1094): avc: denied { unlink } for pid=5831 comm="syz-executor" name="file0" dev="tmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 240.882073][ T845] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.915105][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 240.933610][ T845] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.953713][ T845] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 240.976236][ T845] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.004036][ T845] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.033280][ T845] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.053395][ T845] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.093224][ T845] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.123229][ T845] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.143231][ T845] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 241.164759][ T845] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 241.194859][ T845] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 241.220526][ T845] usb 5-1: USB disconnect, device number 36 [ 241.233716][ T123] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 241.403262][ T123] usb 3-1: Using ep0 maxpacket: 16 [ 241.412248][ T123] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 241.425867][ T123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.448649][ T123] usb 3-1: Product: syz [ 241.457104][ T8192] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 241.478075][ T123] usb 3-1: Manufacturer: syz [ 241.507241][ T123] usb 3-1: SerialNumber: syz [ 241.515161][ T123] usb 3-1: config 0 descriptor?? [ 241.528187][ T123] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 241.796754][ T8185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.857244][ T8185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.286925][ T8185] xt_policy: output policy not valid in PREROUTING and INPUT [ 242.328010][ T123] usb 3-1: clie_3_5_startup: get config number failed: -32 [ 242.347517][ T123] visor 3-1:0.0: probe with driver visor failed with error -32 [ 242.360671][ T8202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.700'. [ 242.377946][ T845] usb 2-1: USB disconnect, device number 36 [ 242.664497][ T30] audit: type=1400 audit(1764937992.851:1095): avc: denied { bind } for pid=8207 comm="syz.1.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.810093][ T30] audit: type=1400 audit(1764937992.991:1096): avc: denied { name_bind } for pid=8210 comm="syz.1.704" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 243.060287][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 243.090617][ T8218] FAULT_INJECTION: forcing a failure. [ 243.090617][ T8218] name failslab, interval 1, probability 0, space 0, times 0 [ 243.106537][ T8220] tmpfs: Unknown parameter 'qqoTa' [ 243.117892][ T8218] CPU: 1 UID: 0 PID: 8218 Comm: syz.1.705 Not tainted syzkaller #0 PREEMPT(full) [ 243.117913][ T8218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.117922][ T8218] Call Trace: [ 243.117928][ T8218] [ 243.117934][ T8218] dump_stack_lvl+0x16c/0x1f0 [ 243.117960][ T8218] should_fail_ex+0x512/0x640 [ 243.117982][ T8218] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 243.118006][ T8218] should_failslab+0xc2/0x120 [ 243.118032][ T8218] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 243.118052][ T8218] ? __alloc_skb+0x156/0x410 [ 243.118077][ T8218] ? __alloc_skb+0x156/0x410 [ 243.118096][ T8218] __alloc_skb+0x156/0x410 [ 243.118114][ T8218] ? __alloc_skb+0x35d/0x410 [ 243.118133][ T8218] ? __pfx___alloc_skb+0x10/0x10 [ 243.118153][ T8218] ? netlink_autobind.isra.0+0x158/0x370 [ 243.118177][ T8218] netlink_alloc_large_skb+0x69/0x140 [ 243.118196][ T8218] netlink_sendmsg+0x698/0xdd0 [ 243.118225][ T8218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.118250][ T8218] ____sys_sendmsg+0xa5d/0xc30 [ 243.118267][ T8218] ? copy_msghdr_from_user+0x10a/0x160 [ 243.118289][ T8218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.118303][ T8218] ? __lock_acquire+0x433/0x22f0 [ 243.118334][ T8218] ___sys_sendmsg+0x134/0x1d0 [ 243.118358][ T8218] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.118380][ T8218] ? __lock_acquire+0x433/0x22f0 [ 243.118428][ T8218] __sys_sendmsg+0x16d/0x220 [ 243.118450][ T8218] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.118486][ T8218] do_syscall_64+0xcd/0xf80 [ 243.118506][ T8218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.118524][ T8218] RIP: 0033:0x7f5b3cb8f749 [ 243.118538][ T8218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.118553][ T8218] RSP: 002b:00007f5b3daa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.118569][ T8218] RAX: ffffffffffffffda RBX: 00007f5b3cde6090 RCX: 00007f5b3cb8f749 [ 243.118580][ T8218] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000003 [ 243.118590][ T8218] RBP: 00007f5b3daa0090 R08: 0000000000000000 R09: 0000000000000000 [ 243.118599][ T8218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.118608][ T8218] R13: 00007f5b3cde6128 R14: 00007f5b3cde6090 R15: 00007ffde3f49788 [ 243.118630][ T8218] [ 243.483511][ T8225] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 243.493138][ T5893] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 243.522054][ T30] audit: type=1400 audit(1764937993.701:1097): avc: denied { bind } for pid=8226 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.663164][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 243.670150][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 243.679670][ T5893] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 243.715561][ T5893] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 243.725413][ T5879] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 243.735297][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.793792][ T30] audit: type=1400 audit(1764937993.921:1098): avc: denied { setopt } for pid=8226 comm="syz.4.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.829832][ T5893] usb 4-1: Product: syz [ 243.840826][ T5893] usb 4-1: Manufacturer: syz [ 243.848461][ T5893] usb 4-1: SerialNumber: syz [ 243.973370][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 243.980559][ T5879] usb 1-1: unable to get BOS descriptor or descriptor too short [ 244.004486][ T5879] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 244.035511][ T5879] usb 1-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 244.073412][ T5893] usb 4-1: Limiting number of CPorts to U8_MAX [ 244.081004][ T5879] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 244.090847][ T5893] usb 4-1: Not enough endpoints found in device, aborting! [ 244.103188][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.129827][ T5879] usb 1-1: Product: syz [ 244.141745][ T5879] usb 1-1: Manufacturer: syz [ 244.159854][ T5879] usb 1-1: SerialNumber: syz [ 244.275487][ T5879] usb 4-1: USB disconnect, device number 32 [ 244.458196][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.472154][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.585996][ T8237] netlink: 388 bytes leftover after parsing attributes in process `syz.1.712'. [ 244.769393][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 244.883611][ T8244] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 245.409099][ T123] usb 3-1: USB disconnect, device number 29 [ 245.427552][ T30] audit: type=1400 audit(1764937995.571:1099): avc: denied { read } for pid=8249 comm="syz.1.717" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 245.508242][ T30] audit: type=1400 audit(1764937995.571:1100): avc: denied { open } for pid=8249 comm="syz.1.717" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 245.515913][ T8257] binder: 8256:8257 ioctl c0306201 0 returned -14 [ 245.644242][ T30] audit: type=1400 audit(1764937995.691:1101): avc: denied { call } for pid=8256 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 245.712127][ T8253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 245.734057][ T8253] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 245.821569][ T8253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 245.828848][ T8253] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 245.924686][ T8253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 245.931831][ T8253] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 245.958186][ T8253] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 245.967911][ T8253] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 246.004663][ T8253] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 246.033275][ T8253] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 246.142284][ T123] usb 1-1: USB disconnect, device number 34 [ 246.283270][ T6544] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 246.435609][ T6544] usb 3-1: Using ep0 maxpacket: 32 [ 246.444005][ T6544] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.457956][ T6544] usb 3-1: config 0 has no interfaces? [ 246.464332][ T6544] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 246.475832][ T6544] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.484408][ T8268] tmpfs: Unknown parameter 'qqoTa' [ 246.504936][ T6544] usb 3-1: config 0 descriptor?? [ 246.548347][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 246.947289][ T30] audit: type=1400 audit(1764937997.131:1102): avc: denied { write } for pid=8278 comm="syz.4.726" name="wireless" dev="proc" ino=4026532979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 247.246618][ T8287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.727'. [ 247.264333][ T8287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.727'. [ 247.613943][ T5893] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 247.653087][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 247.687593][ T8294] binder: 8293:8294 ioctl c0306201 0 returned -14 [ 247.783189][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 247.894331][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 247.973287][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 248.027879][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 248.027886][ T5893] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.027913][ T5893] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.056328][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 248.131933][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.154854][ T5893] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 248.178134][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.197310][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 248.216017][ T5893] usb 1-1: config 0 descriptor?? [ 248.593404][ T123] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 248.826807][ T5893] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 248.838648][ T8312] syz.1.735 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 248.857461][ T123] usb 5-1: Using ep0 maxpacket: 8 [ 248.875787][ T123] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.896234][ T123] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 248.930425][ T123] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 248.956733][ T5893] usb 3-1: USB disconnect, device number 30 [ 248.961623][ T123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.996433][ T123] usb 5-1: config 0 descriptor?? [ 249.110534][ T5879] usb 1-1: USB disconnect, device number 35 [ 249.138053][ T8322] tmpfs: Unknown parameter 'qqoTa' [ 249.454856][ T8326] binder: 8325:8326 ioctl c0306201 0 returned -14 [ 249.518197][ T8318] netlink: 388 bytes leftover after parsing attributes in process `syz.1.736'. [ 249.828061][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 249.977265][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 250.053413][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 250.054727][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 250.133675][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 251.572349][ T5879] usb 5-1: USB disconnect, device number 37 [ 251.873011][ T5893] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 251.933675][ T123] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 252.043286][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 252.113174][ T123] usb 2-1: Using ep0 maxpacket: 32 [ 252.187856][ T5893] usb 3-1: unable to get BOS descriptor or descriptor too short [ 252.203812][ T5893] usb 3-1: config 4 interface 0 has no altsetting 0 [ 252.219656][ T123] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.221931][ T5893] usb 3-1: string descriptor 0 read error: -22 [ 252.252374][ T5893] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 252.252435][ T123] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 252.263167][ T5893] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 252.390917][ T5893] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 252.443266][ T123] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 252.461907][ T5893] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 252.485604][ T5893] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 252.494541][ T5893] usb 3-1: media controller created [ 252.519324][ T123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.526776][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.545135][ T123] usb 2-1: config 0 descriptor?? [ 253.174168][ T845] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 253.321065][ T30] audit: type=1400 audit(1764938003.501:1103): avc: denied { create } for pid=8377 comm="syz.3.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 253.371404][ T30] audit: type=1400 audit(1764938003.531:1104): avc: denied { ioctl } for pid=8377 comm="syz.3.755" path="socket:[18516]" dev="sockfs" ino=18516 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 253.423333][ T845] usb 5-1: Using ep0 maxpacket: 16 [ 253.430555][ T845] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.447158][ T845] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.459149][ T845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 253.468392][ T845] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 253.479864][ T845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.598623][ T845] usb 5-1: config 0 descriptor?? [ 254.189727][ T5893] zl10353_read_register: readreg error (reg=127, ret==0) [ 254.449199][ T845] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 254.519805][ T8398] tmpfs: Unknown parameter 'qqoTa' [ 254.523964][ T8395] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 254.530596][ T5893] usb 3-1: USB disconnect, device number 31 [ 254.626094][ T123] usb 5-1: USB disconnect, device number 38 [ 254.699799][ T845] usb 2-1: USB disconnect, device number 37 [ 255.258098][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.264769][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.435322][ T8414] tmpfs: Bad value for 'mpol' [ 255.484166][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 255.549407][ T8421] FAULT_INJECTION: forcing a failure. [ 255.549407][ T8421] name failslab, interval 1, probability 0, space 0, times 0 [ 255.578603][ T30] audit: type=1400 audit(1764938005.761:1105): avc: denied { lock } for pid=8416 comm="syz.3.767" path="socket:[18587]" dev="sockfs" ino=18587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.580650][ T8421] CPU: 1 UID: 0 PID: 8421 Comm: syz.0.766 Not tainted syzkaller #0 PREEMPT(full) [ 255.580669][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.580677][ T8421] Call Trace: [ 255.580683][ T8421] [ 255.580689][ T8421] dump_stack_lvl+0x16c/0x1f0 [ 255.580711][ T8421] should_fail_ex+0x512/0x640 [ 255.580733][ T8421] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 255.580757][ T8421] should_failslab+0xc2/0x120 [ 255.580780][ T8421] kmem_cache_alloc_noprof+0x75/0x760 [ 255.580797][ T8421] ? skb_clone+0x190/0x3f0 [ 255.580822][ T8421] ? skb_clone+0x190/0x3f0 [ 255.580841][ T8421] skb_clone+0x190/0x3f0 [ 255.580861][ T8421] netlink_deliver_tap+0xabd/0xd30 [ 255.580896][ T8421] netlink_unicast+0x64c/0x870 [ 255.580914][ T8421] ? __pfx_netlink_unicast+0x10/0x10 [ 255.580937][ T8421] netlink_sendmsg+0x8c8/0xdd0 [ 255.580956][ T8421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.580979][ T8421] ____sys_sendmsg+0xa5d/0xc30 [ 255.580995][ T8421] ? copy_msghdr_from_user+0x10a/0x160 [ 255.581015][ T8421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.581028][ T8421] ? __lock_acquire+0x433/0x22f0 [ 255.581058][ T8421] ___sys_sendmsg+0x134/0x1d0 [ 255.581080][ T8421] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.581099][ T8421] ? __lock_acquire+0x433/0x22f0 [ 255.581144][ T8421] __sys_sendmsg+0x16d/0x220 [ 255.581164][ T8421] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.581198][ T8421] do_syscall_64+0xcd/0xf80 [ 255.581217][ T8421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.581232][ T8421] RIP: 0033:0x7eff4bf8f749 [ 255.581245][ T8421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.581258][ T8421] RSP: 002b:00007eff4cec6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.581272][ T8421] RAX: ffffffffffffffda RBX: 00007eff4c1e6180 RCX: 00007eff4bf8f749 [ 255.581282][ T8421] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000003 [ 255.581290][ T8421] RBP: 00007eff4cec6090 R08: 0000000000000000 R09: 0000000000000000 [ 255.581299][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.581307][ T8421] R13: 00007eff4c1e6218 R14: 00007eff4c1e6180 R15: 00007ffdca43fdf8 [ 255.581328][ T8421] [ 255.681943][ T8419] Bluetooth: hci0: service_discovery: too big uuid_count value 18191 [ 255.937228][ T8410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.951216][ T8410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.065839][ T7311] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.083104][ T7311] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.133163][ T7311] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.166723][ T7311] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.696445][ T8445] geneve2: entered promiscuous mode [ 256.726727][ T7729] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 256.744951][ T8446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.772'. [ 256.924787][ T7729] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 256.941884][ T7729] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 256.953790][ T7729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 257.369849][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.778'. [ 257.406450][ T845] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 257.703632][ T5893] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 257.862679][ T8468] loop9: detected capacity change from 0 to 7 [ 257.883145][ T8468] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.898157][ T8468] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.912581][ T8468] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.933089][ T8468] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.942650][ T8468] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.963099][ T8468] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.982566][ T8468] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.993109][ T8468] ldm_validate_partition_table(): Disk read failed. [ 258.002555][ T8468] Buffer I/O error on dev loop9, logical block 0, async page read [ 258.026871][ T8468] Buffer I/O error on dev loop9, logical block 0, async page read [ 258.045107][ T8468] Buffer I/O error on dev loop9, logical block 0, async page read [ 258.071535][ T8468] Dev loop9: unable to read RDB block 0 [ 258.137639][ T8468] loop9: unable to read partition table [ 258.145254][ T8468] loop9: partition table beyond EOD, truncated [ 258.151454][ T8468] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 258.151454][ T8468] ) failed (rc=-5) [ 258.174365][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.779'. [ 258.204180][ T845] usb 2-1: Using ep0 maxpacket: 8 [ 258.304503][ T845] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 258.895095][ T845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.905808][ T845] usb 2-1: Product: syz [ 258.909987][ T845] usb 2-1: Manufacturer: syz [ 258.921261][ T845] usb 2-1: SerialNumber: syz [ 258.934768][ T845] usb 2-1: config 0 descriptor?? [ 258.943370][ T845] gspca_main: sq930x-2.14.0 probing 2770:930c [ 259.014414][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 259.024710][ T5893] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.055710][ T5893] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.083640][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 259.090281][ T5893] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 259.103101][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.114840][ T5893] usb 1-1: config 0 descriptor?? [ 259.203218][ T5879] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 259.313284][ T37] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 259.333513][ T5879] usb 5-1: device descriptor read/64, error -71 [ 259.356845][ T845] gspca_sq930x: ucbus_write failed -71 [ 259.473126][ T37] usb 3-1: Using ep0 maxpacket: 8 [ 259.487083][ T37] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 259.495827][ T37] usb 3-1: config 179 has no interface number 0 [ 259.504082][ T37] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 259.544756][ T37] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 259.603276][ T5879] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 259.625590][ T5893] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 259.637505][ T845] gspca_sq930x: Sensor ov9630 not yet treated [ 259.643928][ T37] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 259.661270][ T845] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 259.671528][ T37] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 259.685548][ T845] usb 2-1: USB disconnect, device number 38 [ 259.698937][ T37] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 259.730282][ T37] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 259.733581][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 259.772297][ T5893] usb 1-1: USB disconnect, device number 36 [ 259.779458][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.793048][ T5879] usb 5-1: device descriptor read/64, error -71 [ 259.796518][ T8479] fido_id[8479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 259.829328][ T8475] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 259.896582][ T30] audit: type=1400 audit(1764938010.081:1106): avc: denied { setattr } for pid=8482 comm="syz.3.786" name="dsp" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 259.924871][ T5879] usb usb5-port1: attempt power cycle [ 259.934194][ T8483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8483 comm=syz.3.786 [ 259.948792][ T8483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8483 comm=syz.3.786 [ 260.047459][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.058801][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.068181][ T30] audit: type=1400 audit(1764938010.261:1107): avc: denied { create } for pid=8474 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 260.136775][ T30] audit: type=1400 audit(1764938010.321:1108): avc: denied { write } for pid=8474 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 260.181988][ T30] audit: type=1400 audit(1764938010.351:1109): avc: denied { ioctl } for pid=8474 comm="syz.2.783" path="socket:[17837]" dev="sockfs" ino=17837 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 261.027312][ T5879] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 261.213807][ T5879] usb 5-1: device descriptor read/8, error -71 [ 261.216697][ T30] audit: type=1400 audit(1764938011.401:1110): avc: denied { append } for pid=8494 comm="syz.0.789" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 261.302111][ T30] audit: type=1400 audit(1764938011.431:1111): avc: denied { ioctl } for pid=8494 comm="syz.0.789" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 261.663650][ T8495] XFS (nullb0): Invalid superblock magic number [ 262.198084][ T6544] usb 3-1: USB disconnect, device number 32 [ 262.198083][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 262.198219][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 262.417468][ T8515] FAULT_INJECTION: forcing a failure. [ 262.417468][ T8515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.432035][ T8515] CPU: 0 UID: 0 PID: 8515 Comm: syz.1.792 Not tainted syzkaller #0 PREEMPT(full) [ 262.432058][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 262.432064][ T8515] Call Trace: [ 262.432069][ T8515] [ 262.432074][ T8515] dump_stack_lvl+0x16c/0x1f0 [ 262.432092][ T8515] should_fail_ex+0x512/0x640 [ 262.432115][ T8515] _copy_to_user+0x32/0xd0 [ 262.432131][ T8515] simple_read_from_buffer+0xcb/0x170 [ 262.432149][ T8515] proc_fail_nth_read+0x197/0x240 [ 262.432164][ T8515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.432178][ T8515] ? rw_verify_area+0xcf/0x6c0 [ 262.432193][ T8515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.432206][ T8515] vfs_read+0x1e4/0xcf0 [ 262.432221][ T8515] ? __pfx___mutex_lock+0x10/0x10 [ 262.432236][ T8515] ? __pfx_vfs_read+0x10/0x10 [ 262.432255][ T8515] ? __fget_files+0x20e/0x3c0 [ 262.432269][ T8515] ksys_read+0x12a/0x250 [ 262.432284][ T8515] ? __pfx_ksys_read+0x10/0x10 [ 262.432303][ T8515] do_syscall_64+0xcd/0xf80 [ 262.432317][ T8515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.432328][ T8515] RIP: 0033:0x7f5b3cb8e15c [ 262.432337][ T8515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 262.432347][ T8515] RSP: 002b:00007f5b3daa0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.432358][ T8515] RAX: ffffffffffffffda RBX: 00007f5b3cde6090 RCX: 00007f5b3cb8e15c [ 262.432365][ T8515] RDX: 000000000000000f RSI: 00007f5b3daa00a0 RDI: 0000000000000009 [ 262.432372][ T8515] RBP: 00007f5b3daa0090 R08: 0000000000000000 R09: 0000000000000000 [ 262.432378][ T8515] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 262.432384][ T8515] R13: 00007f5b3cde6128 R14: 00007f5b3cde6090 R15: 00007ffde3f49788 [ 262.432398][ T8515] [ 262.866863][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 263.073524][ T5879] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 263.094448][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 263.102190][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.125503][ T5879] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 263.150976][ T5879] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 263.164520][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.202091][ T5879] usb 5-1: config 0 descriptor?? [ 263.203145][ T6544] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 263.274810][ T30] audit: type=1400 audit(1764938013.461:1112): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 263.332997][ T37] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 263.341982][ T30] audit: type=1400 audit(1764938013.521:1113): avc: denied { setopt } for pid=8533 comm="syz.3.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 263.361908][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 263.373302][ T6544] usb 1-1: Using ep0 maxpacket: 32 [ 263.380006][ T6544] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 263.401841][ T6544] usb 1-1: config 0 has no interface number 0 [ 263.410091][ T6544] usb 1-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.426101][ T6544] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 263.439076][ T6544] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.447960][ T6544] usb 1-1: Product: syz [ 263.452241][ T6544] usb 1-1: Manufacturer: syz [ 263.458359][ T6544] usb 1-1: SerialNumber: syz [ 263.471862][ T6544] usb 1-1: config 0 descriptor?? [ 263.534621][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 263.552267][ T37] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 263.575279][ T37] usb 3-1: can't read configurations, error -61 [ 263.723165][ T37] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 263.963475][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 263.977640][ T37] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 263.994320][ T37] usb 3-1: can't read configurations, error -61 [ 264.143488][ T37] usb usb3-port1: attempt power cycle [ 264.733346][ T37] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 264.785451][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 264.824661][ T37] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 264.843259][ T37] usb 3-1: can't read configurations, error -61 [ 265.003241][ T37] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 265.023695][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 265.043728][ T37] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 265.051322][ T37] usb 3-1: can't read configurations, error -61 [ 265.074060][ T37] usb usb3-port1: unable to enumerate USB device [ 265.123190][ T30] audit: type=1400 audit(1764938015.291:1114): avc: denied { kexec_image_load } for pid=8550 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 265.940109][ T6544] usb 5-1: USB disconnect, device number 42 [ 266.733606][ T845] usb 1-1: USB disconnect, device number 37 [ 267.003170][ T37] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 267.173106][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 267.179579][ T37] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.193740][ T37] usb 2-1: config 0 interface 0 has no altsetting 0 [ 267.217321][ T8586] netlink: 388 bytes leftover after parsing attributes in process `syz.2.814'. [ 267.289459][ T8588] Set syz1 is full, maxelem 65536 reached [ 267.335624][ T37] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 267.365462][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.410150][ T37] usb 2-1: config 0 descriptor?? [ 267.714171][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 267.732534][ T123] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 267.748959][ T8606] FAULT_INJECTION: forcing a failure. [ 267.748959][ T8606] name failslab, interval 1, probability 0, space 0, times 0 [ 267.791792][ T8606] CPU: 0 UID: 0 PID: 8606 Comm: syz.3.821 Not tainted syzkaller #0 PREEMPT(full) [ 267.791818][ T8606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.791827][ T8606] Call Trace: [ 267.791833][ T8606] [ 267.791840][ T8606] dump_stack_lvl+0x16c/0x1f0 [ 267.791867][ T8606] should_fail_ex+0x512/0x640 [ 267.791890][ T8606] ? __kmalloc_noprof+0xca/0x8f0 [ 267.791910][ T8606] should_failslab+0xc2/0x120 [ 267.791933][ T8606] __kmalloc_noprof+0xdd/0x8f0 [ 267.791950][ T8606] ? ethnl_default_doit+0x1c0/0xe30 [ 267.791979][ T8606] ? ethnl_default_doit+0x1c0/0xe30 [ 267.792001][ T8606] ethnl_default_doit+0x1c0/0xe30 [ 267.792038][ T8606] ? __nla_parse+0x40/0x60 [ 267.792054][ T8606] ? __pfx_ethnl_default_doit+0x10/0x10 [ 267.792077][ T8606] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 267.792097][ T8606] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 267.792120][ T8606] genl_family_rcv_msg_doit+0x209/0x2f0 [ 267.792140][ T8606] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 267.792159][ T8606] ? genl_get_cmd+0x194/0x580 [ 267.792184][ T8606] ? __radix_tree_lookup+0x21f/0x2c0 [ 267.792205][ T8606] genl_rcv_msg+0x55c/0x800 [ 267.792226][ T8606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 267.792245][ T8606] ? __pfx_ethnl_default_doit+0x10/0x10 [ 267.792279][ T8606] netlink_rcv_skb+0x158/0x420 [ 267.792296][ T8606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 267.792314][ T8606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 267.792339][ T8606] ? netlink_deliver_tap+0x1ae/0xd30 [ 267.792367][ T8606] genl_rcv+0x28/0x40 [ 267.792382][ T8606] netlink_unicast+0x5aa/0x870 [ 267.792402][ T8606] ? __pfx_netlink_unicast+0x10/0x10 [ 267.792429][ T8606] netlink_sendmsg+0x8c8/0xdd0 [ 267.792453][ T8606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.792477][ T8606] ____sys_sendmsg+0xa5d/0xc30 [ 267.792496][ T8606] ? copy_msghdr_from_user+0x10a/0x160 [ 267.792518][ T8606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.792533][ T8606] ? __lock_acquire+0x433/0x22f0 [ 267.792567][ T8606] ___sys_sendmsg+0x134/0x1d0 [ 267.792591][ T8606] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.792612][ T8606] ? __lock_acquire+0x433/0x22f0 [ 267.792663][ T8606] __sys_sendmsg+0x16d/0x220 [ 267.792685][ T8606] ? __pfx___sys_sendmsg+0x10/0x10 [ 267.792724][ T8606] do_syscall_64+0xcd/0xf80 [ 267.792745][ T8606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.792762][ T8606] RIP: 0033:0x7f6628f8f749 [ 267.792776][ T8606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.792792][ T8606] RSP: 002b:00007f6629d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.792808][ T8606] RAX: ffffffffffffffda RBX: 00007f66291e6090 RCX: 00007f6628f8f749 [ 267.792819][ T8606] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000003 [ 267.792829][ T8606] RBP: 00007f6629d97090 R08: 0000000000000000 R09: 0000000000000000 [ 267.792838][ T8606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.792848][ T8606] R13: 00007f66291e6128 R14: 00007f66291e6090 R15: 00007fff1f2ae118 [ 267.792872][ T8606] [ 268.210895][ T123] usb 1-1: Using ep0 maxpacket: 32 [ 268.218143][ T123] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 268.227596][ T123] usb 1-1: config 0 has no interface number 0 [ 268.234294][ T123] usb 1-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 268.461872][ T37] usbhid 2-1:0.0: can't add hid device: -71 [ 268.469995][ T123] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 268.480527][ T123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.493550][ T37] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 268.501535][ T123] usb 1-1: Product: syz [ 268.520077][ T123] usb 1-1: Manufacturer: syz [ 268.539624][ T123] usb 1-1: SerialNumber: syz [ 268.567096][ T37] usb 2-1: USB disconnect, device number 39 [ 268.567963][ T123] usb 1-1: config 0 descriptor?? [ 269.064658][ T8619] Set syz1 is full, maxelem 65536 reached [ 269.923507][ T37] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 270.133395][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 270.337068][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 270.393224][ T37] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 270.400825][ T37] usb 5-1: can't read configurations, error -71 [ 271.347646][ T5893] usb 1-1: USB disconnect, device number 38 [ 271.415555][ T30] audit: type=1400 audit(1764938021.601:1115): avc: denied { ioctl } for pid=8642 comm="syz.1.833" path="socket:[19141]" dev="sockfs" ino=19141 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.514042][ T30] audit: type=1400 audit(1764938021.701:1116): avc: denied { accept } for pid=8654 comm="syz.0.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 271.553304][ T30] audit: type=1400 audit(1764938021.701:1117): avc: denied { ioctl } for pid=8654 comm="syz.0.837" path="socket:[18149]" dev="sockfs" ino=18149 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 271.713181][ T5904] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 271.789466][ T30] audit: type=1400 audit(1764938021.971:1118): avc: denied { getopt } for pid=8663 comm="syz.2.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 271.863153][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 271.870335][ T5904] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.881779][ T6544] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 271.889903][ T123] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 271.898855][ T5904] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.905978][ T5904] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 271.916273][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.926250][ T5904] usb 5-1: config 0 descriptor?? [ 272.023221][ T5893] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 272.063363][ T123] usb 4-1: Using ep0 maxpacket: 8 [ 272.070935][ T6544] usb 2-1: Using ep0 maxpacket: 32 [ 272.078551][ T6544] usb 2-1: unable to get BOS descriptor or descriptor too short [ 272.087424][ T123] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 272.097111][ T123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.106568][ T6544] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 272.117100][ T123] usb 4-1: Product: syz [ 272.121272][ T123] usb 4-1: Manufacturer: syz [ 272.126366][ T123] usb 4-1: SerialNumber: syz [ 272.133222][ T123] usb 4-1: config 0 descriptor?? [ 272.139620][ T6544] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 272.152216][ T123] gspca_main: sq930x-2.14.0 probing 2770:930c [ 272.159326][ T6544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.168002][ T6544] usb 2-1: Product: syz [ 272.172238][ T6544] usb 2-1: Manufacturer: syz [ 272.174198][ T5893] usb 3-1: config 1 interface 0 has no altsetting 0 [ 272.177322][ T6544] usb 2-1: SerialNumber: syz [ 272.205895][ T5893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 272.216087][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.226562][ T5893] usb 3-1: Product: syz [ 272.230758][ T5893] usb 3-1: Manufacturer: syz [ 272.236407][ T5893] usb 3-1: SerialNumber: syz [ 272.247572][ T8666] netlink: 200 bytes leftover after parsing attributes in process `syz.0.842'. [ 272.313631][ T8667] syz.0.842 uses obsolete (PF_INET,SOCK_PACKET) [ 272.320696][ T8667] syzkaller1: entered promiscuous mode [ 272.326823][ T8667] syzkaller1: entered allmulticast mode [ 272.427662][ T8668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.442570][ T6544] usb 2-1: Limiting number of CPorts to U8_MAX [ 272.460092][ T6544] usb 2-1: Not enough endpoints found in device, aborting! [ 272.479761][ T8668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.569216][ T8671] netlink: 96 bytes leftover after parsing attributes in process `syz.0.843'. [ 272.829423][ T5893] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 272.829546][ T5904] usbhid 5-1:0.0: can't add hid device: -71 [ 272.863750][ T123] gspca_sq930x: reg_r 001f failed -110 [ 272.869649][ T123] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 272.874886][ T30] audit: type=1400 audit(1764938023.061:1119): avc: denied { read } for pid=8663 comm="syz.2.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 272.878666][ T5904] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 272.923062][ T123] usb 2-1: USB disconnect, device number 40 [ 273.010387][ T5904] usb 5-1: USB disconnect, device number 45 [ 273.033451][ T8674] netlink: 140 bytes leftover after parsing attributes in process `syz.0.844'. [ 273.283564][ T30] audit: type=1400 audit(1764938023.471:1120): avc: denied { getopt } for pid=8656 comm="syz.3.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 273.561788][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.646548][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.222756][ T30] audit: type=1400 audit(1764938024.361:1121): avc: denied { connect } for pid=8681 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.393243][ T5904] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 274.449341][ T30] audit: type=1400 audit(1764938024.631:1122): avc: denied { write } for pid=8689 comm="syz.4.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 274.480472][ T8690] overlayfs: failed to resolve './file0': -2 [ 274.563197][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 274.573385][ T5904] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 274.584548][ T5904] usb 2-1: config 0 has no interface number 0 [ 274.598534][ T5904] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 274.611476][ T5904] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 274.621467][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.630056][ T5904] usb 2-1: Product: syz [ 274.638210][ T5904] usb 2-1: Manufacturer: syz [ 274.647735][ T5904] usb 2-1: SerialNumber: syz [ 274.677788][ T5904] usb 2-1: config 0 descriptor?? [ 274.693469][ T5904] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 274.705629][ T5904] em28xx 2-1:0.132: Video interface 132 found: [ 274.730581][ T8688] Set syz1 is full, maxelem 65536 reached [ 274.893186][ T123] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 275.088214][ T5904] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 275.137747][ C0] usblp0: nonzero write bulk status received: -71 [ 275.138836][ T5893] usb 3-1: USB disconnect, device number 37 [ 275.211461][ T8678] usblp0: removed [ 275.297274][ T5904] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 275.319945][ T5904] em28xx 2-1:0.132: board has no eeprom [ 275.355969][ T123] usb 5-1: unable to get BOS descriptor or descriptor too short [ 275.372054][ T8704] tmpfs: Unknown parameter 'qqoTa' [ 275.380668][ T123] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 275.389674][ T123] usb 5-1: can't read configurations, error -71 [ 275.402596][ T5904] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 275.411187][ T5904] em28xx 2-1:0.132: analog set to bulk mode. [ 275.431172][ T6544] em28xx 2-1:0.132: Registering V4L2 extension [ 275.441041][ T5904] usb 2-1: USB disconnect, device number 41 [ 275.456164][ T5904] em28xx 2-1:0.132: Disconnecting em28xx [ 275.546571][ T6544] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 275.555869][ T6544] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 275.579675][ T6544] em28xx 2-1:0.132: No AC97 audio processor [ 275.622172][ T6544] usb 2-1: Decoder not found [ 275.633090][ T6544] em28xx 2-1:0.132: failed to create media graph [ 275.646141][ T6544] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 275.647310][ T5893] usb 4-1: USB disconnect, device number 33 [ 275.661240][ T6544] em28xx 2-1:0.132: Remote control support is not available for this card. [ 275.681818][ T5904] em28xx 2-1:0.132: Closing input extension [ 275.711768][ T5904] em28xx 2-1:0.132: Freeing device [ 276.283734][ T5893] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 276.503097][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 276.535740][ T5893] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.547787][ T5893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 276.557094][ T5893] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 276.568262][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.653072][ T5893] usb 4-1: config 0 descriptor?? [ 277.692527][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 277.714465][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 277.867527][ T5893] usb 4-1: USB disconnect, device number 34 [ 279.620257][ T30] audit: type=1400 audit(1764938029.801:1123): avc: denied { ioctl } for pid=8741 comm="syz.3.865" path="/159/file0/file0" dev="fuse" ino=64 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 279.679796][ T8745] Bluetooth: hci0: service_discovery: too big uuid_count value 18191 [ 280.258159][ T8753] netlink: 96 bytes leftover after parsing attributes in process `syz.2.867'. [ 280.493116][ T30] audit: type=1400 audit(1764938030.671:1124): avc: denied { wake_alarm } for pid=8749 comm="syz.0.868" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 281.953475][ T30] audit: type=1400 audit(1764938031.831:1125): avc: denied { shutdown } for pid=8764 comm="syz.4.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 282.008048][ T8775] exFAT-fs (nullb0): invalid boot record signature [ 282.015324][ T8775] exFAT-fs (nullb0): failed to read boot sector [ 282.021620][ T8775] exFAT-fs (nullb0): failed to recognize exfat type [ 282.176074][ T30] audit: type=1400 audit(1764938031.831:1126): avc: denied { listen } for pid=8764 comm="syz.4.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 282.244369][ T8765] tipc: Started in network mode [ 282.262199][ T8765] tipc: Node identity 2e124a68939c, cluster identity 4711 [ 282.277581][ T30] audit: type=1400 audit(1764938032.431:1127): avc: denied { write } for pid=8762 comm="syz.1.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 282.435786][ T8765] tipc: Enabled bearer , priority 0 [ 282.444288][ T37] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 282.473716][ T8768] syzkaller0: entered promiscuous mode [ 282.483151][ T5879] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 282.491806][ T8768] syzkaller0: entered allmulticast mode [ 282.625408][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 282.703568][ T37] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.714375][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 282.724790][ T37] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 282.725721][ T8792] tipc: Resetting bearer [ 282.735137][ T5879] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.763802][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.773401][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 282.780040][ T5879] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 282.801884][ T37] usb 1-1: config 0 descriptor?? [ 282.813207][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.835971][ T5879] usb 3-1: config 0 descriptor?? [ 282.845765][ T8757] tipc: Resetting bearer [ 282.861897][ T8757] tipc: Disabling bearer [ 282.882538][ T6544] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 282.949253][ T8794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=8794 comm=syz.3.878 [ 283.013891][ T8796] tmpfs: Unknown parameter 'qqoTa' [ 283.044782][ T6544] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 283.057311][ T6544] usb 5-1: config 0 has no interface number 0 [ 283.075289][ T6544] usb 5-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=51.8f [ 283.095277][ T6544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.113133][ T6544] usb 5-1: Product: syz [ 283.123333][ T6544] usb 5-1: Manufacturer: syz [ 283.128129][ T6544] usb 5-1: SerialNumber: syz [ 283.157175][ T6544] usb 5-1: config 0 descriptor?? [ 283.641915][ T5879] usbhid 3-1:0.0: can't add hid device: -71 [ 283.648303][ T5879] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 283.663845][ T5879] usb 3-1: USB disconnect, device number 38 [ 284.165198][ T8807] netlink: 96 bytes leftover after parsing attributes in process `syz.1.883'. [ 284.205049][ T8812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.238173][ T8812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.433155][ T5879] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 284.443033][ T123] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 284.613066][ T5879] usb 3-1: Invalid ep0 maxpacket: 64 [ 284.742074][ T8814] netlink: 388 bytes leftover after parsing attributes in process `syz.1.885'. [ 284.754526][ T5879] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 284.913206][ T5879] usb 3-1: Invalid ep0 maxpacket: 64 [ 284.924926][ T5879] usb usb3-port1: attempt power cycle [ 285.141045][ T8837] overlay: ./file1 is not a directory [ 285.275094][ T5879] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 285.318610][ T5879] usb 3-1: Invalid ep0 maxpacket: 64 [ 285.378330][ T8838] usb usb8: usbfs: process 8838 (syz.3.889) did not claim interface 0 before use [ 285.422267][ T5904] usb 1-1: USB disconnect, device number 39 [ 285.463148][ T5879] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 285.495948][ T5879] usb 3-1: Invalid ep0 maxpacket: 64 [ 285.525296][ T5879] usb usb3-port1: unable to enumerate USB device [ 285.543325][ T8844] warning: `syz.3.889' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 285.637270][ T6544] gspca_main: spca501-2.14.0 probing 040a:0002 [ 285.676183][ T8849] FAULT_INJECTION: forcing a failure. [ 285.676183][ T8849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.695714][ T6544] gspca_spca501: reg write: error -71 [ 285.701456][ T6544] spca501 5-1:0.9: Reg write failed for 0x00,0xaa,0x00 [ 285.709041][ T6544] spca501 5-1:0.9: probe with driver spca501 failed with error -22 [ 285.726120][ T8849] CPU: 1 UID: 0 PID: 8849 Comm: syz.4.893 Not tainted syzkaller #0 PREEMPT(full) [ 285.726147][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.726158][ T8849] Call Trace: [ 285.726163][ T8849] [ 285.726169][ T8849] dump_stack_lvl+0x16c/0x1f0 [ 285.726196][ T8849] should_fail_ex+0x512/0x640 [ 285.726224][ T8849] _copy_from_user+0x2e/0xd0 [ 285.726247][ T8849] copy_msghdr_from_user+0x98/0x160 [ 285.726271][ T8849] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 285.726292][ T8849] ? __lock_acquire+0x433/0x22f0 [ 285.726321][ T8849] ___sys_sendmsg+0xfe/0x1d0 [ 285.726343][ T8849] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.726362][ T8849] ? __lock_acquire+0x433/0x22f0 [ 285.726406][ T8849] __sys_sendmsg+0x16d/0x220 [ 285.726428][ T8849] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.726464][ T8849] do_syscall_64+0xcd/0xf80 [ 285.726485][ T8849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.726502][ T8849] RIP: 0033:0x7f87b538f749 [ 285.726516][ T8849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.726532][ T8849] RSP: 002b:00007f87b6309038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.726548][ T8849] RAX: ffffffffffffffda RBX: 00007f87b55e5fa0 RCX: 00007f87b538f749 [ 285.726559][ T8849] RDX: 0000000000008042 RSI: 0000200000000240 RDI: 0000000000000003 [ 285.726569][ T8849] RBP: 00007f87b6309090 R08: 0000000000000000 R09: 0000000000000000 [ 285.726579][ T8849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.726589][ T8849] R13: 00007f87b55e6038 R14: 00007f87b55e5fa0 R15: 00007ffc946c53d8 [ 285.726610][ T8849] [ 285.910068][ T6544] usb 5-1: USB disconnect, device number 48 [ 286.437634][ T6544] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 286.603135][ T6544] usb 5-1: Using ep0 maxpacket: 16 [ 286.611135][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.898'. [ 286.620947][ T6544] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 286.638592][ T6544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.668460][ T8863] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 286.688056][ T6544] usb 5-1: Product: syz [ 286.692266][ T6544] usb 5-1: Manufacturer: syz [ 286.708822][ T6544] usb 5-1: SerialNumber: syz [ 286.721555][ T6544] usb 5-1: config 0 descriptor?? [ 286.730873][ T6544] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 286.767687][ T30] audit: type=1400 audit(1764938036.951:1128): avc: denied { write } for pid=8862 comm="syz.1.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 286.861947][ T8875] bridge0: entered promiscuous mode [ 287.037344][ T8877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.082931][ T8877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.107271][ T6544] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 287.676603][ T5893] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 287.804804][ T8890] input: syz1 as /devices/virtual/input/input14 [ 287.853311][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 287.860102][ T5893] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 287.873606][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.893273][ T5893] usb 3-1: config 0 descriptor?? [ 287.907674][ T5893] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 288.023107][ T5879] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 288.107729][ T5893] gspca_vc032x: reg_r err -32 [ 288.122512][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.127813][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.143074][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.148388][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.154681][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.160161][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.166035][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.171326][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.177859][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 288.184658][ T5879] usb 2-1: no configurations [ 288.189266][ T5879] usb 2-1: can't read configurations, error -22 [ 288.196297][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.202308][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.208393][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.214746][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.220043][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.225886][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.231173][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.237056][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.242346][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.249700][ T5893] gspca_vc032x: I2c Bus Busy Wait 00 [ 288.255685][ T5893] gspca_vc032x: Unknown sensor... [ 288.260771][ T5893] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 288.323178][ T5879] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 288.474855][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 288.481682][ T5879] usb 2-1: no configurations [ 288.489032][ T5879] usb 2-1: can't read configurations, error -22 [ 288.496617][ T5879] usb usb2-port1: attempt power cycle [ 288.812398][ T30] audit: type=1400 audit(1764938038.991:1129): avc: denied { name_bind } for pid=8897 comm="syz.0.909" src=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 288.853235][ T5879] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 288.854600][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.908'. [ 288.873581][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 288.879499][ T5879] usb 2-1: no configurations [ 288.888268][ T5879] usb 2-1: can't read configurations, error -22 [ 288.925180][ T8903] netlink: 52 bytes leftover after parsing attributes in process `syz.0.910'. [ 288.972072][ T5893] usb 5-1: USB disconnect, device number 49 [ 289.038125][ T5879] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 289.074195][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 289.076042][ T8914] cgroup: none used incorrectly [ 289.087925][ T5879] usb 2-1: no configurations [ 289.115527][ T5879] usb 2-1: can't read configurations, error -22 [ 289.439146][ T5879] usb usb2-port1: unable to enumerate USB device [ 289.473734][ T30] audit: type=1400 audit(1764938039.651:1130): avc: denied { setopt } for pid=8912 comm="syz.0.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 289.599016][ T8922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 290.174118][ T30] audit: type=1400 audit(1764938040.361:1131): avc: denied { read } for pid=8929 comm="syz.4.916" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 290.197938][ T30] audit: type=1400 audit(1764938040.361:1132): avc: denied { open } for pid=8929 comm="syz.4.916" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 290.222065][ T30] audit: type=1400 audit(1764938040.381:1133): avc: denied { ioctl } for pid=8929 comm="syz.4.916" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 290.334728][ T5879] usb 3-1: USB disconnect, device number 43 [ 290.426100][ T8935] netlink: 96 bytes leftover after parsing attributes in process `syz.2.917'. [ 290.576638][ T8946] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 290.606229][ T30] audit: type=1400 audit(1764938040.791:1134): avc: denied { listen } for pid=8945 comm="syz.0.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.643976][ T5827] ================================================================== [ 290.652067][ T5827] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xddd/0xfa0 [ 290.659980][ T5827] Read of size 8 at addr ffff888076996480 by task kworker/u9:2/5827 [ 290.667958][ T5827] [ 290.670289][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 290.670313][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.670326][ T5827] Workqueue: hci2 hci_rx_work [ 290.670348][ T5827] Call Trace: [ 290.670354][ T5827] [ 290.670362][ T5827] dump_stack_lvl+0x116/0x1f0 [ 290.670388][ T5827] print_report+0xcd/0x630 [ 290.670416][ T5827] ? __virt_addr_valid+0x81/0x610 [ 290.670434][ T5827] ? __phys_addr+0xe8/0x180 [ 290.670452][ T5827] ? l2cap_connect_cfm+0xddd/0xfa0 [ 290.670485][ T5827] kasan_report+0xe0/0x110 [ 290.670513][ T5827] ? l2cap_connect_cfm+0xddd/0xfa0 [ 290.670542][ T5827] l2cap_connect_cfm+0xddd/0xfa0 [ 290.670571][ T5827] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 290.670601][ T5827] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 290.670628][ T5827] le_conn_complete_evt+0x1968/0x1f20 [ 290.670661][ T5827] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 290.670693][ T5827] hci_le_conn_complete_evt+0x23c/0x370 [ 290.670723][ T5827] hci_le_meta_evt+0x357/0x5e0 [ 290.670740][ T5827] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 290.670769][ T5827] hci_event_packet+0x685/0x11c0 [ 290.670796][ T5827] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 290.670815][ T5827] ? __pfx_hci_event_packet+0x10/0x10 [ 290.670843][ T5827] ? kcov_remote_start+0x384/0x670 [ 290.670865][ T5827] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.670889][ T5827] hci_rx_work+0x2c9/0xeb0 [ 290.670907][ T5827] process_one_work+0x9ba/0x1b20 [ 290.670936][ T5827] ? __pfx_process_one_work+0x10/0x10 [ 290.670965][ T5827] ? assign_work+0x1a0/0x250 [ 290.670989][ T5827] worker_thread+0x6c8/0xf10 [ 290.671017][ T5827] ? __kthread_parkme+0x19e/0x250 [ 290.671037][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 290.671062][ T5827] kthread+0x3c5/0x780 [ 290.671084][ T5827] ? __pfx_kthread+0x10/0x10 [ 290.671106][ T5827] ? rcu_is_watching+0x12/0xc0 [ 290.671126][ T5827] ? __pfx_kthread+0x10/0x10 [ 290.671149][ T5827] ret_from_fork+0x983/0xb10 [ 290.671167][ T5827] ? __pfx_ret_from_fork+0x10/0x10 [ 290.671186][ T5827] ? rcu_is_watching+0x12/0xc0 [ 290.671205][ T5827] ? __switch_to+0x7af/0x10d0 [ 290.671227][ T5827] ? __pfx_kthread+0x10/0x10 [ 290.671249][ T5827] ret_from_fork_asm+0x1a/0x30 [ 290.671280][ T5827] [ 290.671286][ T5827] [ 290.888790][ T5827] Allocated by task 5827: [ 290.893098][ T5827] kasan_save_stack+0x33/0x60 [ 290.897768][ T5827] kasan_save_track+0x14/0x30 [ 290.902428][ T5827] __kasan_kmalloc+0xaa/0xb0 [ 290.907000][ T5827] l2cap_chan_create+0x44/0x920 [ 290.911831][ T5827] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 290.917617][ T5827] l2cap_sock_new_connection_cb+0x101/0x240 [ 290.923493][ T5827] l2cap_connect_cfm+0x4c7/0xfa0 [ 290.928413][ T5827] le_conn_complete_evt+0x1968/0x1f20 [ 290.933769][ T5827] hci_le_conn_complete_evt+0x23c/0x370 [ 290.939298][ T5827] hci_le_meta_evt+0x357/0x5e0 [ 290.944039][ T5827] hci_event_packet+0x685/0x11c0 [ 290.948965][ T5827] hci_rx_work+0x2c9/0xeb0 [ 290.953355][ T5827] process_one_work+0x9ba/0x1b20 [ 290.958284][ T5827] worker_thread+0x6c8/0xf10 [ 290.962861][ T5827] kthread+0x3c5/0x780 [ 290.966921][ T5827] ret_from_fork+0x983/0xb10 [ 290.971490][ T5827] ret_from_fork_asm+0x1a/0x30 [ 290.976235][ T5827] [ 290.978538][ T5827] Freed by task 8945: [ 290.982496][ T5827] kasan_save_stack+0x33/0x60 [ 290.987165][ T5827] kasan_save_track+0x14/0x30 [ 290.991828][ T5827] __kasan_save_free_info+0x3b/0x60 [ 290.997011][ T5827] __kasan_slab_free+0x5f/0x80 [ 291.001764][ T5827] kfree+0x2f8/0x6e0 [ 291.005646][ T5827] l2cap_chan_put+0x216/0x2c0 [ 291.010314][ T5827] l2cap_sock_cleanup_listen+0x4d/0x2a0 [ 291.015835][ T5827] l2cap_sock_release+0x69/0x250 [ 291.020750][ T5827] __sock_release+0xb3/0x270 [ 291.025323][ T5827] sock_close+0x1c/0x30 [ 291.029459][ T5827] __fput+0x402/0xb70 [ 291.033419][ T5827] task_work_run+0x150/0x240 [ 291.037990][ T5827] exit_to_user_mode_loop+0xfb/0x540 [ 291.043249][ T5827] do_syscall_64+0x4ee/0xf80 [ 291.047829][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.053716][ T5827] [ 291.056026][ T5827] The buggy address belongs to the object at ffff888076996000 [ 291.056026][ T5827] which belongs to the cache kmalloc-2k of size 2048 [ 291.070062][ T5827] The buggy address is located 1152 bytes inside of [ 291.070062][ T5827] freed 2048-byte region [ffff888076996000, ffff888076996800) [ 291.084018][ T5827] [ 291.086328][ T5827] The buggy address belongs to the physical page: [ 291.092714][ T5827] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76990 [ 291.101457][ T5827] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 291.109941][ T5827] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 291.117899][ T5827] page_type: f5(slab) [ 291.121856][ T5827] raw: 00fff00000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 291.130415][ T5827] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 291.138975][ T5827] head: 00fff00000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 291.147623][ T5827] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 291.156272][ T5827] head: 00fff00000000003 ffffea0001da6401 00000000ffffffff 00000000ffffffff [ 291.164933][ T5827] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 291.173607][ T5827] page dumped because: kasan: bad access detected [ 291.180085][ T5827] page_owner tracks the page as allocated [ 291.185774][ T5827] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5821, tgid 5821 (syz-executor), ts 65394750304, free_ts 65290859722 [ 291.207118][ T5827] post_alloc_hook+0x1af/0x220 [ 291.211871][ T5827] get_page_from_freelist+0xd0b/0x31a0 [ 291.217312][ T5827] __alloc_frozen_pages_noprof+0x25f/0x2440 [ 291.223184][ T5827] alloc_pages_mpol+0x1fb/0x550 [ 291.228026][ T5827] new_slab+0x2c3/0x430 [ 291.232155][ T5827] ___slab_alloc+0xe18/0x1c90 [ 291.236804][ T5827] __slab_alloc.constprop.0+0x63/0x110 [ 291.242239][ T5827] __kmalloc_node_noprof+0x4dd/0x920 [ 291.247501][ T5827] qdisc_alloc+0xb7/0xa50 [ 291.251838][ T5827] qdisc_create_dflt+0x94/0x460 [ 291.256678][ T5827] dev_activate+0x63f/0x12d0 [ 291.261257][ T5827] __dev_open+0x4f1/0x960 [ 291.265587][ T5827] __dev_change_flags+0x55d/0x6f0 [ 291.270605][ T5827] netif_change_flags+0x8d/0x160 [ 291.275524][ T5827] do_setlink.constprop.0+0xb53/0x4380 [ 291.280968][ T5827] rtnl_newlink+0x1376/0x1f50 [ 291.285642][ T5827] page last free pid 5821 tgid 5821 stack trace: [ 291.291941][ T5827] __free_frozen_pages+0x7df/0x1160 [ 291.297118][ T5827] __put_partials+0x130/0x170 [ 291.301772][ T5827] qlist_free_all+0x4c/0xf0 [ 291.306256][ T5827] kasan_quarantine_reduce+0x195/0x1e0 [ 291.311700][ T5827] __kasan_slab_alloc+0x69/0x90 [ 291.316542][ T5827] kmem_cache_alloc_node_noprof+0x28a/0x7f0 [ 291.322414][ T5827] __alloc_skb+0x156/0x410 [ 291.326807][ T5827] rtmsg_ifa+0x16a/0x2a0 [ 291.331031][ T5827] __inet_insert_ifa+0x911/0xc80 [ 291.335945][ T5827] inet_rtm_newaddr+0xd87/0x1540 [ 291.340859][ T5827] rtnetlink_rcv_msg+0x95e/0xe90 [ 291.345781][ T5827] netlink_rcv_skb+0x158/0x420 [ 291.350521][ T5827] netlink_unicast+0x5aa/0x870 [ 291.355269][ T5827] netlink_sendmsg+0x8c8/0xdd0 [ 291.360009][ T5827] __sys_sendto+0x4a3/0x520 [ 291.364489][ T5827] __x64_sys_sendto+0xe0/0x1c0 [ 291.369233][ T5827] [ 291.371531][ T5827] Memory state around the buggy address: [ 291.377137][ T5827] ffff888076996380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.385174][ T5827] ffff888076996400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.393211][ T5827] >ffff888076996480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.401242][ T5827] ^ [ 291.405280][ T5827] ffff888076996500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.413318][ T5827] ffff888076996580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.421353][ T5827] ================================================================== [ 291.453080][ T30] audit: type=1400 audit(1764938040.811:1135): avc: denied { map } for pid=8945 comm="syz.0.921" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 291.465014][ T5827] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 291.465032][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 291.465052][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.465063][ T5827] Workqueue: hci2 hci_rx_work [ 291.465083][ T5827] Call Trace: [ 291.465088][ T5827] [ 291.465094][ T5827] dump_stack_lvl+0x3d/0x1f0 [ 291.465115][ T5827] vpanic+0x640/0x6f0 [ 291.465134][ T5827] panic+0xca/0xd0 [ 291.465149][ T5827] ? __pfx_panic+0x10/0x10 [ 291.465166][ T5827] ? l2cap_connect_cfm+0xddd/0xfa0 [ 291.465188][ T5827] ? preempt_schedule_common+0x44/0xc0 [ 291.465206][ T5827] ? preempt_schedule_thunk+0x16/0x30 [ 291.465231][ T5827] check_panic_on_warn+0xab/0xb0 [ 291.465248][ T5827] end_report+0x107/0x160 [ 291.465270][ T5827] kasan_report+0xee/0x110 [ 291.465291][ T5827] ? l2cap_connect_cfm+0xddd/0xfa0 [ 291.465316][ T5827] l2cap_connect_cfm+0xddd/0xfa0 [ 291.465340][ T5827] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 291.465364][ T5827] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 291.465387][ T5827] le_conn_complete_evt+0x1968/0x1f20 [ 291.465413][ T5827] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 291.465438][ T5827] hci_le_conn_complete_evt+0x23c/0x370 [ 291.465463][ T5827] hci_le_meta_evt+0x357/0x5e0 [ 291.465478][ T5827] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 291.465502][ T5827] hci_event_packet+0x685/0x11c0 [ 291.465524][ T5827] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 291.465540][ T5827] ? __pfx_hci_event_packet+0x10/0x10 [ 291.465563][ T5827] ? kcov_remote_start+0x384/0x670 [ 291.465582][ T5827] ? lockdep_hardirqs_on+0x7c/0x110 [ 291.465602][ T5827] hci_rx_work+0x2c9/0xeb0 [ 291.465616][ T5827] process_one_work+0x9ba/0x1b20 [ 291.465640][ T5827] ? __pfx_process_one_work+0x10/0x10 [ 291.465663][ T5827] ? assign_work+0x1a0/0x250 [ 291.465682][ T5827] worker_thread+0x6c8/0xf10 [ 291.465710][ T5827] ? __kthread_parkme+0x19e/0x250 [ 291.465726][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 291.465746][ T5827] kthread+0x3c5/0x780 [ 291.465764][ T5827] ? __pfx_kthread+0x10/0x10 [ 291.465782][ T5827] ? rcu_is_watching+0x12/0xc0 [ 291.465799][ T5827] ? __pfx_kthread+0x10/0x10 [ 291.465817][ T5827] ret_from_fork+0x983/0xb10 [ 291.465834][ T5827] ? __pfx_ret_from_fork+0x10/0x10 [ 291.465849][ T5827] ? rcu_is_watching+0x12/0xc0 [ 291.465865][ T5827] ? __switch_to+0x7af/0x10d0 [ 291.465884][ T5827] ? __pfx_kthread+0x10/0x10 [ 291.465902][ T5827] ret_from_fork_asm+0x1a/0x30 [ 291.465927][ T5827] [ 291.476236][ T5827] Kernel Offset: disabled