last executing test programs: 7m33.970609091s ago: executing program 4 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6126d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4, 0xf4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 7m32.692969245s ago: executing program 4 (id=198): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010004bd70000040000b3900001bc3d21600", @ANYRES32=r4, @ANYBLOB="10005a800c0000800400020004000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000380)=[r5, r5, 0x0], &(0x7f0000000280), &(0x7f0000000300)=[r6], &(0x7f0000000340)}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x20080, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000140)={0x0, 0x0, [0x800, 0xf30, 0x61a0, 0x1000000], 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x8) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000040)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r9, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xe5, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) 7m32.008556443s ago: executing program 4 (id=200): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0xc0405627, &(0x7f0000000040)={0x0, 0x2, 0x4009}) 7m31.380513599s ago: executing program 4 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0xcc285600, 0x0, 0x1, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) creat(&(0x7f00000001c0)='./file0\x00', 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1221840, &(0x7f0000000600)=ANY=[]) read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1d0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r4, 0x2c8ad000) 7m30.191984824s ago: executing program 4 (id=208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28}}]}, 0x154}}, 0x0) 7m29.876278381s ago: executing program 4 (id=209): syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x80044100, 0xf0ff1f00000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8a002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x80a0000, 0xe, 0x8, 0x3, 0xd2, 0x40, 0x7, 0x0, 0x2e, 0x19, 0x9}, {0x5001, 0x2, 0x3, 0x0, 0x40, 0x7, 0x7, 0x16, 0x4, 0x80, 0x3, 0x6}, {0x3000, 0xdddd0000, 0x8, 0x5, 0x1, 0xa, 0x0, 0x2, 0x0, 0xa7, 0x8, 0x81}, {0x6000, 0x100000, 0xd, 0xe6, 0x3, 0x2, 0x1, 0xf6, 0x8, 0x9, 0x1, 0xf1}, {0x4000, 0x2000, 0xc, 0x3, 0x5, 0x2, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x3}, {0x1000, 0x1000, 0xc, 0xa0, 0xad, 0x8, 0x2, 0x80, 0x80, 0xf, 0x1, 0x7}, {0xffff1000, 0x1000, 0xc, 0x5, 0x0, 0x5, 0x1, 0x3, 0x5, 0x81, 0x3, 0x70}, {0x4, 0x1, 0xe, 0x5, 0xf, 0x7, 0x87, 0x37, 0x2, 0x8, 0xf0, 0x9}, {0x6000, 0x72}, {0xdddd0000, 0x7}, 0x80000031, 0x0, 0xeeee8000, 0x2024, 0x1, 0x100, 0x3000, [0x2, 0x19d, 0x5e, 0x3]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r5 = userfaultfd(0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x4c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000002000000000c000c400000000000000e05000000000b000000c28d7001555bfd00ba98b444ca64ab3987064656e56258d7f07e2b4163dd5e1be146ae329df3269188d5cdb54fa9c0f6401d4a3c20d97ee8338f1d361b99af2773975a231a2eb8c99398"], 0x30}, 0x1, 0x0, 0x0, 0x48090}, 0x0) r7 = fcntl$dupfd(r5, 0x0, r5) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000780)={0x0, 0x7ff, 0x5a}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000880)={r8, 0x68, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f00000008c0)=0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000640)={@local, @dev, 0x0}, &(0x7f0000000680)=0xc) bind$packet(r7, &(0x7f00000006c0)={0x11, 0x11, r9, 0x1, 0xf, 0x6, @local}, 0x14) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) readv(r4, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/181, 0xb5}], 0x7) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 7m29.567952964s ago: executing program 32 (id=209): syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x80044100, 0xf0ff1f00000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8a002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x80a0000, 0xe, 0x8, 0x3, 0xd2, 0x40, 0x7, 0x0, 0x2e, 0x19, 0x9}, {0x5001, 0x2, 0x3, 0x0, 0x40, 0x7, 0x7, 0x16, 0x4, 0x80, 0x3, 0x6}, {0x3000, 0xdddd0000, 0x8, 0x5, 0x1, 0xa, 0x0, 0x2, 0x0, 0xa7, 0x8, 0x81}, {0x6000, 0x100000, 0xd, 0xe6, 0x3, 0x2, 0x1, 0xf6, 0x8, 0x9, 0x1, 0xf1}, {0x4000, 0x2000, 0xc, 0x3, 0x5, 0x2, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x3}, {0x1000, 0x1000, 0xc, 0xa0, 0xad, 0x8, 0x2, 0x80, 0x80, 0xf, 0x1, 0x7}, {0xffff1000, 0x1000, 0xc, 0x5, 0x0, 0x5, 0x1, 0x3, 0x5, 0x81, 0x3, 0x70}, {0x4, 0x1, 0xe, 0x5, 0xf, 0x7, 0x87, 0x37, 0x2, 0x8, 0xf0, 0x9}, {0x6000, 0x72}, {0xdddd0000, 0x7}, 0x80000031, 0x0, 0xeeee8000, 0x2024, 0x1, 0x100, 0x3000, [0x2, 0x19d, 0x5e, 0x3]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r5 = userfaultfd(0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x4c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000002000000000c000c400000000000000e05000000000b000000c28d7001555bfd00ba98b444ca64ab3987064656e56258d7f07e2b4163dd5e1be146ae329df3269188d5cdb54fa9c0f6401d4a3c20d97ee8338f1d361b99af2773975a231a2eb8c99398"], 0x30}, 0x1, 0x0, 0x0, 0x48090}, 0x0) r7 = fcntl$dupfd(r5, 0x0, r5) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000780)={0x0, 0x7ff, 0x5a}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000880)={r8, 0x68, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f00000008c0)=0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000640)={@local, @dev, 0x0}, &(0x7f0000000680)=0xc) bind$packet(r7, &(0x7f00000006c0)={0x11, 0x11, r9, 0x1, 0xf, 0x6, @local}, 0x14) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) readv(r4, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/181, 0xb5}], 0x7) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 6m4.161997652s ago: executing program 5 (id=485): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400006ebc09dd795707480004808000000000"], 0x14}}, 0x4008004) process_vm_readv(0x0, &(0x7f0000000900)=[{&(0x7f0000000280)=""/158, 0x9e}], 0x1, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x517300, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x200000000000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffd}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000580)='./file0/file0\x00', 0x181) r3 = syz_open_procfs(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000040)={{0x10, 0x7f}, 0x4e45be682709f37d, 0xc, 0x81, {0x9, 0xae}, 0x2b, 0xda6}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c010000100063d100000000fb84d2842352b716fd9fd8dd638a83322cdbdf25fe8000000008000000000000000000aafe8000000000000000000000000000aeffdb00000000000000000000110000007432390532505650f3963128c79fd66e2101f433c58934f03650d75bfc1d80bb9fb4ac1c4d524f249954153fc0c2f79c1cd13c405205cef442ed4b76feb576f0569045b72d118004a9cea45dcba711d393a6309282e3e7f3181c560bdcb68ba25f875fbbca7f6ffc0de53ff6f9c7411daabc910767be0434b9e1f85aad43eda462555da1f0429a4c7d110f827d384c670bbc6487aaaecb3551f6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) setpgid(0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) epoll_create1(0x0) rmdir(&(0x7f0000000040)='./control\x00') 6m3.319501s ago: executing program 5 (id=488): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f0000000380)='1'}], 0x1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0', 0x3a, [0x5c]}, 0x7d) ioctl$SG_IO(r1, 0x2285, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000022c0)={'wlan1\x00'}) connect$inet6(r4, &(0x7f0000002280)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x1, 0x40001043, r7, 0x0) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x6, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 5m59.164507998s ago: executing program 5 (id=504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) 5m57.068753174s ago: executing program 5 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0xcc285600, 0x0, 0x1, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r2, 0x0, 0x0) creat(0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1221840, &(0x7f0000000600)=ANY=[]) read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1d0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r4, 0x2c8ad000) 5m56.144702677s ago: executing program 5 (id=515): r0 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='illinois\x00', 0x9) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/72, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) io_setup(0x2, &(0x7f0000000200)) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000180)=""/226, &(0x7f00000000c0)=0xe2) socket(0x10, 0x803, 0x0) 5m55.824566978s ago: executing program 5 (id=517): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x20, 0x1, 0x5, 0x0, 0x0, 0x959, 0x0}) 5m55.129410564s ago: executing program 33 (id=517): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x20, 0x1, 0x5, 0x0, 0x0, 0x959, 0x0}) 4m49.265223519s ago: executing program 6 (id=738): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)=ANY=[@ANYBLOB="30003f003e000701feffffff00000000017c0000040042800c0001"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 4m48.860517484s ago: executing program 6 (id=739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_procfs(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000180)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbe66}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) r5 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0x8c}, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x2, 0x0) fcntl$setstatus(r6, 0x4, 0x2000) 4m47.719342575s ago: executing program 6 (id=744): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='decodes mem'], 0xc) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0x8, 0x400003a9, 0x0, 0x0) r5 = eventfd(0xff7fffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r5) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1440}], 0x0, 0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4m47.327166507s ago: executing program 6 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0xcc285600, 0x0, 0x1, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r2, 0x0, 0x0) creat(0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1221840, 0x0) read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1d0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r4, 0x2c8ad000) 4m45.958586017s ago: executing program 6 (id=750): socket$l2tp(0x2, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) syz_io_uring_setup(0x7440, &(0x7f00000004c0)={0x0, 0xa6e9, 0x10100, 0x2, 0xfffffffb}, &(0x7f0000000140), &(0x7f0000000280)) syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x402) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000001e80), 0x1, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0xffff, 0x4000, 0x0, 0x0}, {0x5, 0x400, 0x36, &(0x7f0000000200)="0d9f755138784621695d44c08590d95110439f4fa03c2e64db5d782427fe180502aae78851f7c1e73373ad4ac7a4fe3dad9cc2d06a94"}], 0x2}) 4m45.480504355s ago: executing program 6 (id=755): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f0000000380)='1'}], 0x1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0', 0x3a, [0x5c]}, 0x7d) ioctl$SG_IO(r1, 0x2285, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000022c0)={'wlan1\x00'}) connect$inet6(r4, &(0x7f0000002280)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x40001043, r6, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x6, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0), 0xfdef) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m45.116045987s ago: executing program 34 (id=755): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f0000000380)='1'}], 0x1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0', 0x3a, [0x5c]}, 0x7d) ioctl$SG_IO(r1, 0x2285, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000022c0)={'wlan1\x00'}) connect$inet6(r4, &(0x7f0000002280)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x40001043, r6, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x6, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0), 0xfdef) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.663697487s ago: executing program 1 (id=1725): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r4 = inotify_init1(0x0) fcntl$getownex(r4, 0x5, &(0x7f0000000080)) connect$can_bcm(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)='iocharset\xe4\x95\xd5O[\xe5H\xcf\xe3=\xf2\xc2&\xa3\x80[fg\xf1\xd0\x05\xf7\xc7\x83\xa4\xdb\xe7\xcf\xcb70BN\xc2o\xa8\xe9\xbd\xa3\xf4\x1c\x10j\xe2\xcb\xb3\xf4\xcd\t:9E\xe9Js=\x97\x9dT\x84t\x8b\xac\x9c\xdc\x8dJ\xd9\xef}\xb0b\xf7\x1aeW\xa2\xeb\xb8;\xb8\xdb\x99D\xc4R', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='user\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13.419221271s ago: executing program 1 (id=1735): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f0000000380)='1'}], 0x1}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0', 0x3a, [0x5c]}, 0x7d) ioctl$SG_IO(r1, 0x2285, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000022c0)={'wlan1\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x40001043, r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r5, 0x0, 0x6, 0x0) write$binfmt_misc(r8, &(0x7f00000000c0), 0xfdef) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.396778914s ago: executing program 1 (id=1745): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000001e80), 0x1, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0xffff, 0x4000, 0x0, 0x0}], 0x1}) 9.006095187s ago: executing program 7 (id=1747): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000001800), 0x0, 0x8000) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000018c0)=ANY=[@ANYBLOB], 0x118) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 8.41246764s ago: executing program 0 (id=1749): syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f70010203010902120001"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 8.410833346s ago: executing program 2 (id=1750): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae01, 0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYRES16=r1], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0xffff0000}}, 0x6}, &(0x7f0000000200)=0x90) 7.453296592s ago: executing program 7 (id=1752): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) r2 = msgget(0x0, 0x40) futex(&(0x7f0000000800)=0x1, 0x80, 0x1, &(0x7f0000000840)={0x0, 0x3938700}, &(0x7f0000000880)=0x2, 0x2) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000240)=""/166) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x2b, 0x1, 0xd, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x34}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x1, 0xc2, &(0x7f0000000540)=""/194, 0x41100, 0x8, '\x00', 0x0, @fallback=0x10, r1, 0x8, &(0x7f0000000640)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xf, 0x5, 0x8}, 0x10, 0xffffffffffffffff, r1, 0x6, 0x0, &(0x7f00000006c0)=[{0x0, 0x5, 0x0, 0xb}, {0x3, 0x1, 0x0, 0x8}, {0x2, 0x5, 0xf, 0x9}, {0x5, 0x3, 0xe, 0x1}, {0x2, 0x3, 0x1}, {0x2, 0x1, 0x8, 0x5}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="5500000018000000e2ffffff", @ANYRES32=r4], 0x20) unshare(0x20000400) modify_ldt$write(0x1, &(0x7f0000000000)={0x9, 0x20000800}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lsm_set_self_attr(0x6a, &(0x7f00000008c0)={0x6e, 0x6745, 0x40, 0x20, "d098c5c949c88a76aa0a2e91e7f8f0f02ba6c139e88e1e6ee6c8e51ea8812ba1"}, 0x40, 0x0) write$binfmt_script(r6, &(0x7f00000022c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) readv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) 7.42699938s ago: executing program 2 (id=1754): syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f70010203010902120001"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 6.508476612s ago: executing program 1 (id=1756): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0', 0x3a, [0x5c]}, 0x7d) ioctl$SG_IO(r0, 0x2285, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$l2tp6(0xa, 0x2, 0x73) 6.294210981s ago: executing program 7 (id=1758): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r5}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005740)=ANY=[@ANYBLOB="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"], 0xfc0}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r7 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x0) lseek(r7, 0x0, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="100c0608266be7d06c91b62300e9", 0xe, 0xfffffffffffffffc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="10000000121400ed0000000000000000"], 0xfffffffffffffc8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x50}}, 0x20000844) 5.663333008s ago: executing program 7 (id=1760): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r1, 0x9, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_io_uring_setup(0x6661, &(0x7f0000000240)={0x0, 0xcc17, 0x4000, 0x0, 0x20e}, &(0x7f0000000140), &(0x7f00000001c0)) io_uring_enter(r4, 0x1e5, 0x4374, 0x4d, &(0x7f00000002c0)={[0x1]}, 0x8) 5.107483387s ago: executing program 0 (id=1761): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000002c0)=0x0) getresuid(&(0x7f00000024c0)=0x0, &(0x7f0000002500), &(0x7f0000002540)=0x0) statx(r2, &(0x7f0000002580)='./file0\x00', 0x2000, 0x20, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r9, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r7, &(0x7f0000006680)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x1, 0x16, 0x0, 0x7ff, 0x0, {0x2, 0x80000a418, 0x3, 0x6, 0x800000000003, 0x100000000000008, 0x80000000, 0x4, 0x6, 0x8000, 0x80000000, r8, r9, 0x0, 0x4c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(r0, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r11 = getegid() (async) statx(r2, &(0x7f0000002900)='./file0\x00', 0x4000, 0x7ff, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002a40)='./file0\x00', &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002b00)={0x0, 0x0}, &(0x7f0000002b40)=0xc) r15 = getgid() r16 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r17, 0x0) (async) lstat(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002d00), &(0x7f0000002d40), &(0x7f0000002d80)=0x0) (async, rerun: 64) write$P9_RGETATTR(r2, &(0x7f00000042c0)={0xa0, 0x19, 0x1, {0x400, {0x10, 0x2, 0x4}, 0x194, r5, 0x0, 0x2, 0x800, 0x2d, 0x0, 0x3, 0x8001, 0x81, 0x0, 0x6, 0x716, 0x1, 0x1fb, 0x837, 0x9}}, 0xa0) (rerun: 64) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002dc0)={{{@in6=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000002ec0)=0xe8) getgroups(0x1, &(0x7f0000002f00)=[0xee01]) r23 = getegid() stat(&(0x7f00000034c0)='./file0\x00', &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000000440)="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", 0x2000, &(0x7f00000036c0)={&(0x7f0000000100)={0x50, 0xfffffffffffffffe, 0x10000, {0x7, 0x2b, 0x9, 0x1, 0x2, 0x658, 0x2, 0xa84, 0x0, 0x0, 0x1, 0x5}}, &(0x7f00000001c0)={0x18, 0x0, 0xe9}, &(0x7f0000000200)={0x18, 0x0, 0xe, {0x2}}, &(0x7f0000000240)={0x18, 0x0, 0xe32, {0x4}}, &(0x7f0000000280)={0x18, 0xfffffffffffffff5, 0xfffffffffffffffe, {0x4}}, &(0x7f0000000300)={0x28, 0xfffffffffffffff5, 0x0, {{0x9, 0x7, 0x0, r3}}}, &(0x7f0000000340)={0x60, 0x0, 0x8, {{0x0, 0x93, 0x4, 0x9, 0x5, 0xffff, 0x0, 0x61}}}, &(0x7f00000003c0)={0x18, 0xfffffffffffffffe, 0xe, {0x9}}, &(0x7f0000002440)={0x1c, 0x0, 0x800, {'/dev/uinput\x00'}}, &(0x7f0000002480)={0x20, 0xfffffffffffffff5, 0x6}, &(0x7f00000026c0)={0x78, 0x0, 0x1200000000000000, {0x3, 0x6, 0x0, {0x5, 0x3, 0x7, 0x4, 0xfffffffffffffffc, 0x0, 0x3, 0x3, 0x6, 0x1000, 0x9, r4, r6, 0x713, 0xffffffff}}}, &(0x7f0000002740)={0x90, 0x0, 0x9, {0x0, 0x2, 0x4, 0x4, 0x41, 0xffffffdf, {0x2, 0x8, 0x7a, 0x2, 0x9, 0x3, 0x89a9, 0x8001, 0xfffffffa, 0x1000, 0x3, 0xffffffffffffffff, r9, 0x9d9c, 0xf}}}, &(0x7f0000004380)=ANY=[@ANYBLOB="8000000000000000de7d0000000000000400000000000000000000000001000007000000060000002d7d7b3a28285d000500000000a97bb8000000030000000000000003000000030000003970000000000000030000000000000002000000000000001100000008000000282c2e2b2140252a26252b272a7d5d287d00000000000000f37c599dc9a92d73952569e3222d3bb7e5b6d7dda9322755d5b8bfd4717e4abe4b09a60e9f22b48ef17bb37826f7f30944898e73c4464042e349bc4d40dff15af133d89fd22473000261737a638a8161e5d065ca7e904ed3bd73d97412b037be8987b8322327c4107242cf"], &(0x7f0000002f40)={0x468, 0x0, 0x8, [{{0x5, 0x2, 0x10000, 0x3696, 0x0, 0x8, {0x3, 0x8001, 0x2, 0x9, 0x5, 0x9, 0x9, 0xb, 0x8, 0x6000, 0x3, r10, r11, 0x1ff, 0x8}}, {0x6, 0x5, 0x0, 0x7}}, {{0x1, 0x3, 0x9, 0x40, 0x701, 0x89, {0x5, 0x0, 0x51, 0x4, 0x8, 0x0, 0x7, 0x272c, 0x6235e8b2, 0x4000, 0x6, r12, r13, 0x6, 0x8}}, {0x0, 0xa52, 0x5, 0x4, 'fd/3\x00'}}, {{0x1, 0x3, 0x9, 0x2a, 0x1000, 0x4, {0x5, 0x4, 0x3, 0x0, 0xfffffffffffffffc, 0x7, 0x8, 0x7, 0x8, 0x1000, 0x6, r14, r15, 0xfffffffe, 0x5}}, {0x5, 0x3ff, 0x3, 0x3, '9p\x00'}}, {{0x3, 0x1, 0xf, 0x3, 0x68b, 0xfffffff8, {0x4, 0x2a, 0x0, 0x6, 0x7, 0x8, 0x8, 0x2f2, 0x101, 0xc000, 0x6, r17, r18, 0x266, 0x8}}, {0x4, 0x9, 0x1, 0x5, ','}}, {{0x6, 0x2, 0x40, 0x1, 0x9, 0x200, {0x2, 0x4, 0x7ff, 0x7, 0x80000000, 0xbc5, 0xffffffc0, 0x6, 0x4a40, 0x8000, 0xffffff00, r19, r20, 0x1f, 0x6}}, {0x4, 0xab8, 0x0, 0x8}}, {{0x0, 0x1, 0x7, 0x6, 0x9, 0x100, {0x6, 0x0, 0x6, 0x400, 0x1, 0x0, 0x7, 0x9, 0x2, 0xc000, 0x8, r21, r22, 0xff, 0x6}}, {0x2, 0xffffffffa8a9db12, 0x3, 0x8, '9p\x00'}}, {{0x0, 0x0, 0x425874ff, 0x81, 0x8, 0xffffffff, {0x2, 0xc, 0xbc67d2a, 0x200, 0xffffffffffffff81, 0x9, 0x3, 0x3494, 0x3b68, 0x1000, 0x6, 0xee00, 0xee00, 0x7ff, 0x6}}, {0x2, 0x59, 0xc, 0x10001, '/dev/uinput\x00'}}]}, &(0x7f00000033c0)={0xa0, 0x0, 0xffffffffffffffb8, {{0x0, 0x0, 0x6, 0x7, 0x9, 0x2, {0x4, 0xff, 0x3, 0x6, 0xfffffffffffffffd, 0xd, 0x9, 0x8381, 0x1, 0xc000, 0x0, 0xee00, r23, 0xc0, 0xff}}, {0x0, 0x14}}}, &(0x7f0000003480)={0x20, 0x0, 0x8, {0x7, 0x0, 0x6, 0x7}}, &(0x7f0000003580)={0x130, 0x0, 0x8000000000000000, {0x606b, 0x10001, 0x0, '\x00', {0x200, 0x0, 0x1, 0xfffffffc, 0xffffffffffffffff, r24, 0x4000, '\x00', 0xe, 0x9, 0x2, 0x80000000, {0x9, 0xc7b}, {0x6, 0x5}, {0x1, 0x9202}, {0xfc, 0x1ff}, 0x0, 0xfffffffb, 0x800}}}}) 4.873383154s ago: executing program 7 (id=1763): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000001800), 0x0, 0x8000) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 4.276624991s ago: executing program 0 (id=1764): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae01, 0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0xffff0000}}, 0x6}, &(0x7f0000000200)=0x90) 3.262961524s ago: executing program 0 (id=1765): ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r0, 0x0, 0x0, 0xce2) 3.261816099s ago: executing program 7 (id=1766): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000001e80), 0x1, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000300)=[{0xffff, 0x4000, 0x0, 0x0}, {0x5, 0x400, 0x0, 0x0}], 0x2}) 3.24823041s ago: executing program 2 (id=1767): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "3ad4a1966935b985", "dc00c5dba065ec20d2c1872d6d07c523", "e2ff0010", "0100ffffffffffff"}, 0x28) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000045}, 0x20040001) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}}, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x1000005, 0x0, 0x2, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004280)="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", 0x2000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000011c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f000001a300)=[{{&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000700)}], 0x1, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x4000051}}, {{&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000900)="d1a5b246a00864b888b5fa6d46e9565d4cc282c9159272770801cc188739f378ba8006ea04a415fe46606a66b83d15a3549900982a47beb17caa637c70dca3965326491f0479b23ec3377411229adddc9de569dc1e9889a4d5d6cfa1d25106d7558f399e16ef45db47a53710c7f8fed969e94648991c8f3205f7140eb43d81d05d6bfd588b7041d0abef2b03aa218cd166305fbf7ee3afec62abea1b1a631742a845c744de50b26328fd1642ea", 0xad}, {&(0x7f00000009c0)="8f847c26505ff20d91117f1fb3a781b488827b54d963a4d7e4843491165bd556c5cef208a426fe4d28c299407db6509445d08ece3e460fd4524d08817930010c589f264e4d04386bb76a30feda8f7f58a322a4746b889e8c03dc514a8db120c92dc24957bbbc15e86d2faaa24efaeb4488a226a4325189bb052c8251719977ee5d9bbd99cb2483c478f02cd25fa2eaeed27c99bf56e097f32363d252f05f12ff5c3e94c1e41e1ade912351c9609d0338235bfc98266237131098ca5f0e86843aeb951e254919d35650ed03cd90c14f61470148e24dc55adefc0bfda333a968b7fd1d4a812d38533fa0a6f0e00b5ece71", 0xf0}, {&(0x7f00000005c0)}, {&(0x7f0000000ac0)="88f218bc74cdb0d29e26814ffe6d616ca357745c09c2c04ce6a041a1f8e030144c19c4790244852e27e858712a58175a3dfacbe2dd3325a932c4ac357935ba5f9996b106b0b332e0e275a61ab206260963da76cf964661003d268c677c3872724b22c30129f00f4e9f788dab61ca62cf69f93ef07e636fef82e13d62e572e40737741d803db9", 0x86}, {&(0x7f0000000b80)="1142dc77fda33d083aa6fd24dcaededd974a8ee3d0b4e1f83b4bb29f886c0da05f0bd5ec08699bf2b39f8a58653d000de4a50f8534c949d7a3948c9097b2b6fb50faa625112b99da4014ddb0529801fe3ebaf28023c95e1819b7bb54bb0aa664a4fa489a73290c76d78960876d80d740bcde473d4efadf77167615b7137be83a6c57cab8c31bd32a5ec8e75e471fb7aaf3b6baee155ca648ebfcab6dd1babe264f8988ea92fdbf465210d888b78206ff855356cab5c8592ae9e9f6e58855b27b98f40bf4f818694bfb419b21cb1749228abb6d5f9157d86c8cd78c1180cfe1f0cdaa088dcd98657f", 0xe8}], 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="1e81489f"], 0x18, 0x4000}}, {{0x0, 0x0, &(0x7f0000000f80)=[{0x0}, {&(0x7f0000000d80)="a5740e7a46f3ae257672a9cab0690ddb382ec45a7c8edc1749cfa2bf79849ec24f7d037788b7531d9ec6651bd1d3f5dab9692913de1d65b2d0bfa487629b98265019de1fd2fb79156a3eae1fd8407cc789c73adff5422edba549dca2bbcedc3bc31e58d9c4456a15bc707b0cc07ea2a63f00673352ab9ceb3ca21646a4fd1fd9170509675ce30b5bb76d84f1fa91e4a3136cfe44bab46ff9ae0a7e9089b18dccdaee5de887d22f55d848ed8c598b7558735c6b6b2641a73a146c175997f14ccab0d4", 0xc2}, {&(0x7f0000000e80)="41f198593f9c421bfdf1c00155e78d1ece70b9714f395a0144a88b918c6ddbb5865bc68ba972b33a1371a26c23ca5a781c4190726c15142eb3842305b6bb7d494f57a8788ef4d701628f622cf96a90b45f729862f0569d41050c9f6bedb74282d87bc95a9b16e391df46ef16b65489bde55604b9f1b28dc5c09c52d7ca50eaf2ad824abd3fb6d709", 0x88}], 0x3, &(0x7f000001a240)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xa8, 0x40000}}], 0x3, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0xb2}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) mmap(&(0x7f000056d000/0x3000)=nil, 0x3000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 3.088013051s ago: executing program 3 (id=1768): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000020c0)={r1, 0xf}, &(0x7f0000000100)=0x8) 2.674547648s ago: executing program 0 (id=1769): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000), 0x10) r1 = socket$packet(0x11, 0x2, 0x300) memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0x2, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x54, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x29}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000043420de300000d000000000000"], 0x0, 0x26, 0x0, 0x1, 0xfffffa16}, 0x28) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r4, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESDEC], 0x0) 2.632370145s ago: executing program 1 (id=1770): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_PIT2(r4, 0xaea2, &(0x7f00000004c0)={[{0x15c8, 0xc787, 0x2, 0x6, 0x0, 0xc6, 0x70, 0x1, 0x1, 0x1, 0xda, 0xf8, 0x3}, {0xfffffffc, 0xf3f, 0x0, 0x7d, 0x92, 0x7, 0x9, 0xa, 0x0, 0x85, 0xd, 0x4e, 0x6}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x9, 0xe, 0xfff}]}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = add_key(&(0x7f00000002c0)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, 0x0, r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011"], 0x20}], 0x1}, 0x300) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 2.2789598s ago: executing program 3 (id=1771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0x3, 0x12) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x110, r1, 0xa3eaa000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r5 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r6 = socket$netlink(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0x0, 0x7, 0x1, 0x5, 0x7, 0x31}, &(0x7f00000000c0)={0x3, 0x0, 0x6e, 0x3, 0x57a, 0x5, 0x2, 0xd}, &(0x7f0000000180)={0x1, 0xffffffffffffffff, 0x2, 0x9, 0xf6, 0x80000000, 0xffffffff, 0x6}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x3]}, 0x8}) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000440), &(0x7f0000000480)=0x4) getpeername$qrtr(r8, 0x0, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000e80)={'wlan0\x00'}) listen(r7, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2.055553326s ago: executing program 2 (id=1772): socket(0x1, 0x3, 0x57) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x1) socket$inet6(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) r1 = memfd_secret(0x80000) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="040005000000000008000500", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="10000400000000002000010000000000"], 0x3c, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r3, r6}}, './file0\x00'}) write$P9_RRENAMEAT(r7, &(0x7f0000000180)={0x7, 0x4b, 0x2}, 0x7) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x8880, 0x0) sendto$inet6(r8, &(0x7f0000000040)='\x00', 0x1, 0x4004815, 0x0, 0x2b) 1.195735614s ago: executing program 3 (id=1773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) unshare(0x22020400) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r2, 0x46f3, 0x4999, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000200)='~', 0x1) 1.0865875s ago: executing program 1 (id=1774): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f0000000380)='1'}], 0x1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001aa40)=""/102400, 0x19000) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000022c0)={'wlan1\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40001043, r4, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0), 0xfdef) close_range(r3, 0xffffffffffffffff, 0x0) 986.873082ms ago: executing program 3 (id=1775): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r4 = inotify_init1(0x0) fcntl$getownex(r4, 0x5, &(0x7f0000000080)) connect$can_bcm(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)='iocharset\xe4\x95\xd5O[\xe5H\xcf\xe3=\xf2\xc2&\xa3\x80[fg\xf1\xd0\x05\xf7\xc7\x83\xa4\xdb\xe7\xcf\xcb70BN\xc2o\xa8\xe9\xbd\xa3\xf4\x1c\x10j\xe2\xcb\xb3\xf4\xcd\t:9E\xe9Js=\x97\x9dT\x84t\x8b\xac\x9c\xdc\x8dJ\xd9\xef}\xb0b\xf7\x1aeW\xa2\xeb\xb8;\xb8\xdb\x99D\xc4R', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='user\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 964.453366ms ago: executing program 2 (id=1776): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae01, 0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0xffff0000}}, 0x6}, &(0x7f0000000200)=0x90) 762.260034ms ago: executing program 0 (id=1777): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000001800), 0x0, 0x8000) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 266.812221ms ago: executing program 3 (id=1778): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) r2 = msgget(0x0, 0x40) futex(0x0, 0x80, 0x1, &(0x7f0000000840)={0x0, 0x3938700}, &(0x7f0000000880)=0x2, 0x2) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000240)=""/166) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x34}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x1, 0xc2, &(0x7f0000000540)=""/194, 0x41100, 0x8, '\x00', 0x0, @fallback=0x10, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0xf, 0x5, 0x8}, 0x10, 0xffffffffffffffff, r1, 0x0, 0x0, &(0x7f00000006c0), 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="5500000018000000e2ffffff", @ANYRES32=r4, @ANYBLOB], 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) unshare(0x20000400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000900)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lsm_set_self_attr(0x6a, 0x0, 0x0, 0x0) write$binfmt_script(r6, 0x0, 0x0) readv(r5, &(0x7f0000000000), 0x0) gettid() 10.572896ms ago: executing program 2 (id=1779): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) r2 = msgget(0x0, 0x40) futex(0x0, 0x80, 0x1, &(0x7f0000000840)={0x0, 0x3938700}, &(0x7f0000000880)=0x2, 0x2) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000240)=""/166) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x34}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x1, 0xc2, &(0x7f0000000540)=""/194, 0x41100, 0x8, '\x00', 0x0, @fallback=0x10, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0xf, 0x5, 0x8}, 0x10, 0xffffffffffffffff, r1, 0x0, 0x0, &(0x7f00000006c0), 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="5500000018000000e2ffffff", @ANYRES32=r4, @ANYBLOB], 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) unshare(0x20000400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000900)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lsm_set_self_attr(0x6a, 0x0, 0x0, 0x0) write$binfmt_script(r6, 0x0, 0x0) readv(r5, &(0x7f0000000000), 0x0) gettid() 0s ago: executing program 3 (id=1780): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0', 0x3a, [0x5c]}, 0x7d) ioctl$SG_IO(r0, 0x2285, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$l2tp6(0xa, 0x2, 0x73) kernel console output (not intermixed with test programs): type=1400 audit(1753700132.287:1031): avc: denied { open } for pid=9434 comm="syz.6.744" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 296.722887][ T9437] binder: BINDER_SET_CONTEXT_MGR already set [ 296.729003][ T9437] binder: 9434:9437 ioctl 4018620d 200000000040 returned -16 [ 296.813818][ T30] audit: type=1400 audit(1753700132.367:1032): avc: denied { map } for pid=9434 comm="syz.6.744" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 297.146441][ T9450] overlay: filesystem on ./bus not supported [ 297.250307][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 297.472400][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 297.504139][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 297.537366][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.557454][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 297.557483][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 297.557505][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.557543][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 297.557564][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.286624][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 298.286662][ T24] usbtmc 2-1:16.0: can't read capabilities [ 298.607330][ T24] usb 2-1: USB disconnect, device number 26 [ 298.967886][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.077223][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.217621][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.444848][ T6934] wlan1: Trigger new scan to find an IBSS to join [ 299.752280][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.777181][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 300.310557][ T5838] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 300.321478][ T12] bridge_slave_1: left allmulticast mode [ 300.347937][ T12] bridge_slave_1: left promiscuous mode [ 300.370483][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.397857][ T12] bridge_slave_0: left allmulticast mode [ 300.410703][ T12] bridge_slave_0: left promiscuous mode [ 300.430200][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.538483][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.549955][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.560194][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.568778][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.588372][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.605261][ T5838] usb 3-1: unable to get BOS descriptor or descriptor too short [ 300.629582][ T5838] usb 3-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 301.006233][ T5838] usb 3-1: config 1 interface 0 has no altsetting 0 [ 301.018125][ T5838] usb 3-1: string descriptor 0 read error: -22 [ 301.027950][ T5838] usb 3-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 301.038889][ T3473] wlan1: Creating new IBSS network, BSSID 9a:61:90:7f:91:05 [ 301.044124][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.073733][ T9520] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 301.379306][ T5838] usbhid 3-1:1.0: can't add hid device: -71 [ 301.391836][ T5838] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 301.407318][ T5838] usb 3-1: USB disconnect, device number 26 [ 301.463607][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.477724][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.575607][ T12] bond0 (unregistering): Released all slaves [ 302.118978][ T12] : left promiscuous mode [ 302.444756][ T9525] chnl_net:caif_netlink_parms(): no params data found [ 302.528388][ T9553] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 302.534948][ T9553] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 302.564948][ T9553] vhci_hcd vhci_hcd.0: Device attached [ 302.623264][ T5841] Bluetooth: hci1: command tx timeout [ 302.685189][ T12] hsr_slave_0: left promiscuous mode [ 302.749824][ T12] hsr_slave_1: left promiscuous mode [ 302.757106][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.765029][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.774281][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.781773][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.838121][ T9566] netlink: 'syz.3.766': attribute type 2 has an invalid length. [ 303.215791][ T5838] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 303.235098][ T12] veth1_macvtap: left promiscuous mode [ 303.240834][ T12] veth0_macvtap: left promiscuous mode [ 303.246427][ T12] veth1_vlan: left promiscuous mode [ 303.252976][ T12] veth0_vlan: left promiscuous mode [ 303.341155][ T54] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 303.492779][ T54] usb 2-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 303.504941][ T54] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.515526][ T54] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 303.539810][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.576560][ T54] usb 2-1: config 0 descriptor?? [ 303.686664][ T12] team0 (unregistering): Port device team_slave_1 removed [ 303.751957][ T12] team0 (unregistering): Port device team_slave_0 removed [ 303.992138][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 303.992153][ T30] audit: type=1400 audit(1753700139.637:1036): avc: denied { accept } for pid=9570 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 304.029248][ T9555] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 304.038099][ T13] vhci_hcd: stop threads [ 304.045790][ T13] vhci_hcd: release socket [ 304.053027][ T13] vhci_hcd: disconnect device [ 304.054465][ T9553] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 304.096296][ T9] usb 2-1: USB disconnect, device number 27 [ 304.435171][ T9582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.770'. [ 304.529417][ T9582] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 304.539227][ T9525] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.578536][ T9525] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.600429][ T9525] bridge_slave_0: entered allmulticast mode [ 304.720345][ T5841] Bluetooth: hci1: command tx timeout [ 304.726773][ T9525] bridge_slave_0: entered promiscuous mode [ 304.754029][ T9525] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.787236][ T9525] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.303562][ T9525] bridge_slave_1: entered allmulticast mode [ 305.311274][ T9525] bridge_slave_1: entered promiscuous mode [ 305.365219][ T9525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.728094][ T9525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.941371][ T9525] team0: Port device team_slave_0 added [ 305.973137][ T9525] team0: Port device team_slave_1 added [ 306.018326][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.026448][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.053863][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 306.062511][ T5891] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 306.072735][ T9525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.091710][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.108863][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.142528][ T9525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.201399][ T9525] hsr_slave_0: entered promiscuous mode [ 306.207896][ T9525] hsr_slave_1: entered promiscuous mode [ 306.214074][ T5891] usb 2-1: device descriptor read/64, error -71 [ 306.224305][ T9525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.233250][ T9525] Cannot create hsr debugfs directory [ 306.240495][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 306.261623][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 306.285380][ T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 306.299001][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.318364][ T9] usb 3-1: Product: syz [ 306.330715][ T9] usb 3-1: Manufacturer: syz [ 306.335348][ T9] usb 3-1: SerialNumber: syz [ 306.360136][ T9] usb 3-1: config 0 descriptor?? [ 306.405157][ T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 306.470228][ T5891] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 306.558682][ T9525] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 306.569207][ T9525] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 306.734554][ T5891] usb 2-1: device descriptor read/64, error -71 [ 306.753021][ T9525] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 306.765544][ T9525] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 306.784270][ T5841] Bluetooth: hci1: command tx timeout [ 307.019489][ T5891] usb usb2-port1: attempt power cycle [ 307.157372][ T9525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.198288][ T9525] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.234069][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.241441][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.284374][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.291551][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.380391][ T5891] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 307.397570][ T9525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.421547][ T13] usb 3-1: Failed to submit usb control message: -110 [ 307.428616][ T13] usb 3-1: unable to send the bmi data to the device: -110 [ 307.443823][ T5891] usb 2-1: device descriptor read/8, error -71 [ 307.483879][ T13] usb 3-1: unable to get target info from device [ 307.512143][ T13] usb 3-1: could not get target info (-110) [ 307.518918][ T13] usb 3-1: could not probe fw (-110) [ 307.537691][ T9660] netlink: 40 bytes leftover after parsing attributes in process `syz.3.781'. [ 307.551127][ T9660] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 307.708007][ T5891] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 307.744397][ T5891] usb 2-1: device descriptor read/8, error -71 [ 307.786325][ T9525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.861344][ T5891] usb usb2-port1: unable to enumerate USB device [ 308.177245][ T9525] veth0_vlan: entered promiscuous mode [ 308.209039][ T9525] veth1_vlan: entered promiscuous mode [ 308.239294][ T9525] veth0_macvtap: entered promiscuous mode [ 308.248677][ T9525] veth1_macvtap: entered promiscuous mode [ 308.814213][ T5884] usb 3-1: USB disconnect, device number 27 [ 308.899569][ T5841] Bluetooth: hci1: command tx timeout [ 308.905075][ T5838] vhci_hcd: vhci_device speed not set [ 309.332836][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.355494][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.521420][ T9525] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.530394][ T9525] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.539817][ T9525] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.549923][ T9525] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.130489][ T5961] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 310.178474][ T9292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.281129][ T9292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.337085][ T5961] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.379242][ T5961] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.398846][ T9292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.436075][ T5961] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 310.448818][ T9292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.479944][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.509843][ T5961] usb 2-1: config 0 descriptor?? [ 310.537671][ T9736] netlink: 'syz.3.793': attribute type 2 has an invalid length. [ 311.786345][ T5891] usb 2-1: USB disconnect, device number 32 [ 311.791331][ T5961] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 311.972532][ T5961] usb 8-1: unable to get BOS descriptor or descriptor too short [ 311.986654][ T5961] usb 8-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 311.998651][ T5961] usb 8-1: config 1 interface 0 has no altsetting 0 [ 312.010299][ T5946] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 312.018656][ T5961] usb 8-1: string descriptor 0 read error: -22 [ 312.030356][ T5961] usb 8-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 312.059650][ T5961] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.088301][ T9744] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 312.194247][ T5946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.204663][ T5946] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 312.214035][ T5946] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 312.223560][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.240977][ T5946] usb 3-1: config 0 descriptor?? [ 313.440565][ T5961] usbhid 8-1:1.0: can't add hid device: -71 [ 313.446513][ T5961] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 313.569614][ T5961] usb 8-1: USB disconnect, device number 2 [ 314.637038][ T10] usb 3-1: USB disconnect, device number 28 [ 315.014059][ T9796] : entered promiscuous mode [ 315.015665][ T9] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 315.303560][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 315.315697][ T9] usb 2-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 315.780806][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 315.864570][ T9] usb 2-1: string descriptor 0 read error: -22 [ 315.888466][ T9] usb 2-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 315.909482][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.078019][ T9789] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.647508][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.655744][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.110126][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 317.141730][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 317.204743][ T9] usb 2-1: USB disconnect, device number 33 [ 317.250351][ T5891] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 317.334671][ T9833] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.813'. [ 317.415424][ T9834] overlayfs: failed to clone upperpath [ 317.759710][ T30] audit: type=1400 audit(1753700153.047:1037): avc: denied { mount } for pid=9825 comm="syz.0.811" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 317.884157][ T5891] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.939898][ T5891] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 318.007734][ T5891] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 318.108784][ T5891] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.211650][ T30] audit: type=1400 audit(1753700153.827:1038): avc: denied { accept } for pid=9851 comm="syz.1.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 318.248918][ T5891] usb 8-1: config 0 descriptor?? [ 318.402363][ T9854] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 318.409807][ T9854] PKCS7: Only support pkcs7_signedData type [ 318.776176][ T5891] usb 8-1: USB disconnect, device number 3 [ 319.529418][ T30] audit: type=1400 audit(1753700155.157:1039): avc: denied { read } for pid=9865 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.563963][ T9867] mmap: syz.3.821 (9867) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 319.622056][ T30] audit: type=1400 audit(1753700155.157:1040): avc: denied { write } for pid=9865 comm="syz.3.821" path="socket:[23162]" dev="sockfs" ino=23162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.723249][ T30] audit: type=1400 audit(1753700155.167:1041): avc: denied { map } for pid=9865 comm="syz.3.821" path="socket:[23159]" dev="sockfs" ino=23159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 319.971298][ T9886] netlink: 6068 bytes leftover after parsing attributes in process `syz.7.825'. [ 320.237057][ T30] audit: type=1400 audit(1753700155.867:1042): avc: denied { remount } for pid=9884 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 320.431190][ T30] audit: type=1400 audit(1753700155.917:1043): avc: denied { accept } for pid=9884 comm="syz.1.826" lport=58235 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 320.476076][ T30] audit: type=1400 audit(1753700155.927:1044): avc: denied { write } for pid=9884 comm="syz.1.826" lport=58235 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 320.502201][ T30] audit: type=1400 audit(1753700155.937:1045): avc: denied { setopt } for pid=9884 comm="syz.1.826" lport=58235 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 320.583355][ T30] audit: type=1400 audit(1753700156.227:1046): avc: denied { setopt } for pid=9904 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 320.660633][ T5946] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 320.856096][ T5946] usb 8-1: Using ep0 maxpacket: 16 [ 320.877882][ T5946] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 321.083510][ T5946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.103505][ T5946] usb 8-1: Product: syz [ 321.116877][ T5946] usb 8-1: Manufacturer: syz [ 321.131771][ T5946] usb 8-1: SerialNumber: syz [ 321.167588][ T5946] usb 8-1: config 0 descriptor?? [ 321.381422][ T5961] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 321.542529][ T5961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.560240][ T5961] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.579535][ T5961] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 321.699673][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.725781][ T5946] speedtch 8-1:0.0: speedtch_bind: data interface not found! [ 321.733861][ T5961] usb 3-1: config 0 descriptor?? [ 321.768807][ T5946] speedtch 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 321.822877][ T5946] usb 8-1: USB disconnect, device number 4 [ 322.110832][ T9935] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 322.410728][ T5891] usb 3-1: USB disconnect, device number 29 [ 322.623077][ T9946] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 322.629599][ T9946] PKCS7: Only support pkcs7_signedData type [ 323.061378][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.841'. [ 323.144515][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 323.144530][ T30] audit: type=1400 audit(1753700158.787:1050): avc: denied { ioctl } for pid=9958 comm="syz.1.843" path="socket:[23894]" dev="sockfs" ino=23894 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 323.569010][ T30] audit: type=1400 audit(1753700159.177:1051): avc: denied { map } for pid=9958 comm="syz.1.843" path="/proc/540/net/fib_trie" dev="proc" ino=4026532815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 323.841982][ T9967] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 324.360252][ T5961] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 324.550573][ T5961] usb 3-1: device descriptor read/64, error -71 [ 324.570237][ T30] audit: type=1400 audit(1753700160.177:1052): avc: denied { map } for pid=9980 comm="syz.7.848" path="socket:[23920]" dev="sockfs" ino=23920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 324.607389][ T30] audit: type=1400 audit(1753700160.177:1053): avc: denied { read accept } for pid=9980 comm="syz.7.848" path="socket:[23920]" dev="sockfs" ino=23920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 324.810472][ T5961] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 325.116796][ T30] audit: type=1400 audit(1753700160.717:1054): avc: denied { name_bind } for pid=9984 comm="syz.1.849" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 325.176393][ T30] audit: type=1400 audit(1753700160.817:1055): avc: denied { create } for pid=9998 comm="syz.3.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.239446][ T30] audit: type=1400 audit(1753700160.847:1056): avc: denied { connect } for pid=9998 comm="syz.3.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.266302][ T5961] usb 3-1: device descriptor read/64, error -71 [ 325.282837][ T30] audit: type=1400 audit(1753700160.847:1057): avc: denied { setopt } for pid=9998 comm="syz.3.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.463459][ T5961] usb usb3-port1: attempt power cycle [ 325.469510][T10005] netlink: 108 bytes leftover after parsing attributes in process `syz.0.854'. [ 326.794295][T10028] can: request_module (can-proto-3) failed. [ 327.130233][ T24] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 327.235725][T10046] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.866'. [ 327.304764][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.320120][ T24] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 327.333033][ T30] audit: type=1400 audit(1753700162.937:1058): avc: denied { create } for pid=10047 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 327.359253][ T24] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 327.382395][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.396341][ T30] audit: type=1400 audit(1753700162.997:1059): avc: denied { ioctl } for pid=10047 comm="syz.1.865" path="socket:[23473]" dev="sockfs" ino=23473 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 327.546140][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 327.715066][ T24] usb 8-1: config 0 descriptor?? [ 328.571890][T10069] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 328.899590][ T30] audit: type=1400 audit(1753700164.537:1060): avc: denied { read write } for pid=10064 comm="syz.1.870" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 329.007239][ T10] usb 8-1: USB disconnect, device number 5 [ 329.016424][ T30] audit: type=1400 audit(1753700164.537:1061): avc: denied { open } for pid=10064 comm="syz.1.870" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 329.596864][T10074] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 331.292847][ T5965] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 331.534099][T10109] binder: BINDER_SET_CONTEXT_MGR already set [ 331.540263][T10109] binder: 10101:10109 ioctl 4018620d 200000000040 returned -16 [ 332.426820][T10118] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 332.433381][T10118] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 332.462391][ T5843] Bluetooth: hci1: command 0x0405 tx timeout [ 332.631046][T10118] vhci_hcd vhci_hcd.0: Device attached [ 333.075089][ T30] audit: type=1326 audit(1753700168.377:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10123 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa2b8e9a9 code=0x7ffc0000 [ 333.176470][ T30] audit: type=1326 audit(1753700168.377:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10123 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2aa2b8e9a9 code=0x7ffc0000 [ 333.179594][ T54] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 333.204084][ T30] audit: type=1326 audit(1753700168.377:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10123 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa2b8e9a9 code=0x7ffc0000 [ 333.231364][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 333.624687][ T30] audit: type=1326 audit(1753700168.387:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10123 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa2b8e9a9 code=0x7ffc0000 [ 333.650415][ T30] audit: type=1326 audit(1753700168.387:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10123 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa2b8e9a9 code=0x7ffc0000 [ 333.899987][ T9] usb 2-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 333.916595][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.945453][T10147] FAULT_INJECTION: forcing a failure. [ 333.945453][T10147] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 333.965009][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 333.987882][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.023122][T10147] CPU: 0 UID: 0 PID: 10147 Comm: syz.2.890 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 334.023143][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.023151][T10147] Call Trace: [ 334.023156][T10147] [ 334.023161][T10147] dump_stack_lvl+0x16c/0x1f0 [ 334.023188][T10147] should_fail_ex+0x512/0x640 [ 334.023212][T10147] _copy_to_user+0x32/0xd0 [ 334.023227][T10147] simple_read_from_buffer+0xcb/0x170 [ 334.023248][T10147] proc_fail_nth_read+0x197/0x270 [ 334.023269][T10147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.023289][T10147] ? rw_verify_area+0xcf/0x680 [ 334.023306][T10147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.023326][T10147] vfs_read+0x1e1/0xc60 [ 334.023349][T10147] ? __pfx___mutex_lock+0x10/0x10 [ 334.023363][T10147] ? __pfx_vfs_read+0x10/0x10 [ 334.023391][T10147] ? __fget_files+0x20e/0x3c0 [ 334.023413][T10147] ksys_read+0x12a/0x250 [ 334.023431][T10147] ? __pfx_ksys_read+0x10/0x10 [ 334.023448][T10147] ? v4l2_ioctl+0x1c5/0x250 [ 334.023468][T10147] ? fput+0x70/0xf0 [ 334.023484][T10147] do_syscall_64+0xcd/0x4c0 [ 334.023498][T10147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.023512][T10147] RIP: 0033:0x7f6bc9b8d3bc [ 334.023523][T10147] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 334.023536][T10147] RSP: 002b:00007f6bca9d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 334.023549][T10147] RAX: ffffffffffffffda RBX: 00007f6bc9db5fa0 RCX: 00007f6bc9b8d3bc [ 334.023558][T10147] RDX: 000000000000000f RSI: 00007f6bca9d70a0 RDI: 0000000000000004 [ 334.023566][T10147] RBP: 00007f6bca9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 334.023573][T10147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.023581][T10147] R13: 0000000000000000 R14: 00007f6bc9db5fa0 R15: 00007ffce68c8ea8 [ 334.023599][T10147] [ 334.268798][ T9] usb 2-1: config 0 descriptor?? [ 334.360248][ T5891] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 334.925399][ T5891] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.936478][ T5891] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.945550][ T5891] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 334.954826][ T5891] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.966216][ T5891] usb 8-1: config 0 descriptor?? [ 334.978466][T10120] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 335.015304][ T5965] vhci_hcd: stop threads [ 335.018279][ T5891] usb 2-1: USB disconnect, device number 34 [ 335.030670][ T5965] vhci_hcd: release socket [ 335.048042][ T5965] vhci_hcd: disconnect device [ 335.265611][T10173] netlink: 108 bytes leftover after parsing attributes in process `syz.0.894'. [ 336.339742][ T5891] usb 8-1: USB disconnect, device number 6 [ 336.528013][T10192] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.899'. [ 336.615698][ T5884] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 337.669292][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.718138][ T5884] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 337.748348][ T5884] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 337.768375][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.852267][ T5884] usb 3-1: config 0 descriptor?? [ 337.978122][T10215] netlink: 6048 bytes leftover after parsing attributes in process `syz.0.905'. [ 338.310961][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 338.523545][ T5884] usb 3-1: USB disconnect, device number 33 [ 338.760406][ T54] vhci_hcd: vhci_device speed not set [ 339.096611][T10236] kvm: user requested TSC rate below hardware speed [ 339.108976][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 339.636400][T10242] netlink: 6048 bytes leftover after parsing attributes in process `syz.3.910'. [ 341.028025][T10273] binder: BINDER_SET_CONTEXT_MGR already set [ 341.034108][T10273] binder: 10263:10273 ioctl 4018620d 200000000040 returned -16 [ 341.950761][T10285] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 342.699472][T10296] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 343.443500][T10310] lo speed is unknown, defaulting to 1000 [ 343.478094][T10310] lo speed is unknown, defaulting to 1000 [ 343.489980][T10310] lo speed is unknown, defaulting to 1000 [ 346.011211][ T5884] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 346.787788][T10341] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 346.794294][T10341] PKCS7: Only support pkcs7_signedData type [ 346.813764][ T5884] usb 2-1: unable to get BOS descriptor or descriptor too short [ 346.823855][ T5884] usb 2-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 346.842511][ T5884] usb 2-1: config 1 interface 0 has no altsetting 0 [ 346.867792][ T5884] usb 2-1: string descriptor 0 read error: -22 [ 346.895511][ T5884] usb 2-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 346.914781][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.032305][T10334] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 347.059944][T10310] infiniband syz0: set active [ 347.065933][ T54] lo speed is unknown, defaulting to 1000 [ 347.203991][T10310] infiniband syz0: added lo [ 347.211896][T10310] syz0: rxe_create_cq: returned err = -12 [ 347.228388][T10310] infiniband syz0: Couldn't create ib_mad CQ [ 347.384144][T10359] overlay: Unknown parameter '/' [ 348.140390][T10310] infiniband syz0: Couldn't open port 1 [ 348.182400][ T5884] usbhid 2-1:1.0: can't add hid device: -71 [ 348.198452][ T5884] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 348.255226][T10310] RDS/IB: syz0: added [ 348.261827][ T5884] usb 2-1: USB disconnect, device number 35 [ 348.272877][T10310] smc: adding ib device syz0 with port count 1 [ 348.302074][T10310] smc: ib device syz0 port 1 has pnetid [ 348.336878][T10310] lo speed is unknown, defaulting to 1000 [ 348.371911][ T54] lo speed is unknown, defaulting to 1000 [ 348.426461][T10371] netlink: 108 bytes leftover after parsing attributes in process `syz.7.940'. [ 348.869204][T10377] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 348.904971][T10377] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 348.912821][T10377] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 348.922753][T10377] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 348.930556][T10377] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 349.883233][T10310] lo speed is unknown, defaulting to 1000 [ 349.919908][T10400] overlayfs: failed to clone upperpath [ 350.030838][ T5946] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 350.250437][ T5946] usb 8-1: Using ep0 maxpacket: 16 [ 350.321550][ T5946] usb 8-1: config 0 has an invalid interface number: 23 but max is 0 [ 350.386566][ T5946] usb 8-1: config 0 has no interface number 0 [ 350.407469][ T5946] usb 8-1: too many endpoints for config 0 interface 23 altsetting 49: 224, using maximum allowed: 30 [ 350.422599][ T5946] usb 8-1: config 0 interface 23 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 224 [ 350.436476][ T5946] usb 8-1: config 0 interface 23 has no altsetting 0 [ 350.446201][ T5946] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 350.476435][ T5946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.501848][ T5946] usb 8-1: Product: syz [ 350.506048][ T5946] usb 8-1: Manufacturer: syz [ 350.574297][ T5841] Bluetooth: hci1: command 0x0405 tx timeout [ 350.602460][ T5946] usb 8-1: SerialNumber: syz [ 350.627105][ T5946] usb 8-1: config 0 descriptor?? [ 351.302031][T10420] netlink: 108 bytes leftover after parsing attributes in process `syz.1.952'. [ 351.366386][T10398] lo speed is unknown, defaulting to 1000 [ 351.663683][ T5946] visor 8-1:0.23: Sony Clie 3.5 converter detected [ 351.701405][ T5946] usb 8-1: clie_3_5_startup: get config number failed: -71 [ 351.723828][ T5946] visor 8-1:0.23: probe with driver visor failed with error -71 [ 351.755590][ T5946] usb 8-1: USB disconnect, device number 7 [ 352.196946][T10310] lo speed is unknown, defaulting to 1000 [ 352.210199][ T5891] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 352.394380][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 352.404347][ T5891] usb 2-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 352.444340][ T5891] usb 2-1: config 1 interface 0 has no altsetting 0 [ 352.476001][ T5891] usb 2-1: string descriptor 0 read error: -22 [ 352.488902][ T5891] usb 2-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 352.499048][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.518676][T10432] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 352.670594][T10310] lo speed is unknown, defaulting to 1000 [ 352.745763][T10446] binder: BINDER_SET_CONTEXT_MGR already set [ 352.751899][T10446] binder: 10439:10446 ioctl 4018620d 200000000040 returned -16 [ 353.258616][ T5891] usbhid 2-1:1.0: can't add hid device: -71 [ 353.291374][ T5891] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 353.331463][ T5891] usb 2-1: USB disconnect, device number 36 [ 353.340683][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 353.470435][ T30] audit: type=1400 audit(1753700189.107:1067): avc: denied { connect } for pid=10448 comm="syz.3.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 353.663698][T10310] lo speed is unknown, defaulting to 1000 [ 353.810555][ T5891] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 354.120232][ T5891] usb 8-1: Using ep0 maxpacket: 16 [ 354.129238][ T5891] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 354.143212][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.610636][ T5891] usb 8-1: Product: syz [ 354.618971][ T5891] usb 8-1: Manufacturer: syz [ 354.624044][ T5891] usb 8-1: SerialNumber: syz [ 354.633555][ T5891] usb 8-1: config 0 descriptor?? [ 355.026617][T10477] netlink: 108 bytes leftover after parsing attributes in process `syz.2.964'. [ 355.246635][ T5891] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 355.284299][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 355.297741][ T5891] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 355.308898][ T5891] usb 8-1: media controller created [ 355.417761][ T30] audit: type=1400 audit(1753700191.057:1068): avc: denied { connect } for pid=10485 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 355.456379][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.468923][ T30] audit: type=1400 audit(1753700191.087:1069): avc: denied { write } for pid=10485 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 355.567327][ T5838] lo speed is unknown, defaulting to 1000 [ 355.575075][ T5891] zl10353_read_register: readreg error (reg=127, ret==0) [ 355.593786][ T5891] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 355.640436][ T5891] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 355.677827][ T5891] usb 8-1: USB disconnect, device number 8 [ 355.863558][ T5891] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 357.110258][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 357.501916][T10515] netlink: 40 bytes leftover after parsing attributes in process `syz.2.973'. [ 357.524568][T10515] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 357.572744][T10515] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 357.581319][T10515] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 357.590163][T10515] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 357.597954][T10515] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 358.057454][T10529] netlink: 6048 bytes leftover after parsing attributes in process `syz.3.976'. [ 358.386665][T10530] netlink: 108 bytes leftover after parsing attributes in process `syz.1.977'. [ 358.520577][ T5891] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 358.891185][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.030530][ T5891] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.203045][ T5891] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 359.224700][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.243480][ T5891] usb 3-1: config 0 descriptor?? [ 360.133592][ T1606] usb 3-1: USB disconnect, device number 34 [ 360.291075][ T5891] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 360.443126][T10571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.986'. [ 360.454530][T10571] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 360.461736][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 360.486217][ T5891] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.515009][ T5891] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 360.532412][ T5891] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 360.554834][ T5891] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.658734][ T5891] usb 8-1: config 0 descriptor?? [ 361.563310][T10579] netlink: 108 bytes leftover after parsing attributes in process `syz.3.988'. [ 361.667660][ T30] audit: type=1400 audit(1753700197.257:1070): avc: denied { bind } for pid=10583 comm="syz.3.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 361.679215][T10582] netlink: 6048 bytes leftover after parsing attributes in process `syz.2.989'. [ 361.703117][ T30] audit: type=1400 audit(1753700197.257:1071): avc: denied { node_bind } for pid=10583 comm="syz.3.990" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 361.884400][ T1606] usb 8-1: USB disconnect, device number 9 [ 362.120302][T10593] kvm: user requested TSC rate below hardware speed [ 362.130642][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'. [ 362.664976][T10589] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 363.101590][ T5838] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 363.204930][T10621] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1000'. [ 363.371030][ T1606] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 363.486430][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.506780][ T5838] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 363.538619][ T5838] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 363.558611][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.580639][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 363.601534][ T5838] usb 3-1: config 0 descriptor?? [ 363.821664][ T1606] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.773232][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 364.803569][ T1606] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.812804][ T1606] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 365.116528][ T1606] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.284617][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 365.386612][ T1606] usb 8-1: config 0 descriptor?? [ 366.039199][ T1606] usb 3-1: USB disconnect, device number 35 [ 366.081543][ T5905] usb 8-1: USB disconnect, device number 10 [ 367.301303][T10665] lo speed is unknown, defaulting to 1000 [ 367.990187][T10680] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1012'. [ 368.265973][T10686] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1011'. [ 368.397685][T10691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1016'. [ 368.471726][ T5946] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 368.721470][T10696] kvm: user requested TSC rate below hardware speed [ 368.730740][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 368.750725][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.764014][ T5946] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.773590][ T5946] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 368.784416][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.801745][ T5946] usb 2-1: config 0 descriptor?? [ 368.830213][ T1606] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 369.013519][ T1606] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.160633][ T1606] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.170039][ T1606] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 369.190190][ T1606] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.325831][ T1606] usb 8-1: config 0 descriptor?? [ 369.331169][ T5891] usb 2-1: USB disconnect, device number 37 [ 369.889356][T10727] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 370.060232][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 370.198294][ T5891] usb 8-1: USB disconnect, device number 11 [ 370.823183][T10749] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1027'. [ 371.200195][ T1606] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 371.270245][ T5905] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 371.392113][ T1606] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.408942][ T1606] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.442882][ T1606] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 371.455262][ T1606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.474656][ T5905] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.485373][ T5905] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.518755][ T1606] usb 3-1: config 0 descriptor?? [ 371.523800][ T5905] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 371.537464][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.587303][ T5905] usb 8-1: config 0 descriptor?? [ 372.187887][T10780] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 372.611076][ T5838] usb 3-1: USB disconnect, device number 36 [ 372.624433][ T54] usb 8-1: USB disconnect, device number 12 [ 372.980226][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 373.602990][ T5946] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 374.319108][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.342458][ T5946] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 374.359245][ T5946] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 374.373987][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.396084][ T5946] usb 2-1: config 0 descriptor?? [ 374.597041][T10819] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1041'. [ 374.910526][ T5946] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 375.145739][ T1606] usb 2-1: USB disconnect, device number 38 [ 375.343549][ T5946] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.364094][ T5946] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 375.805091][ T5946] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 375.814228][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.825193][ T5946] usb 8-1: config 0 descriptor?? [ 376.714338][ T54] usb 8-1: USB disconnect, device number 13 [ 376.720879][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 377.570217][T10857] binder: BINDER_SET_CONTEXT_MGR already set [ 377.576358][T10857] binder: 10853:10857 ioctl 4018620d 200000000040 returned -16 [ 378.170801][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.190185][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.383162][T10872] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 378.389704][T10872] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 378.420813][T10872] vhci_hcd vhci_hcd.0: Device attached [ 378.450254][T10873] vhci_hcd: connection closed [ 378.450723][ T5965] vhci_hcd: stop threads [ 378.469562][ T5965] vhci_hcd: release socket [ 378.474701][ T5965] vhci_hcd: disconnect device [ 378.502325][ T9] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 378.673997][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.686757][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 378.697211][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 378.709034][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.724083][ T9] usb 2-1: config 0 descriptor?? [ 379.171780][T10899] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 379.494367][ T5891] usb 2-1: USB disconnect, device number 39 [ 379.655011][T10910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1057'. [ 379.665346][T10910] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 380.193524][T10913] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 380.199953][T10913] PKCS7: Only support pkcs7_signedData type [ 382.078374][ T5891] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 382.259331][T10948] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 382.265869][T10948] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 382.294870][ T5891] usb 8-1: unable to get BOS descriptor or descriptor too short [ 382.315970][ T5891] usb 8-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 382.358683][T10948] vhci_hcd vhci_hcd.0: Device attached [ 382.365035][ T5891] usb 8-1: config 1 interface 0 has no altsetting 0 [ 382.386835][ T5891] usb 8-1: string descriptor 0 read error: -22 [ 382.396756][ T5891] usb 8-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 382.452945][T10950] vhci_hcd: connection closed [ 382.457864][ T5965] vhci_hcd: stop threads [ 382.467419][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.485454][ T5965] vhci_hcd: release socket [ 382.498877][ T5965] vhci_hcd: disconnect device [ 382.511897][T10943] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 382.757584][ T5891] usbhid 8-1:1.0: can't add hid device: -71 [ 382.783870][ T5891] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 382.810495][ T5891] usb 8-1: USB disconnect, device number 14 [ 383.920998][ T9] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 384.119446][T10982] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 384.238975][T10990] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.1073'. [ 384.305001][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 384.314257][ T9] usb 2-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 384.338457][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 384.364837][ T9] usb 2-1: string descriptor 0 read error: -22 [ 384.372702][ T9] usb 2-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 384.384425][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.703816][T10974] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 384.973867][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 385.011815][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 385.060819][ T9] usb 2-1: USB disconnect, device number 40 [ 385.231877][T11011] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1082'. [ 385.242922][T11011] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 385.342567][T11013] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 385.401724][T11017] lo speed is unknown, defaulting to 1000 [ 388.051258][T11056] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 391.210428][ T5905] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 391.291593][ T5891] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 391.441036][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.484017][ T5905] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 391.490259][ T5891] usb 8-1: device descriptor read/64, error -71 [ 391.889365][ T5905] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 391.898495][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.914075][ T5905] usb 2-1: config 0 descriptor?? [ 392.011225][ T5891] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 392.280182][ T5891] usb 8-1: device descriptor read/64, error -71 [ 392.450725][ T5838] usb 2-1: USB disconnect, device number 41 [ 392.616451][ T5891] usb usb8-port1: attempt power cycle [ 393.260328][ T5891] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 393.500219][ T5891] usb 8-1: device descriptor read/8, error -71 [ 395.211560][T11173] binder: BINDER_SET_CONTEXT_MGR already set [ 395.217599][T11173] binder: 11163:11173 ioctl 4018620d 200000000040 returned -16 [ 396.250374][ T5946] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 396.504469][ T5946] usb 8-1: unable to get BOS descriptor or descriptor too short [ 396.545744][ T5946] usb 8-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 396.619605][ T5946] usb 8-1: config 1 interface 0 has no altsetting 0 [ 396.661734][ T5946] usb 8-1: string descriptor 0 read error: -22 [ 396.695107][ T5946] usb 8-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 396.744126][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 396.757104][ T5946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.818186][T11169] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 397.137593][ T5946] usbhid 8-1:1.0: can't add hid device: -71 [ 397.211772][ T5946] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 397.258294][ T5946] usb 8-1: USB disconnect, device number 19 [ 397.669998][T11219] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1122'. [ 397.792805][ T5884] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 398.016855][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.077425][ T5884] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 398.180228][ T5946] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 398.239500][ T5884] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 398.248637][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.259683][ T5884] usb 3-1: config 0 descriptor?? [ 398.342623][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.367986][ T5946] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 398.381139][ T5946] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 398.396600][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.412422][ T5946] usb 2-1: config 0 descriptor?? [ 398.802548][ T5946] usb 3-1: USB disconnect, device number 37 [ 399.020408][T11244] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 399.750361][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 399.874801][ T5884] usb 2-1: USB disconnect, device number 42 [ 400.906944][T11275] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1135'. [ 400.925402][ T5838] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 401.021179][T11271] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 401.027885][T11271] PKCS7: Only support pkcs7_signedData type [ 401.121792][ T5838] usb 3-1: device descriptor read/64, error -71 [ 401.453653][ T5838] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 401.803671][T11284] lo speed is unknown, defaulting to 1000 [ 401.840170][ T5838] usb 3-1: device descriptor read/64, error -71 [ 402.020205][ T5884] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 402.070721][ T5838] usb usb3-port1: attempt power cycle [ 402.257222][ T5884] usb 2-1: unable to get BOS descriptor or descriptor too short [ 402.271214][ T5884] usb 2-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 402.423577][ T5884] usb 2-1: config 1 interface 0 has no altsetting 0 [ 402.473137][ T5884] usb 2-1: string descriptor 0 read error: -22 [ 402.481841][ T5884] usb 2-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 402.491051][ T5838] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 402.498843][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.510646][ T5838] usb 3-1: device descriptor read/8, error -71 [ 402.532786][T11290] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 402.760468][ T5838] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 402.789829][ T5884] usbhid 2-1:1.0: can't add hid device: -71 [ 402.799868][ T5884] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 402.865701][ T5838] usb 3-1: device descriptor read/8, error -71 [ 402.897885][ T5884] usb 2-1: USB disconnect, device number 43 [ 402.940207][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 403.008589][ T5838] usb usb3-port1: unable to enumerate USB device [ 403.890976][T11324] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1147'. [ 404.261057][T11334] kvm: user requested TSC rate below hardware speed [ 404.271680][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 404.472468][T11337] binder: BINDER_SET_CONTEXT_MGR already set [ 404.478565][T11337] binder: 11325:11337 ioctl 4018620d 200000000040 returned -16 [ 405.096979][T11339] lo speed is unknown, defaulting to 1000 [ 405.490351][ T5946] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 405.811474][ T5946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.825435][ T5946] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.885060][ T5946] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 405.926988][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.958296][ T5946] usb 3-1: config 0 descriptor?? [ 405.983273][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 407.063913][ T5884] usb 3-1: USB disconnect, device number 42 [ 407.330254][T11366] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1158'. [ 407.787380][T11381] binder: BINDER_SET_CONTEXT_MGR already set [ 407.793648][T11381] binder: 11370:11381 ioctl 4018620d 200000000040 returned -16 [ 409.420240][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 409.813446][T11404] kvm: user requested TSC rate below hardware speed [ 409.847025][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1164'. [ 410.702227][T11402] lo speed is unknown, defaulting to 1000 [ 411.302762][T11418] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1169'. [ 411.646051][T11420] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 411.652586][T11420] PKCS7: Only support pkcs7_signedData type [ 413.350157][ T5843] Bluetooth: hci1: command 0x0405 tx timeout [ 414.195289][T11450] lo speed is unknown, defaulting to 1000 [ 415.195521][T11464] lo speed is unknown, defaulting to 1000 [ 415.430507][ T24] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 415.472706][T11486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1185'. [ 415.540465][T11486] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 415.576292][T11486] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 415.620813][T11486] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 415.630511][T11486] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 415.691849][T11486] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 415.711417][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.721675][ T24] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 415.750939][ T24] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 415.796471][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.975023][ T24] usb 8-1: config 0 descriptor?? [ 416.745229][ T24] usb 8-1: USB disconnect, device number 20 [ 417.154182][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1189'. [ 418.278370][T11543] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 419.430418][T11567] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1199'. [ 419.451382][T11564] lo speed is unknown, defaulting to 1000 [ 420.013822][T11574] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 420.142350][T11567] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 420.233979][T11567] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 420.284357][T11567] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 420.294250][T11567] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 421.109276][T11599] binder: BINDER_SET_CONTEXT_MGR already set [ 421.115841][T11599] binder: 11592:11599 ioctl 4018620d 200000000040 returned -16 [ 421.570948][ T5891] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 421.861601][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.518148][ T5891] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 422.527455][ T5891] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 422.536699][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.757773][ T5891] usb 2-1: config 0 descriptor?? [ 422.834620][T11618] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1212'. [ 422.844850][T11618] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 423.174711][T11630] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 423.181250][T11630] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 423.267973][T11597] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 423.300412][T11630] vhci_hcd vhci_hcd.0: Device attached [ 423.313794][ T5891] usb 2-1: USB disconnect, device number 44 [ 423.350133][T11631] vhci_hcd: connection closed [ 423.350329][ T13] vhci_hcd: stop threads [ 423.366066][T11638] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1217'. [ 423.376588][T11638] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 423.414064][ T13] vhci_hcd: release socket [ 423.428722][ T13] vhci_hcd: disconnect device [ 423.453710][T11623] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 423.460247][T11623] PKCS7: Only support pkcs7_signedData type [ 423.491428][ T5961] vhci_hcd: vhci_device speed not set [ 424.310228][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 424.919448][ T54] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 424.921649][T11681] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1229'. [ 424.942160][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 424.944284][T11681] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 425.013562][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.025409][T11681] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 425.033333][T11681] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 425.041760][T11681] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 425.049533][T11681] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 425.061831][ T24] usb 2-1: config 0 has no interfaces? [ 425.083430][ T24] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 425.114986][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.124941][ T24] usb 2-1: Product: syz [ 425.130022][ T24] usb 2-1: Manufacturer: syz [ 425.138352][ T24] usb 2-1: SerialNumber: syz [ 425.167138][ T24] usb 2-1: config 0 descriptor?? [ 425.300218][ T54] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.339858][ T54] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 425.351645][ T54] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 425.362562][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.382428][ T54] usb 8-1: config 0 descriptor?? [ 425.416332][T11684] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 426.003687][T11695] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 426.076671][ T9] usb 8-1: USB disconnect, device number 21 [ 426.230902][ T5843] Bluetooth: hci1: command 0x0405 tx timeout [ 426.540176][ T9] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 426.691484][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.705228][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 426.732148][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 426.748852][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.761008][ T9] usb 3-1: config 0 descriptor?? [ 427.302584][ T9] usb 3-1: USB disconnect, device number 43 [ 427.370246][ T24] usb 2-1: USB disconnect, device number 45 [ 427.977387][ T1336] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 428.439944][T11723] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 428.446436][T11723] PKCS7: Only support pkcs7_signedData type [ 428.800350][T11738] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 428.806880][T11738] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.838578][T11738] vhci_hcd vhci_hcd.0: Device attached [ 429.223958][ T9] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 429.300243][T11739] vhci_hcd: connection reset by peer [ 429.327810][ T9295] vhci_hcd: stop threads [ 429.335446][ T9295] vhci_hcd: release socket [ 429.352143][ T9295] vhci_hcd: disconnect device [ 430.410197][ T54] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 430.512529][T11769] lo speed is unknown, defaulting to 1000 [ 431.201417][ T54] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.215834][ T54] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 431.231868][ T54] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 431.261976][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.279621][ T54] usb 8-1: config 0 descriptor?? [ 431.570027][ T54] usb 8-1: USB disconnect, device number 22 [ 433.189423][ T5884] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 433.233087][T11816] lo speed is unknown, defaulting to 1000 [ 433.772046][ T5884] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.887787][ T5884] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 433.908397][ T5884] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 434.072959][T11829] kvm: user requested TSC rate below hardware speed [ 434.118618][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'. [ 434.392881][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.433283][ T5884] usb 8-1: config 0 descriptor?? [ 434.481023][ T9] vhci_hcd: vhci_device speed not set [ 435.514843][T11828] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 435.521554][T11828] PKCS7: Only support pkcs7_signedData type [ 435.569245][ T24] usb 8-1: USB disconnect, device number 23 [ 438.420714][ T24] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 438.582142][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.592361][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 438.637406][ T24] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 438.700309][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.788892][ T24] usb 3-1: config 0 descriptor?? [ 439.426995][ T5884] usb 3-1: USB disconnect, device number 44 [ 439.503434][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.521347][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.780405][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'. [ 442.478978][T11946] binder: BINDER_SET_CONTEXT_MGR already set [ 442.485063][T11946] binder: 11938:11946 ioctl 4018620d 200000000040 returned -16 [ 444.356559][T11973] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 444.363542][T11973] PKCS7: Only support pkcs7_signedData type [ 445.475782][T12001] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 445.482358][T12001] PKCS7: Only support pkcs7_signedData type [ 446.130169][ T5884] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 446.660328][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 446.758646][ T5884] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 446.849692][ T5884] usb 2-1: config 0 has no interface number 0 [ 447.069624][ T5884] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 447.078822][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.243132][ T5884] usb 2-1: Product: syz [ 447.250866][ T5884] usb 2-1: Manufacturer: syz [ 447.259578][ T5884] usb 2-1: SerialNumber: syz [ 447.387378][ T5884] usb 2-1: config 0 descriptor?? [ 447.408130][ T5884] usb 2-1: selecting invalid altsetting 2 [ 447.424182][ T5884] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 447.814689][ T5905] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 448.066153][T12048] kvm: user requested TSC rate below hardware speed [ 448.077646][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'. [ 449.040007][ T5905] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.072630][ T5905] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.120603][ T5905] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 449.179459][ T5946] usb 2-1: USB disconnect, device number 46 [ 449.232857][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.258291][ T5905] usb 8-1: config 0 descriptor?? [ 449.588026][T12065] kvm: user requested TSC rate below hardware speed [ 449.599359][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1321'. [ 450.390927][T12063] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 450.397463][T12063] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.629429][T12063] vhci_hcd vhci_hcd.0: Device attached [ 450.643381][T12069] vhci_hcd: connection closed [ 450.643589][ T59] vhci_hcd: stop threads [ 450.655606][ T59] vhci_hcd: release socket [ 450.662917][ T59] vhci_hcd: disconnect device [ 452.171199][ T54] usb 8-1: USB disconnect, device number 24 [ 452.383476][T12100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1329'. [ 452.414685][T12100] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 452.439926][T12096] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 452.447733][T12096] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 452.464453][T12096] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 452.474535][ T5891] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 452.483884][T12096] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 452.580389][ T54] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 452.648359][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.680672][T12112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1332'. [ 452.690585][ T5891] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 452.699530][ T5891] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 452.715478][T12112] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 452.725220][T12112] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 452.733478][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.741856][ T54] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.753045][ T5891] usb 2-1: config 0 descriptor?? [ 452.762262][ T54] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 452.772959][T12112] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 452.781850][T12112] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 452.808804][ T54] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 452.819678][T12112] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 452.839415][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.902902][ T54] usb 8-1: config 0 descriptor?? [ 453.643401][T12130] kvm: user requested TSC rate below hardware speed [ 453.656597][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 454.811685][T12147] binder: BINDER_SET_CONTEXT_MGR already set [ 454.817719][T12147] binder: 12142:12147 ioctl 4018620d 200000000040 returned -16 [ 455.309239][ T5905] usb 2-1: USB disconnect, device number 47 [ 455.334314][ T5946] usb 8-1: USB disconnect, device number 25 [ 455.570672][T12158] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1341'. [ 455.870254][ T5946] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 456.418575][ T5946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.530220][ T5946] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 456.673734][ T9] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 456.723065][ T5946] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 456.768105][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.796332][ T5946] usb 3-1: config 0 descriptor?? [ 457.097498][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 457.105492][T12183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1346'. [ 457.388254][T12183] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 457.419468][ T9] usb 2-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 457.432385][ T5891] usb 3-1: USB disconnect, device number 45 [ 457.471020][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 457.499020][ T9] usb 2-1: string descriptor 0 read error: -22 [ 457.507874][ T9] usb 2-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 457.550233][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.660130][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 457.710966][T12172] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 458.017680][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 458.030193][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 458.208402][ T9] usb 2-1: USB disconnect, device number 48 [ 459.470323][ T3473] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 459.729814][T12236] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1357'. [ 460.223088][T12231] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 460.229521][T12231] PKCS7: Only support pkcs7_signedData type [ 460.648938][T12254] lo speed is unknown, defaulting to 1000 [ 461.820304][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 461.989878][ T5884] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 462.215878][T12290] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1371'. [ 462.435686][ T5884] usb 8-1: Using ep0 maxpacket: 8 [ 462.459032][ T5884] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 462.487185][ T5884] usb 8-1: config 0 has no interface number 0 [ 462.514723][ T5884] usb 8-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 462.557249][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.593776][ T5884] usb 8-1: Product: syz [ 462.598081][ T5884] usb 8-1: Manufacturer: syz [ 462.598269][T12300] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 462.610086][ T5884] usb 8-1: SerialNumber: syz [ 462.622585][ T5884] usb 8-1: config 0 descriptor?? [ 462.647979][ T5884] usb 8-1: selecting invalid altsetting 2 [ 462.672698][ T5884] i2c-cp2615 8-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 463.590005][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1368'. [ 464.309526][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 465.249161][ T5884] usb 8-1: USB disconnect, device number 26 [ 465.904113][ T9] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 465.921283][T12348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1383'. [ 465.932944][T12348] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 465.948447][T12348] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 465.957384][T12348] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 465.966341][T12348] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 465.974449][T12348] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 466.084323][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 466.139884][ T9] usb 2-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 466.187015][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 466.234026][ T9] usb 2-1: string descriptor 0 read error: -22 [ 466.248518][ T9] usb 2-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 466.269917][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.311379][T12331] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 466.470222][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 466.498051][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 466.607729][T12368] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 466.623792][ T9] usb 2-1: USB disconnect, device number 49 [ 466.640417][ T5891] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 467.350575][T12376] kvm: user requested TSC rate below hardware speed [ 467.697936][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'. [ 468.074491][ T5891] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.090977][ T5891] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 468.099950][ T5891] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 468.112473][ T5891] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.123937][ T5891] usb 8-1: config 0 descriptor?? [ 469.148776][T12366] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 469.542307][ T5905] usb 8-1: USB disconnect, device number 27 [ 469.641710][ T5891] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 469.805516][T12405] lo speed is unknown, defaulting to 1000 [ 469.878122][ T5891] usb 3-1: unable to get BOS descriptor or descriptor too short [ 469.900553][ T5891] usb 3-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 469.918969][ T5891] usb 3-1: config 1 interface 0 has no altsetting 0 [ 469.941648][ T5891] usb 3-1: string descriptor 0 read error: -22 [ 469.948013][ T5891] usb 3-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 469.969454][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.016347][T12398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 470.349029][T12416] binder: BINDER_SET_CONTEXT_MGR already set [ 470.355181][T12416] binder: 12410:12416 ioctl 4018620d 200000000040 returned -16 [ 470.733925][ T5891] usbhid 3-1:1.0: can't add hid device: -71 [ 470.742633][ T5891] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 470.766190][ T5891] usb 3-1: USB disconnect, device number 46 [ 472.303351][T12446] lo speed is unknown, defaulting to 1000 [ 472.952729][T12459] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 472.959153][T12459] PKCS7: Only support pkcs7_signedData type [ 472.996175][T12439] lo speed is unknown, defaulting to 1000 [ 476.986693][T12526] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 476.993333][T12526] PKCS7: Only support pkcs7_signedData type [ 477.400231][ T5905] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 477.814534][ T5905] usb 3-1: unable to get BOS descriptor or descriptor too short [ 477.834102][ T5905] usb 3-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 477.860004][ T5905] usb 3-1: config 1 interface 0 has no altsetting 0 [ 477.918650][ T5905] usb 3-1: string descriptor 0 read error: -22 [ 477.950680][ T5905] usb 3-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 477.969471][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.983239][T12515] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 478.203113][ T5884] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 478.313411][ T5905] usbhid 3-1:1.0: can't add hid device: -71 [ 478.320819][ T5905] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 478.332321][ T5905] usb 3-1: USB disconnect, device number 47 [ 478.398085][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'. [ 479.010674][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.238879][ T5884] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 479.250843][ T5884] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 479.260713][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.349054][ T5884] usb 2-1: config 0 descriptor?? [ 480.428314][ T9] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 480.814596][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 480.836323][ T9] usb 8-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 480.871983][T12566] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 480.890105][ T9] usb 8-1: config 1 interface 0 has no altsetting 0 [ 480.903834][ T9] usb 8-1: string descriptor 0 read error: -22 [ 480.910405][ T9] usb 8-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 481.016394][ T54] usb 2-1: USB disconnect, device number 50 [ 481.036742][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.067148][T12553] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 481.520777][ T9] usbhid 8-1:1.0: can't add hid device: -71 [ 481.529998][ T9] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 481.550184][ T5884] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 481.561677][ T9] usb 8-1: USB disconnect, device number 28 [ 481.700187][ T5884] usb 3-1: device descriptor read/64, error -71 [ 481.863360][T12591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1443'. [ 481.875885][T12591] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 481.903585][T12591] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 481.911532][T12591] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 481.921689][T12591] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 481.929606][T12591] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 482.024702][ T5884] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 482.229707][ T5884] usb 3-1: device descriptor read/64, error -71 [ 482.313855][T12597] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1445'. [ 482.351175][ T5884] usb usb3-port1: attempt power cycle [ 483.102923][ T5884] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 483.421900][ T5884] usb 3-1: device descriptor read/8, error -71 [ 483.604344][T12613] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1449'. [ 483.615446][T12613] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1449'. [ 483.633152][ T30] audit: type=1400 audit(1753700319.277:1072): avc: denied { mount } for pid=12609 comm="syz.7.1449" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 483.804298][T12622] overlayfs: failed to clone upperpath [ 483.811545][ T5884] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 483.970281][ T5884] usb 3-1: device descriptor read/8, error -71 [ 484.166234][ T5884] usb usb3-port1: unable to enumerate USB device [ 484.673770][T12630] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 484.715239][ T30] audit: type=1400 audit(1753700320.347:1073): avc: denied { unmount } for pid=9525 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 485.411617][T12645] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1456'. [ 485.423069][T12645] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 485.431972][T12645] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 485.439756][T12645] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 485.448056][T12645] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 485.455837][T12645] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 485.844369][T12629] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 485.850844][T12629] PKCS7: Only support pkcs7_signedData type [ 486.230296][ T5884] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 486.411325][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 486.547546][ T5884] usb 3-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 486.591952][ T5884] usb 3-1: config 1 interface 0 has no altsetting 0 [ 486.613907][ T5884] usb 3-1: string descriptor 0 read error: -22 [ 486.622653][ T5884] usb 3-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 486.644642][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.669769][T12648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 487.067113][T12684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1463'. [ 487.125148][T12684] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 487.206956][T12684] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 487.214866][T12684] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 487.223588][T12684] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 487.231652][T12684] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 487.442677][ T5884] usbhid 3-1:1.0: can't add hid device: -71 [ 487.490449][ T5884] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 487.540249][ T5884] usb 3-1: USB disconnect, device number 52 [ 490.672214][T12715] lo speed is unknown, defaulting to 1000 [ 491.367445][ T6934] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 492.770169][ T5891] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 493.005377][ T5891] usb 3-1: device descriptor read/64, error -71 [ 493.351970][ T5891] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 493.508435][T12763] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1480'. [ 493.519106][T12763] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 493.526248][ T5891] usb 3-1: device descriptor read/64, error -71 [ 493.695254][ T5891] usb usb3-port1: attempt power cycle [ 493.776236][T12770] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 494.944048][ T30] audit: type=1400 audit(1753700330.567:1074): avc: denied { unlink } for pid=12780 comm="syz.7.1485" name="#e" dev="tmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 495.085927][ T30] audit: type=1400 audit(1753700330.567:1075): avc: denied { mount } for pid=12780 comm="syz.7.1485" name="/" dev="overlay" ino=574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 495.196065][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1486'. [ 497.655889][T12826] FAULT_INJECTION: forcing a failure. [ 497.655889][T12826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.669120][T12826] CPU: 0 UID: 0 PID: 12826 Comm: syz.2.1493 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 497.669140][T12826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 497.669150][T12826] Call Trace: [ 497.669155][T12826] [ 497.669160][T12826] dump_stack_lvl+0x16c/0x1f0 [ 497.669180][T12826] should_fail_ex+0x512/0x640 [ 497.669199][T12826] _copy_to_user+0x32/0xd0 [ 497.669211][T12826] simple_read_from_buffer+0xcb/0x170 [ 497.669228][T12826] proc_fail_nth_read+0x197/0x270 [ 497.669243][T12826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 497.669259][T12826] ? rw_verify_area+0xcf/0x680 [ 497.669272][T12826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 497.669287][T12826] vfs_read+0x1e1/0xc60 [ 497.669304][T12826] ? __pfx_vfs_read+0x10/0x10 [ 497.669317][T12826] ? lockdep_hardirqs_on+0x7c/0x110 [ 497.669338][T12826] ? fdget_pos+0x2a7/0x370 [ 497.669348][T12826] ? __sanitizer_cov_trace_pc+0x3b/0x70 [ 497.669363][T12826] ksys_read+0x12a/0x250 [ 497.669377][T12826] ? __pfx_ksys_read+0x10/0x10 [ 497.669392][T12826] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 497.669407][T12826] do_syscall_64+0xcd/0x4c0 [ 497.669418][T12826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.669428][T12826] RIP: 0033:0x7f6bc9b8d3bc [ 497.669437][T12826] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 497.669446][T12826] RSP: 002b:00007f6bca995030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 497.669456][T12826] RAX: ffffffffffffffda RBX: 00007f6bc9db6160 RCX: 00007f6bc9b8d3bc [ 497.669463][T12826] RDX: 000000000000000f RSI: 00007f6bca9950a0 RDI: 0000000000000008 [ 497.669469][T12826] RBP: 00007f6bca995090 R08: 0000000000000000 R09: 0000000000000000 [ 497.669474][T12826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.669480][T12826] R13: 0000000000000001 R14: 00007f6bc9db6160 R15: 00007ffce68c8ea8 [ 497.669493][T12826] [ 499.904973][ T5884] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 500.332255][ T30] audit: type=1400 audit(1753700335.977:1076): avc: denied { create } for pid=12858 comm="syz.3.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 500.372919][T12859] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 500.442573][ T5884] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.696467][ T5884] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 500.720158][ T5884] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 500.835497][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.876464][ T5884] usb 8-1: config 0 descriptor?? [ 501.048726][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.055180][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.815700][ T30] audit: type=1400 audit(1753700337.457:1077): avc: denied { create } for pid=12871 comm="syz.1.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 502.981176][ T5884] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 503.215564][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.266945][ T5884] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 503.285151][ T9] usb 8-1: USB disconnect, device number 29 [ 503.341878][ T5884] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 503.399246][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.418054][ T5884] usb 3-1: config 0 descriptor?? [ 505.200378][ T54] usb 3-1: USB disconnect, device number 56 [ 506.470107][ T9] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 506.578717][ T30] audit: type=1400 audit(1753700342.217:1078): avc: denied { create } for pid=12936 comm="syz.1.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 506.950085][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.963744][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 506.973979][ T9] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 507.013929][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.149852][ T9] usb 8-1: config 0 descriptor?? [ 507.156339][T12942] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 507.162815][T12942] PKCS7: Only support pkcs7_signedData type [ 508.270252][ T9] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 508.323649][ T5961] usb 8-1: USB disconnect, device number 30 [ 508.442144][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.459729][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 508.486474][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 508.511514][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.635163][ T9] usb 3-1: config 0 descriptor?? [ 508.776338][T12977] overlayfs: missing 'lowerdir' [ 509.233816][T12979] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 509.576793][T12982] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 510.652489][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 511.311009][T13001] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 511.317487][T13001] PKCS7: Only support pkcs7_signedData type [ 511.570713][ T5961] usb 3-1: USB disconnect, device number 57 [ 513.590613][T13035] netlink: 'syz.7.1541': attribute type 3 has an invalid length. [ 513.608889][T13035] netlink: 'syz.7.1541': attribute type 1 has an invalid length. [ 513.620608][T13035] netlink: 220 bytes leftover after parsing attributes in process `syz.7.1541'. [ 514.540949][T13036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.821668][T13063] input: syz1 as /devices/virtual/input/input8 [ 515.271258][ T30] audit: type=1400 audit(1753700350.547:1079): avc: denied { ioctl } for pid=13056 comm="syz.1.1545" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 519.250890][T13115] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1560'. [ 519.277434][T13115] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 519.288548][T13115] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 519.296437][T13115] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 519.344867][T13115] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 519.352607][T13115] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 519.809533][T13134] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 519.816059][T13134] PKCS7: Only support pkcs7_signedData type [ 520.133309][T13142] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 520.150803][T13142] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 522.723718][T13186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1576'. [ 522.779358][T13186] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 523.069715][T13187] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 523.350141][ T5891] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 523.501063][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 523.541896][T13184] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 523.549628][T13184] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 523.557847][T13184] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 523.565581][T13184] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 523.617486][ T1336] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 523.670137][ T5891] usb 3-1: device descriptor read/64, error -32 [ 524.006442][ T30] audit: type=1326 audit(1753700359.647:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa2b8e9a9 code=0x7ffc0000 [ 524.030937][ T30] audit: type=1326 audit(1753700359.647:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa2b8e9a9 code=0x7ffc0000 [ 524.062619][ T30] audit: type=1326 audit(1753700359.647:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f2aa2b8e9a9 code=0x7ffc0000 [ 524.453297][ T30] audit: type=1326 audit(1753700359.647:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa2b8e9a9 code=0x7ffc0000 [ 524.479100][ T30] audit: type=1326 audit(1753700359.647:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa2b8e9a9 code=0x7ffc0000 [ 524.480128][ T5891] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 524.518583][ T30] audit: type=1326 audit(1753700359.647:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2aa2b8e9a9 code=0x7ffc0000 [ 524.547427][ T30] audit: type=1326 audit(1753700359.647:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa2b8e9a9 code=0x7ffc0000 [ 524.579669][ T30] audit: type=1326 audit(1753700359.647:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13204 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa2b8e9a9 code=0x7ffc0000 [ 524.626119][ T30] audit: type=1400 audit(1753700360.267:1088): avc: denied { shutdown } for pid=13208 comm="syz.1.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 524.826150][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 524.873190][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.942655][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.106206][ T5891] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 525.238780][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.515683][ T5891] usb 3-1: config 0 descriptor?? [ 525.558308][ T5891] hub 3-1:0.0: USB hub found [ 525.690169][T13224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1586'. [ 525.704662][T13224] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 526.256060][ T5891] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 526.283073][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 526.345619][ T5891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 526.677593][ T5891] usb 3-1: USB disconnect, device number 59 [ 527.105683][ T30] audit: type=1400 audit(1753700362.747:1089): avc: denied { read write } for pid=13241 comm="syz.1.1592" dev="9p" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 527.780295][ T5891] usb 8-1: new low-speed USB device number 31 using dummy_hcd [ 528.390178][T13266] bridge0: port 3(veth0_to_bridge) entered blocking state [ 528.397482][T13266] bridge0: port 3(veth0_to_bridge) entered disabled state [ 528.404876][T13266] veth0_to_bridge: entered allmulticast mode [ 528.412292][T13266] veth0_to_bridge: entered promiscuous mode [ 528.472475][ T5891] usb 8-1: unable to get BOS descriptor or descriptor too short [ 528.481133][ T5891] usb 8-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 528.525630][ T5891] usb 8-1: config 1 interface 0 has no altsetting 0 [ 529.099870][ T5891] usb 8-1: string descriptor 0 read error: -22 [ 529.106451][ T5891] usb 8-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 529.118528][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.605512][T13247] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 530.127615][ T5891] usbhid 8-1:1.0: can't add hid device: -71 [ 530.133781][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 530.133794][ T30] audit: type=1400 audit(1753700365.777:1096): avc: denied { ioctl } for pid=13277 comm="syz.3.1602" path="socket:[34510]" dev="sockfs" ino=34510 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 530.193306][ T5891] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 530.224050][ T5891] usb 8-1: USB disconnect, device number 31 [ 530.335174][T13283] lo speed is unknown, defaulting to 1000 [ 530.807273][T13297] tmpfs: Bad value for 'mpol' [ 531.170176][ T1606] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 531.240948][ T5961] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 531.351497][ T1606] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.473767][ T5961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.497399][ T1606] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 531.527268][ T5961] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 531.536899][ T1606] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 531.770256][ T5891] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 531.997856][ T5961] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 532.007042][ T1606] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.015789][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.023487][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.025620][ T1606] usb 8-1: config 0 descriptor?? [ 532.042193][ T5961] usb 3-1: config 0 descriptor?? [ 532.066127][ T5891] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 532.077706][ T5891] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 532.104826][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.126959][ T5891] usb 2-1: config 0 descriptor?? [ 532.268727][T13331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1615'. [ 532.292148][T13331] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 532.882913][ T5961] usb 3-1: USB disconnect, device number 60 [ 533.186211][ T5891] usb 8-1: USB disconnect, device number 32 [ 533.202865][ T1606] usb 2-1: USB disconnect, device number 51 [ 534.038318][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'. [ 534.226382][T13342] lo speed is unknown, defaulting to 1000 [ 534.645694][T13358] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 534.910905][T13358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=13358 comm=syz.1.1620 [ 537.149573][T13393] bond0 (unregistering): Released all slaves [ 537.233414][T13405] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 537.365087][ T10] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 537.671842][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 537.682121][ T10] usb 2-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 537.696938][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 537.711001][T13393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13393 comm=syz.2.1628 [ 537.716813][ T10] usb 2-1: string descriptor 0 read error: -22 [ 537.730391][ T10] usb 2-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 537.770037][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.808816][T13392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 538.127274][T13418] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 538.155870][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 538.618730][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 538.637670][ T10] usb 2-1: USB disconnect, device number 52 [ 539.883776][T13460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1642'. [ 539.894704][T13460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1642'. [ 540.142976][T13454] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 540.149452][T13454] PKCS7: Only support pkcs7_signedData type [ 541.036978][ T9] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 541.324754][ T30] audit: type=1400 audit(1753700376.947:1097): avc: denied { ioctl } for pid=13485 comm="syz.2.1648" path="socket:[34892]" dev="sockfs" ino=34892 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 541.384818][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.395988][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 541.406168][T13487] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 541.414910][ T9] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 542.244372][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.266105][ T9] usb 8-1: config 0 descriptor?? [ 542.462290][T13500] syz.1.1652 (13500): /proc/13500/oom_adj is deprecated, please use /proc/13500/oom_score_adj instead. [ 543.431390][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1654'. [ 543.446285][ T5961] usb 8-1: USB disconnect, device number 33 [ 543.510910][ T30] audit: type=1400 audit(1753700379.127:1098): avc: denied { mount } for pid=13510 comm="syz.0.1655" name="/" dev="hugetlbfs" ino=34944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 545.652636][ T5961] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 545.804166][ T5961] usb 3-1: device descriptor read/64, error -71 [ 546.286037][ T5961] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 546.926371][ T5961] usb 3-1: device descriptor read/64, error -71 [ 546.974596][ T30] audit: type=1400 audit(1753700382.617:1099): avc: denied { ioctl } for pid=13563 comm="syz.2.1672" path="socket:[35014]" dev="sockfs" ino=35014 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 547.477704][ T5961] usb usb3-port1: attempt power cycle [ 547.568823][T13570] FAULT_INJECTION: forcing a failure. [ 547.568823][T13570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.593528][T13570] CPU: 0 UID: 0 PID: 13570 Comm: syz.2.1674 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 547.593552][T13570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 547.593562][T13570] Call Trace: [ 547.593568][T13570] [ 547.593575][T13570] dump_stack_lvl+0x16c/0x1f0 [ 547.593607][T13570] should_fail_ex+0x512/0x640 [ 547.593644][T13570] _copy_to_user+0x32/0xd0 [ 547.593663][T13570] simple_read_from_buffer+0xcb/0x170 [ 547.593690][T13570] proc_fail_nth_read+0x197/0x270 [ 547.593716][T13570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 547.593744][T13570] ? rw_verify_area+0xcf/0x680 [ 547.593765][T13570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 547.593790][T13570] vfs_read+0x1e1/0xc60 [ 547.593819][T13570] ? __pfx___mutex_lock+0x10/0x10 [ 547.593835][T13570] ? __pfx_vfs_read+0x10/0x10 [ 547.593867][T13570] ? __fget_files+0x20e/0x3c0 [ 547.593887][T13570] ksys_read+0x12a/0x250 [ 547.593910][T13570] ? __pfx_ksys_read+0x10/0x10 [ 547.593942][T13570] do_syscall_64+0xcd/0x4c0 [ 547.593961][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.593978][T13570] RIP: 0033:0x7f6bc9b8d3bc [ 547.593992][T13570] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 547.594007][T13570] RSP: 002b:00007f6bca9d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 547.594024][T13570] RAX: ffffffffffffffda RBX: 00007f6bc9db5fa0 RCX: 00007f6bc9b8d3bc [ 547.594036][T13570] RDX: 000000000000000f RSI: 00007f6bca9d70a0 RDI: 0000000000000004 [ 547.594045][T13570] RBP: 00007f6bca9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 547.594055][T13570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.594065][T13570] R13: 0000000000000000 R14: 00007f6bc9db5fa0 R15: 00007ffce68c8ea8 [ 547.594088][T13570] [ 549.180361][ T5961] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 549.300168][ T5961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.312749][ T5961] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 549.322682][ T5961] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 549.334533][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.371682][ T5961] usb 3-1: config 0 descriptor?? [ 550.657237][T13605] capability: warning: `syz.1.1683' uses 32-bit capabilities (legacy support in use) [ 551.011683][ T5891] usb 3-1: USB disconnect, device number 63 [ 553.520515][ T5891] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 553.540159][ T9] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 553.690457][ T9] usb 3-1: device descriptor read/64, error -71 [ 553.698670][ T5891] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.713209][ T5891] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 553.723282][ T5891] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 553.732401][ T5891] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.740397][ T5961] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 553.755287][ T5891] usb 8-1: config 0 descriptor?? [ 553.892633][ T5961] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.905001][ T5961] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 553.915957][ T5961] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 553.932366][ T9] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 553.933211][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.952877][ T5961] usb 2-1: config 0 descriptor?? [ 554.248955][ T5891] usb 8-1: USB disconnect, device number 34 [ 554.332811][ T9] usb 3-1: device descriptor read/64, error -71 [ 554.392770][T13667] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 554.542226][ T9] usb usb3-port1: attempt power cycle [ 554.581311][ T10] usb 2-1: USB disconnect, device number 53 [ 555.260343][ T9] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 555.290513][ T9] usb 3-1: device descriptor read/8, error -71 [ 555.343331][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'. [ 555.525051][ T30] audit: type=1400 audit(1753700391.989:1100): avc: denied { bind } for pid=13676 comm="syz.3.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 555.973160][T13689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1700'. [ 556.634248][T13689] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 558.238220][T13705] : renamed from bond_slave_0 (while UP) [ 559.963840][T13725] netlink: 'syz.3.1711': attribute type 2 has an invalid length. [ 561.038543][ T5905] IPVS: starting estimator thread 0... [ 561.044569][ T30] audit: type=1400 audit(1753700397.689:1101): avc: denied { create } for pid=13730 comm="syz.3.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 561.420483][T13734] IPVS: using max 75 ests per chain, 180000 per kthread [ 561.450059][ T9] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 562.658242][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.665349][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.687206][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.730058][ T5905] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 562.736528][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.786736][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 562.798176][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.813616][ T9] usb 2-1: config 0 descriptor?? [ 563.108221][ T5905] usb 3-1: unable to get BOS descriptor or descriptor too short [ 563.958124][ T9] usb 2-1: USB disconnect, device number 54 [ 564.022368][ T5905] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 564.033400][ T5905] usb 3-1: can't read configurations, error -71 [ 569.070063][ T5838] usb 8-1: new low-speed USB device number 35 using dummy_hcd [ 569.306930][ T5838] usb 8-1: unable to get BOS descriptor or descriptor too short [ 569.335603][ T5838] usb 8-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 569.365018][ T5838] usb 8-1: config 1 interface 0 has no altsetting 0 [ 569.493755][ T5838] usb 8-1: string descriptor 0 read error: -22 [ 569.500422][ T5838] usb 8-1: New USB device found, idVendor=1130, idProduct=3141, bcdDevice= 0.40 [ 569.509463][ T5838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.520414][T13792] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 570.347169][ T5838] usbhid 8-1:1.0: can't add hid device: -71 [ 570.425765][ T5838] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 570.477696][ T5838] usb 8-1: USB disconnect, device number 35 [ 571.127055][ T1606] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 571.742188][ T5905] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 571.776537][ T1606] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.906405][ T1606] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 571.936041][T13831] binder: BINDER_SET_CONTEXT_MGR already set [ 571.942204][T13831] binder: 13829:13831 ioctl 4018620d 200000000040 returned -16 [ 571.957336][ T1606] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 571.974803][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.997566][ T1606] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.007636][ T5905] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.034558][ T5905] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 572.069846][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.086132][ T1606] usb 8-1: config 0 descriptor?? [ 572.177972][ T5905] usb 2-1: config 0 descriptor?? [ 572.626044][T13839] lo speed is unknown, defaulting to 1000 [ 573.139040][ T3473] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 573.140056][ T9] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 573.612222][ T5838] usb 8-1: USB disconnect, device number 36 [ 573.747884][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.764709][T13845] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 573.774289][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 573.787230][ T5905] usb 2-1: USB disconnect, device number 55 [ 573.794227][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 573.803945][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.817567][ T9] usb 3-1: config 0 descriptor?? [ 573.954271][T13852] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 573.960758][T13852] PKCS7: Only support pkcs7_signedData type [ 575.198753][T13864] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 575.205376][T13864] PKCS7: Only support pkcs7_signedData type [ 575.306461][ T1606] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 575.359956][ T5905] usb 3-1: USB disconnect, device number 70 [ 575.580153][ T1606] usb 2-1: Using ep0 maxpacket: 16 [ 575.588016][ T1606] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 575.597137][ T1606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.605257][ T1606] usb 2-1: Product: syz [ 575.609406][ T1606] usb 2-1: Manufacturer: syz [ 575.614070][ T1606] usb 2-1: SerialNumber: syz [ 575.620712][ T1606] usb 2-1: config 0 descriptor?? [ 576.908206][ T1606] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 576.939713][ T1606] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 577.029956][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'. [ 577.415553][ T1606] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 577.423638][ T1606] usb 2-1: media controller created [ 577.626681][ T1606] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.829406][ T1606] zl10353_read_register: readreg error (reg=127, ret==0) [ 577.837705][ T1606] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 577.849561][ T1606] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 577.850647][ T5838] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 577.865205][ T1606] usb 2-1: USB disconnect, device number 56 [ 577.886124][ T1606] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 578.031579][T13900] sctp: [Deprecated]: syz.3.1757 (pid 13900) Use of int in max_burst socket option deprecated. [ 578.031579][T13900] Use struct sctp_assoc_value instead [ 578.091774][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 578.230247][ T1606] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 578.485557][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.495909][ T5838] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 578.518072][ T5838] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 578.532349][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.647847][T13905] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 578.654514][T13905] PKCS7: Only support pkcs7_signedData type [ 578.662825][ T5838] usb 3-1: Product: syz [ 578.667052][ T5838] usb 3-1: Manufacturer: syz [ 578.671904][ T5838] usb 3-1: SerialNumber: syz [ 578.678160][ T5838] usb 3-1: config 0 descriptor?? [ 578.716020][ T1606] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.853791][ T1606] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 579.002048][ T1606] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 579.167842][ T1606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.178503][ T1606] usb 2-1: config 0 descriptor?? [ 579.526053][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1754'. [ 579.652153][T13919] 9pnet_fd: Insufficient options for proto=fd [ 581.107429][ T9] usb 3-1: USB disconnect, device number 71 [ 581.450038][ T5905] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 581.651016][ T5838] usb 2-1: USB disconnect, device number 57 [ 582.801656][T13957] kvm: user requested TSC rate below hardware speed [ 582.813273][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 582.910263][ T5905] usb 8-1: Using ep0 maxpacket: 16 [ 583.113207][ T30] audit: type=1400 audit(1753700419.509:1102): avc: denied { bind } for pid=13955 comm="syz.3.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 583.133625][ T30] audit: type=1400 audit(1753700419.509:1103): avc: denied { setopt } for pid=13955 comm="syz.3.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 583.180832][ T5905] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 583.189891][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.202784][ T5905] usb 8-1: Product: syz [ 583.206987][ T5905] usb 8-1: Manufacturer: syz [ 583.211698][ T5905] usb 8-1: SerialNumber: syz [ 583.270492][ T5905] usb 8-1: config 0 descriptor?? [ 583.620196][ T5838] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 584.054800][ T5905] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 584.099585][ T5905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 584.113113][ T5905] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 584.203928][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.219276][ T5838] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 584.241946][ T5838] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 584.259824][ T5905] usb 8-1: media controller created [ 584.292709][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.325054][ T5838] usb 2-1: config 0 descriptor?? [ 584.370669][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 584.570847][ T5905] zl10353_read_register: readreg error (reg=127, ret==0) [ 584.653508][ T5905] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 584.768428][ T5905] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 584.783810][T13969] ------------[ cut here ]------------ [ 584.789266][T13969] usb 8-1: BOGUS control dir, pipe 80002580 doesn't match bRequestType c0 [ 584.798371][T13969] WARNING: CPU: 1 PID: 13969 at drivers/usb/core/urb.c:411 usb_submit_urb+0x13c3/0x1790 [ 584.808113][T13969] Modules linked in: [ 584.812198][T13969] CPU: 1 UID: 0 PID: 13969 Comm: syz.1.1774 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 584.822342][T13969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 584.832442][T13969] RIP: 0010:usb_submit_urb+0x13c3/0x1790 [ 584.838059][T13969] Code: e8 b2 88 87 fa 4c 89 ef e8 8a 9e d5 fe 44 8b 44 24 28 44 89 f9 48 8b 54 24 38 48 89 c6 48 c7 c7 e0 19 73 8c e8 0e 90 46 fa 90 <0f> 0b 90 90 e9 84 ef ff ff e8 7f 88 87 fa 0f b6 2d a8 40 5d 09 31 [ 584.858012][T13969] RSP: 0000:ffffc9000ea8f9b0 EFLAGS: 00010286 [ 584.864261][T13969] RAX: 0000000000000000 RBX: ffff888066e51d00 RCX: ffffc9000bb91000 [ 584.872240][T13969] RDX: 0000000000080000 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 584.880242][T13969] RBP: ffff88801bf19058 R08: 0000000000000001 R09: 0000000000000000 [ 584.888189][T13969] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888065f2cc00 [ 584.896166][T13969] R13: ffff88801bf190b0 R14: 0000000000000001 R15: 0000000080002580 [ 584.904168][T13969] FS: 00007f7d4662b6c0(0000) GS:ffff888124820000(0000) knlGS:0000000000000000 [ 584.913122][T13969] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.919692][T13969] CR2: 00007f1aadad2bd9 CR3: 000000007d26c000 CR4: 00000000003526f0 [ 584.927698][T13969] Call Trace: [ 584.931037][T13969] [ 584.933975][T13969] ? __init_swait_queue_head+0xca/0x150 [ 584.939537][T13969] usb_start_wait_urb+0x104/0x4b0 [ 584.944626][T13969] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 584.950235][T13969] ? __asan_memset+0x23/0x50 [ 584.955080][T13969] usb_control_msg+0x326/0x4a0 [ 584.959825][T13969] ? __pfx_usb_control_msg+0x10/0x10 [ 584.965296][T13969] dtv5100_i2c_msg+0x1d8/0x320 [ 584.970077][T13969] dtv5100_i2c_xfer+0x1e0/0x420 [ 584.974955][T13969] __i2c_transfer+0x6b6/0x2190 [ 584.979745][T13969] ? lockdep_hardirqs_on+0x7c/0x110 [ 584.984984][T13969] ? __pfx___i2c_transfer+0x10/0x10 [ 584.990185][T13969] ? rt_mutex_slowtrylock+0xc9/0x100 [ 584.995469][T13969] i2c_transfer+0x1da/0x380 [ 585.000009][T13969] i2cdev_ioctl_rdwr+0x373/0x710 [ 585.004945][T13969] i2cdev_ioctl+0x5ff/0x820 [ 585.009426][T13969] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 585.014489][T13969] ? selinux_file_ioctl+0x180/0x270 [ 585.019688][T13969] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 585.024744][T13969] __x64_sys_ioctl+0x18e/0x210 [ 585.029518][T13969] do_syscall_64+0xcd/0x4c0 [ 585.034052][T13969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.039924][T13969] RIP: 0033:0x7f7d4578e9a9 [ 585.044336][T13969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.064257][T13969] RSP: 002b:00007f7d4662b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.072862][T13969] RAX: ffffffffffffffda RBX: 00007f7d459b5fa0 RCX: 00007f7d4578e9a9 [ 585.080855][T13969] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 585.088806][T13969] RBP: 00007f7d45810d69 R08: 0000000000000000 R09: 0000000000000000 [ 585.096817][T13969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.104794][T13969] R13: 0000000000000000 R14: 00007f7d459b5fa0 R15: 00007fff02945288 [ 585.112763][T13969] [ 585.115761][T13969] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 585.123016][T13969] CPU: 1 UID: 0 PID: 13969 Comm: syz.1.1774 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 585.132965][T13969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.142994][T13969] Call Trace: [ 585.146250][T13969] [ 585.149159][T13969] dump_stack_lvl+0x3d/0x1f0 [ 585.153735][T13969] panic+0x71c/0x800 [ 585.157611][T13969] ? __pfx_panic+0x10/0x10 [ 585.162008][T13969] ? show_trace_log_lvl+0x29b/0x3e0 [ 585.167192][T13969] ? usb_submit_urb+0x13c3/0x1790 [ 585.172194][T13969] check_panic_on_warn+0xab/0xb0 [ 585.177110][T13969] __warn+0xf6/0x3c0 [ 585.180977][T13969] ? usb_submit_urb+0x13c3/0x1790 [ 585.185978][T13969] report_bug+0x3c3/0x580 [ 585.190286][T13969] ? usb_submit_urb+0x13c3/0x1790 [ 585.195284][T13969] handle_bug+0x184/0x210 [ 585.199592][T13969] exc_invalid_op+0x17/0x50 [ 585.204070][T13969] asm_exc_invalid_op+0x1a/0x20 [ 585.208892][T13969] RIP: 0010:usb_submit_urb+0x13c3/0x1790 [ 585.214500][T13969] Code: e8 b2 88 87 fa 4c 89 ef e8 8a 9e d5 fe 44 8b 44 24 28 44 89 f9 48 8b 54 24 38 48 89 c6 48 c7 c7 e0 19 73 8c e8 0e 90 46 fa 90 <0f> 0b 90 90 e9 84 ef ff ff e8 7f 88 87 fa 0f b6 2d a8 40 5d 09 31 [ 585.234081][T13969] RSP: 0000:ffffc9000ea8f9b0 EFLAGS: 00010286 [ 585.240123][T13969] RAX: 0000000000000000 RBX: ffff888066e51d00 RCX: ffffc9000bb91000 [ 585.248067][T13969] RDX: 0000000000080000 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 585.256012][T13969] RBP: ffff88801bf19058 R08: 0000000000000001 R09: 0000000000000000 [ 585.263956][T13969] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888065f2cc00 [ 585.271901][T13969] R13: ffff88801bf190b0 R14: 0000000000000001 R15: 0000000080002580 [ 585.279848][T13969] ? __warn_printk+0x1a5/0x350 [ 585.284597][T13969] ? __init_swait_queue_head+0xca/0x150 [ 585.290120][T13969] usb_start_wait_urb+0x104/0x4b0 [ 585.295120][T13969] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 585.300644][T13969] ? __asan_memset+0x23/0x50 [ 585.305213][T13969] usb_control_msg+0x326/0x4a0 [ 585.309950][T13969] ? __pfx_usb_control_msg+0x10/0x10 [ 585.315222][T13969] dtv5100_i2c_msg+0x1d8/0x320 [ 585.319971][T13969] dtv5100_i2c_xfer+0x1e0/0x420 [ 585.324814][T13969] __i2c_transfer+0x6b6/0x2190 [ 585.329555][T13969] ? lockdep_hardirqs_on+0x7c/0x110 [ 585.334733][T13969] ? __pfx___i2c_transfer+0x10/0x10 [ 585.339902][T13969] ? rt_mutex_slowtrylock+0xc9/0x100 [ 585.345164][T13969] i2c_transfer+0x1da/0x380 [ 585.349639][T13969] i2cdev_ioctl_rdwr+0x373/0x710 [ 585.354553][T13969] i2cdev_ioctl+0x5ff/0x820 [ 585.359029][T13969] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 585.364026][T13969] ? selinux_file_ioctl+0x180/0x270 [ 585.369200][T13969] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 585.374197][T13969] __x64_sys_ioctl+0x18e/0x210 [ 585.378938][T13969] do_syscall_64+0xcd/0x4c0 [ 585.383416][T13969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.389284][T13969] RIP: 0033:0x7f7d4578e9a9 [ 585.393679][T13969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.413259][T13969] RSP: 002b:00007f7d4662b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.421644][T13969] RAX: ffffffffffffffda RBX: 00007f7d459b5fa0 RCX: 00007f7d4578e9a9 [ 585.429587][T13969] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 585.437530][T13969] RBP: 00007f7d45810d69 R08: 0000000000000000 R09: 0000000000000000 [ 585.445475][T13969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.453421][T13969] R13: 0000000000000000 R14: 00007f7d459b5fa0 R15: 00007fff02945288 [ 585.461372][T13969] [ 585.464566][T13969] Kernel Offset: disabled [ 585.468867][T13969] Rebooting in 86400 seconds..