last executing test programs: 22m40.689764187s ago: executing program 2 (id=175): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_emit_ethernet(0xa8, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) 22m37.365962456s ago: executing program 2 (id=186): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x2, 0x0, {0x2, 0x20}, [@RTA_IIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22m37.254696453s ago: executing program 1 (id=188): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 22m36.885011877s ago: executing program 2 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x4}]}}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240), 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000011c0)={0xa, 0x4e20, 0x7, @remote, 0x5}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, 0x0, 0x4041000) 22m35.947802933s ago: executing program 1 (id=190): socket$netlink(0x10, 0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x1ea, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1dc, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1c8, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="7c2f0aec9d222ea5ee20e6b25cf191669d6293d87d67cbc22a8dca55b40c545d1439d9ab278a279afd807e25e3c9aacca664836fec718e063c9b06cd66442b6407fec5c3e5cd9d0f1001c90a801c4fadce8e13a5e0209edf5c5693acccefa24d4f5a2ef062e701d054d19e9e6340a1651e05fd87b70942c679234426f9b19c0723563d0e38ec970aec02a6154ab61081aae03050d00192bd9d59977bb2f1297a7cd0571a0dfc5688a8e3d5f4a226b7e397b43c186967c74821bc70005059ab5606c70045a6a9915285c8215b9abd839f50530dde8ad500d70d8f7c1a0093293e6d632f8e8939f3199ab4ec92caed14c26975b57578c8ea666a2e4253ca9516f3c07bdc5ad27c2ff29e1569795f9dfbd1b92919432e423ff4f9a35b77419d6a8540fc9431ca78e05e278bef5a21b1423a3c9f7c1e2bd16a1ecdfde51cfa4aef38e6afb92770bcefb5fcb277ccede1ddc8647db538661b3d10effa1b6f705ef1b74e5bea20b4f98421b7b4be4c5c6be101f5503a4ecaffae335ef565920d678ed5b41031122b21f9d9b7f270b95f94624a7ddc657c83d3722a8d01f321fd7f685fc74d61a4e1914dda6df4be639c4910c56a84c24a41b9ef07eee4083dd9a30a53a58b50186c12180da4186fe5845b6b325fd112378a82d53bee449bc9d4c2d4331a1323c69c99c778560fc2142d138b23000c5403156cd8223f07a73811ab5b81e287bd6ad95c2fefce002ac77a1ac74d5e868870f29277da69987652b0055b3072efab2fe56fe0fe287f7d51aa772b2e3ae77954a938be2792442e1ab2e6fc078d821c70222142568b6db9609f1db23e8a4a460b9fbbeb48469e6bf0acffd85af86e69535a95c02c30d5ad776002c48e19e134688780bbafaf81097358b0c8f63bcefb61d8f29aacb3dc1a485bb7343539387f1e83b9283674bdc0d7fe8bf86948439f4b4a20e2832c560c743e4c2d37eddbf341c47f71a93101a08a533e96601f98752531428944d88c836c7d7a082859a3120721afd99130e83f689720638e889ddf4a23228dc23e955ae67fe5447e134b63f4c72e5664d2ed8a7406568e08f3582661006cf5800615fc4a5ec88ef3361ea027d2a1a550ac3e017a212570cd145fcc2e1984e4fca28bf4110f33a5ac847fcd3605e546ee8ea49a7de5d4b599926a76028e9d5259db7fd6f908c7a8657d42f895380c88ac85cdc183f6b61172b966a41888ceae895eaf18cb8da8d1918411b297959a8abacf8c4cee15ca87048aae13ffe068dee23a9edc2b259aeb0595b7ed2633431067a999f915934aef1be5f360f0db726f24e8eb89adb8db535de6fd7c06678831d17e47c67cd22f047b92d8fba83a49a1285def4dfdf634408cb05ae73f24df76e7393d1e90d40c50bd388bb53e281b889084a1a19efdfa6be16aed1a621d964c1ac332b65765e7440ccc75ef44851409c458905127bd161bf98cb6a3681af073e3650f52d5ee691c347e86360c3aebae4a691b2485d68c57d09e269656b1efbfd3413d54c8d3e467c0bfa84669d0cc5e9cfd50b9c79171f8b6a5e66e8c6f66c0916083b8e8a464498aed3badd2f267fb56adb0953b9ebd0370f941d796abffa81722d502c8d1e9d844802f4197067598b2394dddf76641f9c2ec0403bd379e8f712668b98e1121a27888b227104875999cd562fa9833458879652bfeffabc6bbb5c354dc36ad91354ccb5050d69b28b562a72bbf277f96bd1d5dc6408329f6f850a96762a6aebf2a7b5bacbbc032be8b29c453867a47094289f6b8aa38f85051fc4d4478a02af664b3250a396583001a7971cfa6f5a4931e32e7bfb7b4c3f7be3bc5f91ba46554773b9102dbd4aba4344c6fe87bd050f79175d7918d57bc137cde33a884bba63a1adf6e7e71ba783eb1fe689b23d3ad18627b0b229c0d982631308a88c4bf1e2079eb0fcc486ef864e7c6a75cce17b133577fa88d62807398b8a795ae2bb7610f8b17cfc56ff11b8ffc4aa316e612fc76955dc44e66467c4d632657d4cac3cc1bda8c2c6207915a89f76bf1fd61c156ba8720bb8048601cd1221f6996e6f04e44b842e00a4487cd59501a65db1f6ade7f22ba5d7ee8e67125e284eef41ad5f2069a48cc71c621eb08d832ef8592874199c5c03249d3ee03422535c2be6919c43724277d56a885ab67753ae8d7f1317b7e534bb1a111a0edb5d298c1374c7824a80fb00ae268f2fd641f1b2a12f712d9a5e027957941ffb4218c6d8a8e7950dca0b4c9018dcfb67244a30080d54781b5111c85cd89e08f51c55975301ff389baf2242ef0fb662122a2eb89c1dcaf82d6391906a1b235635e6c484cd5fa32bc80ce68d505df9a9c6b21e222c3b9330243b8e02a3e661c20e0da633d88f7debaf6643654050ab73613dbea6176109b5c35c4d280739aee77f81a1b58efa9e606259f45745b69523bc81828cfcfffd185ad51b4b183b7a1ef86757172ef67a4f153b7c3a3e99f15ef5b09d81cd1ccec8016ecc9864ccf2efdbf7a79ff9ba814a4a9e3124d735a591c649cdefa98bd569c5f4db18a537c55544c671d398ec50d9fc2b1ca1f9b0278acc9a21779c3815fcb0ee1c66c774b6591e8f6b5c9828db8a5d104213cd4513974be404a50c11009c15a1e2aaa81abc6c706c341f145f975717819c4429007ee648f6c3fca45d714981cd9240beea8b02a19e0ddb083dc8115d64d75ab087c87e00792b8b83551ca82b311444067923656b0e70015ca4775da3d5e984ea8af20955f92d9cbd9acca8cd258df4276a118505d440b74e93bd0b97caeb0e24dbb09e7dbdfe0c3b4bdc0983a7d1eee02bee9c5d381bfbd7dfbb6329539698477f3a8bc7f82c01588d679a167e91487f150e5923cbf3030f09c8fb89cf178f5e953618887b7e56afdfd6a6b5e3003cecdbcba76ed86bc48907fada5e0178f9194970323ae9c818215ae2feb1ee56b289d83e8e9d2ab27056ede5651d2a92a93dd3d6c519ac128a44f1414f93e96c55485a73f3cb7e4750d0f2a2acef87e46a7012a30712f7cfe2ac9372af0efcb6475e3a1a8db1961040002915038412b892eee569aae8f38fb07c27aef5bbab7750a244a7c3b0193004246afa1a72368db45cd3649a89b54e880ea12c92beb59e366d7893f725bb8080aebcd35857ff686d03eddc33af248cecc5198bda6f395b55294821f6853232cb5bde67a4166a35224cd9c5b54e6b5a38376b1fdfaeb7563a8ea93148997e2bf490c67916f059e3e1992a986f96d2720a6418cf8c57d6e72eb90d7ca59a3a20fd414e404900aa4a45f381ff7828e15558b4862055bf795c9134836878999200e71e9ba9f83a2e28955c7b37244f3abc8f9d15a5e6c3d9b2f76620b3b2bcb13c0c44c63b9bddd51e339aedfc3a4d995df0eca66c6891ca9099923577e7cd84cb58cf0d6d6eda2baeb00775c4e717e31dbc881615d5f1a0898017954e882a444017e947b1fc05fdcf4495c5dbe3b7b4ce4c1535070fbc64d135df094fe4f6cdd452e7a5f844145af9b746dc5eecede9a834de1ff65525ea3017478ee08dc1bcff852a9d2ad94f46840bdcf1b6226fb0cdb620787692e52aae3b9b703f30b3ce6ca6dcaeb8b3a5884c30c570b29741c70ad99f5d7f463c7e5e1b4bbaafae33e789c0ae1114674732d50c0a799bfa6388365c392d47c3e0d2992a61d21e4", @ANYRES16=r0]) 22m35.127478382s ago: executing program 2 (id=195): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) stat(0x0, 0x0) chdir(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) 22m34.000906199s ago: executing program 2 (id=198): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) syz_fuse_handle_req(r1, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 22m33.456507419s ago: executing program 2 (id=201): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r4, 0x0, 0x2, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) 22m32.170460693s ago: executing program 32 (id=201): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r4, 0x0, 0x2, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) 22m32.167050945s ago: executing program 1 (id=204): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000003c0)={0x1, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 22m31.986809593s ago: executing program 1 (id=208): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) stat(0x0, 0x0) chdir(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) 22m31.06689667s ago: executing program 1 (id=212): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c53", 0xb, 0xfffffffffffffffe) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc020) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 22m29.576192728s ago: executing program 0 (id=216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000025000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) 22m29.355792002s ago: executing program 0 (id=217): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000003c0)={0x1, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 22m29.25010253s ago: executing program 0 (id=218): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000300)=0x101, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) close_range(r3, 0xffffffffffffffff, 0x0) 22m28.791292929s ago: executing program 1 (id=219): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 22m28.504662004s ago: executing program 33 (id=219): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 22m28.500042198s ago: executing program 0 (id=221): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) stat(0x0, 0x0) chdir(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) 22m27.528635658s ago: executing program 0 (id=223): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0xd4, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x3a}}, r2, 0x40099d}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 22m27.071668611s ago: executing program 0 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b9a6, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r2, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}, {&(0x7f0000000780)="427449fe2897ff2d31a79c31468f3474bfba5e8b5248f24721d5da921684ae81df6ce5c2a438bec3512f08b85fd1fe0a36638cadb0c12cce9009c67d079d62b29223e517895c2513990da07a7925460e8f346b311f3b62538b5d7be03c998796199269323122b82035608384cd8a77518e72e5ffa19aeaaa8713e4c03123cf4dc9a69ec06ecd5304fca5e5b120212f2710ce8696af3dec976aea81fb73386033bb7790afc27bdf7e7e067f1745cd6c9e12d72725d1585b3a565db7685bc8a01bc86ff6", 0xc3}, {&(0x7f0000000880)="8568cd41d0c8a7f10def4b042c23f004460c1eedd1b1087b84a62affd4ab37e9b79d663e63927568b835702181f5d082246bfb6bbe0f387373cbb241407f7bba0863b4decc956236cf2eb8111ee0941b0332d93f73859a2da61208914d9eda3701d6522a573ab10d92bfea98f17afb17c4504604ef65fc9341d2da7f046ab84bfb3b9e8a41ca3fef4dc01b2f1e39357e337a2a0b67bd5270fc8819da82185d1241441a79be4028581e2e33f6d10a596d261953308f769025346afe68961f937cbe70c99fbcce0bd66c7239a786dc77ff7a62c797d0eb4b9608d5bf40efc5e19d755b94bf9c29df", 0xe7}, {&(0x7f0000000c40)="6ad84a0beca61953479d93776519fd63938fbbe27dc1b67e52b110557498f8c223f01d3844f2a636fb51faf3f7c869ca131ed0278bf03e839b57acbac4a014df5cdf13f940a39ca21fb365f5289fc2392f35b7f738165ee6721aaa23d5b453158f4b9f41d71f6890b610a9fb84625b94e0916d623eb098fbde5466014ac44e86702bc91646896bc447c8ab7b64887e99e3021172b084469ebac050a7", 0x9c}], 0x5}, 0x4) 22m26.898480254s ago: executing program 34 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b9a6, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r2, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}, {&(0x7f0000000780)="427449fe2897ff2d31a79c31468f3474bfba5e8b5248f24721d5da921684ae81df6ce5c2a438bec3512f08b85fd1fe0a36638cadb0c12cce9009c67d079d62b29223e517895c2513990da07a7925460e8f346b311f3b62538b5d7be03c998796199269323122b82035608384cd8a77518e72e5ffa19aeaaa8713e4c03123cf4dc9a69ec06ecd5304fca5e5b120212f2710ce8696af3dec976aea81fb73386033bb7790afc27bdf7e7e067f1745cd6c9e12d72725d1585b3a565db7685bc8a01bc86ff6", 0xc3}, {&(0x7f0000000880)="8568cd41d0c8a7f10def4b042c23f004460c1eedd1b1087b84a62affd4ab37e9b79d663e63927568b835702181f5d082246bfb6bbe0f387373cbb241407f7bba0863b4decc956236cf2eb8111ee0941b0332d93f73859a2da61208914d9eda3701d6522a573ab10d92bfea98f17afb17c4504604ef65fc9341d2da7f046ab84bfb3b9e8a41ca3fef4dc01b2f1e39357e337a2a0b67bd5270fc8819da82185d1241441a79be4028581e2e33f6d10a596d261953308f769025346afe68961f937cbe70c99fbcce0bd66c7239a786dc77ff7a62c797d0eb4b9608d5bf40efc5e19d755b94bf9c29df", 0xe7}, {&(0x7f0000000c40)="6ad84a0beca61953479d93776519fd63938fbbe27dc1b67e52b110557498f8c223f01d3844f2a636fb51faf3f7c869ca131ed0278bf03e839b57acbac4a014df5cdf13f940a39ca21fb365f5289fc2392f35b7f738165ee6721aaa23d5b453158f4b9f41d71f6890b610a9fb84625b94e0916d623eb098fbde5466014ac44e86702bc91646896bc447c8ab7b64887e99e3021172b084469ebac050a7", 0x9c}], 0x5}, 0x4) 12.994893156s ago: executing program 6 (id=3924): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080), 0x10, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0x811) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000c80)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x1000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0xc0, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x90, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$kcm(0x29, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) 9.789136436s ago: executing program 6 (id=3936): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000280), 0x9) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xc4, 0x0, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x400000000000000, &(0x7f0000000200), 0x2c, 0x4}}, 0x20) add_key(&(0x7f0000000100)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 9.515902932s ago: executing program 4 (id=3937): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x4000, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 9.278730416s ago: executing program 7 (id=3938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffc, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffff190}, {0x3, 0x0, 0x80, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x1, 0x0, 0xf000000}}, 0xe8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x2000002, 0x1c0032, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000080)="5d4295bd407f9e0038523f95839f4aa6187890ab98d1f54d", 0x0, 0x18) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xffe, 0x8, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r4 = dup3(r3, r1, 0x80000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)) close_range(r5, 0xffffffffffffffff, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0486dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="88d4cc483d5265e6afac95919824c0f256d54e45fffb2d758005e2da7427c9d6375cdd772eb21c1c118841973475da82c5c0720c1f66dea186793889af75837ebbb5296b169f0eaf2f9d063ceb80e73044410c717e078773547ec7a8c7c9eb1c2486f56f199e1a7bf5a61236958f5f2f5241bbea07dbbb09f624493fdc2be528d82d0731bee0040b0a1fcd7d7c6e344253c6bd789d5270e23fa7"], 0x0) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$uac2(r6, 0x0, &(0x7f0000001940)={0x44, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.368801838s ago: executing program 5 (id=3940): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0xa, 'X'}, @global=@item_4={0x3, 0x1, 0x0, "1708fef6"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000000)={0x20, 0x22, 0x4a, {0x4a, 0x5, "fa01f72e88251f5aa7f915f8bd488554a7119c0952d16c8206de83cb0786fcf91eb0f7e6dcae46dd5533652f24c4ef57d33ee96a621e755620057ab46c3989a4b8a411ea6ca04fd4"}}, &(0x7f0000000140)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f0000000980)={0x0, 0x22, 0x29, {[@global=@item_4={0x3, 0x1, 0x9, "d6affb09"}, @main=@item_4={0x3, 0x0, 0xa, "43935aeb"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x8, "3cb8"}, @global=@item_012={0x1, 0x1, 0x9, "ea"}, @main=@item_4={0x3, 0x0, 0xb, "4d96a190"}, @global=@item_012={0x2, 0x1, 0x9, "5a10"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_012={0x1, 0x1, 0x6, "c2"}, @main=@item_012={0x2, 0x0, 0xc, "87b5"}, @local=@item_012={0x2, 0x2, 0x0, "c7d2"}, @global=@item_012={0x2, 0x1, 0xa, "c4a9"}, @local=@item_4={0x3, 0x2, 0x4, "21b11d7f"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3ff, 0x81, 0x1, {0x22, 0xcba}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x0, 0xf, 0xa5, "133d08b344b74c40fe27f559bbb9fb8c25b958cceab9da24d9fb8cc17eca5e00db943f1530aa24ed7b8df7489a8f61121a35c0641167c61292c16ebe876fcdf7ad227b220beaecd6c8b1f2cbf0c053c441a4e061a5a38802da30be70ad173d07aba91a0d9d4812317aec46005086eb1eabe52923d6b04498bc18eeb509701503f93556cc443ee2129785d94ecfb7a197c5655ce05806aa34511a597ff0886872b5fc38d18e"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0x20, 0x1, 0x55, "d9dd7f55b00ba0a05c47ce8ce52aa4575acd3a954dbacc6a2eb77986dfbff42aa6d592de3cf55d9b8e07dd537a0cef0f46d2950b3ca2b14821889132ce5a88362666f6e2a4962476dff80161a216bc05d1dea429aa"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x3}}) 7.079525s ago: executing program 3 (id=3943): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x245059, 0x0) unshare(0x22020400) sched_setparam(0x0, &(0x7f0000000040)=0xfffffffe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x7, 0x8}, {0x17de, 0xb, 0x1, 0xffff}}}}, 0x15) syz_usbip_server_init(0x1) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/55, 0x37, 0xffffffffffffffff) setsockopt$packet_int(r3, 0x107, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0, 0xd}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = eventfd2(0x406, 0x80801) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r5}) 6.617173021s ago: executing program 6 (id=3944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xc, @private0, 0x5}, 0x1c) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000140)={0xfffffffffffffe68, &(0x7f0000000180)=ANY=[@ANYBLOB="ced613a986ff179e8e50832bf2d2fa0c49ff6d638e3e26b7a66885776784f19b85232ae34ae7ca4620ff43a9553b298c905027147410882d8b563b9cbf7287991aa0a85f88b13c05de6aa4364a0e6f796e4ad050741e1bcefe5e12f91fa9a7d12bfc8e385dd2bf9208b93b6122179131f584d60088c0fdcd16d863934840392932f5c1885be4d9367d7fda35f247c01d1acb94a784f1461e3f42521b64094cf65591b34de5935f1adc8526404052d9973f2fa96be5a64f30cf095c5611694a2501d8f5547b668dd448f22425e43ccaeabc72", @ANYRESHEX=r1, @ANYRES8=r0], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100100008004d0000480002000001ac1414aa070c09904b30ad2bb70fdad144140cf1fffffffffffffff0ac1414aa0000800100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) r3 = socket(0x1, 0x3, 0x0) bind$unix(r3, &(0x7f0000000400)=@file={0x1, './bus\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 6.594583079s ago: executing program 7 (id=3945): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000500)="9b7385220700000000000000e57c489b51b14b7aea6ef45d0c085cb7df42ccf49eabcf03d0e97bb857dbd8d553a187d0", 0x30}, {&(0x7f0000000540)="53000000d073b0f3347edc854b4bc4db1e2e1302af076bb6c9909a18e554d5ecc9db5942dac6a182a0efc18289ba2d68f7e5121dc8db62a39389242ce69529ab9bb7aad26d928b530b9345c2ccce127c1405386bab9074b6", 0x58}], 0x2) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x18, r3, 0x1, 0x70bd2d, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000040)=@can={0x1d, r6}, 0x80, 0x0}}], 0x1, 0x8010) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x8885) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 6.020007367s ago: executing program 3 (id=3946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket(0x2, 0x5, 0x1000000) r6 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000480)=@l2tp={0x2, 0x0, @local, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47bc, 0xf5, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000003680)=@svm={0x0, 0x1, 0x1080, {0x4}, {"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"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) r10 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r11 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r11, &(0x7f0000000940), 0x10) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5.602702528s ago: executing program 7 (id=3947): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x245059, 0x0) unshare(0x22020400) sched_setparam(0x0, &(0x7f0000000040)=0xfffffffe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x7, 0x8}, {0x17de, 0xb, 0x1, 0xffff}}}}, 0x15) syz_usbip_server_init(0x1) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/55, 0x37, 0xffffffffffffffff) setsockopt$packet_int(r3, 0x107, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0, 0xd}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = eventfd2(0x406, 0x80801) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r5}) 5.07192114s ago: executing program 4 (id=3948): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x245059, 0x0) unshare(0x22020400) sched_setparam(0x0, &(0x7f0000000040)=0xfffffffe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x7, 0x8}, {0x17de, 0xb, 0x1, 0xffff}}}}, 0x15) syz_usbip_server_init(0x1) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/55, 0x37, 0xffffffffffffffff) setsockopt$packet_int(r3, 0x107, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0x75}, 0x38) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1}) 5.032508719s ago: executing program 5 (id=3949): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) shutdown(r0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) ioctl$sock_ifreq(r2, 0x8930, &(0x7f0000000200)={'ip_vti0\x00', @ifru_data=&(0x7f00000000c0)="5be1516340b6c50c8d34bce688f164ad8c090c852d23d74f40e486eccc4fe972"}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000400)={{0x0, 0x0, 0x2}}, 0x40, 0x0}}) 4.616125555s ago: executing program 3 (id=3950): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r1, 0x0, 0x0) r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) 3.832943267s ago: executing program 3 (id=3951): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) syz_emit_ethernet(0x56, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}}, 0x0) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0xffffffff, 0x7, 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x20, 0x7800, 0x4, 0x3, {{0x20, 0x4, 0x2, 0x3, 0x80, 0x64, 0x0, 0xff, 0x4, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x55, 0x3, 0x5, [{@private=0xa010101, 0xfffffffb}]}, @ra={0x94, 0x4}, @generic={0x44, 0x8, "6f5ec902da58"}, @timestamp_addr={0x44, 0x2c, 0xaa, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x7}, {@multicast1, 0x101}, {@loopback, 0x3}, {@remote, 0x7ccc}]}, @timestamp={0x44, 0x20, 0x1d, 0x0, 0x8, [0x0, 0x40, 0x0, 0x200, 0x0, 0x2, 0x9]}, @generic={0x7, 0x4, "ab74"}, @noop]}}}}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') syz_open_pts(r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) r9 = syz_open_dev$mouse(&(0x7f0000000400), 0x5, 0x20000) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11}, &(0x7f0000000140), &(0x7f0000000180)=r10}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4e86, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}, @generic={0x32, 0x7, 0x7, 0x9a, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x38, '\x00', r3, @fallback=0x20, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0x7, 0x0, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[r7, r1, r8, 0x1, r9, r11, 0x1, r12], 0x0, 0x10, 0x7ff}, 0x94) 3.539804337s ago: executing program 7 (id=3952): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$nvram(0xffffffffffffff9c, 0x0, 0x2c00, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000000000010d804db00"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, '\b]C8'}]}}, 0x0}, 0x0) 3.443428146s ago: executing program 5 (id=3953): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x3000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x1000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000700)={{r4}, r6, 0x10, @unused=[0x91, 0x80000000, 0x1, 0xf3], @name="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"}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000a40)={{r1}, r6, 0x0, @unused=[0x0, 0x7db, 0x101, 0x6], @name="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"}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0xe0}}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x2000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="140200002000010003000000fbdbdf2504", @ANYRESDEC=r5], 0x214}], 0x1, 0x0, 0x0, 0x400c841}, 0x844) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r8, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000300)) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) socket$nl_audit(0x10, 0x3, 0x9) 3.317947132s ago: executing program 6 (id=3954): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0) syz_usb_disconnect(r0) r1 = socket$inet6(0xa, 0x80000, 0x22) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf256401010100000000000000000000000020010000000000000000000000000001000000004e2100020a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x2004c805}, 0x40880) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, 0x0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0xdb6}], 0x1, 0x2, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setresgid(r7, r8, r8) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000003c0)={0x78, 0x0, 0x0, {0x5, 0x1, 0x0, {0x1, 0x0, 0x0, 0x100000001, 0x75, 0x8, 0x5, 0x7, 0x0, 0x2000, 0x7, r5, r7, 0x5, 0x4}}}, 0x78) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x48b03) ioctl$VIDIOC_G_STD(r9, 0x80085617, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) copy_file_range(r1, &(0x7f0000000080)=0x400, r3, 0x0, 0x0, 0x0) 3.106089924s ago: executing program 3 (id=3955): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000280), 0x9) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xc4, 0x0, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x400000000000000, &(0x7f0000000200), 0x2c, 0x4}}, 0x20) add_key(&(0x7f0000000100)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 3.10387859s ago: executing program 4 (id=3956): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) timerfd_create(0x7, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000140)={'syztnl2\x00', r3, 0x0, 0x80, 0x10001, 0x0, {{0x12, 0x4, 0x3, 0x31, 0x48, 0x67, 0x0, 0x27, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp_addr={0x44, 0xc, 0x1f, 0x1, 0x0, [{@rand_addr=0x64010100, 0x96f}]}, @timestamp_addr={0x44, 0x14, 0x89, 0x1, 0xb, [{@empty, 0xfffffffc}, {@local, 0x2}]}, @ssrr={0x89, 0x13, 0xac, [@remote, @broadcast, @empty, @loopback]}]}}}}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000009b80)=""/102392, 0x18ff8) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$dsp(r5, 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) 2.581783322s ago: executing program 4 (id=3957): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000380)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/psched\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "fafac0348886ec6ca005b2d292649e4dbd42a3446049d9952cc199677d836942efd66f9bf786ec9cb4995e7d321d39b373e0fbadb55c66bcb7119c0074afe6bc", 0x19}, 0x48, 0xfffffffffffffffd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffb}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) fchown(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) 2.173101558s ago: executing program 5 (id=3958): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, 0xfffffffffffffffe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="660a0000000000006111b8000000000000008000009500"/40], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f00000001c0)=0x7, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) mount(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='devpts\x00', 0x8, &(0x7f0000000480)='ysrqu\f\xd0\x99Q3\xc7n\x00\n/\xb1\rGW\xca\xe8I\xc6\x83\"\v\xaa\xee\xabjd\xce0s\xd8.z\xad\xe7\xd3\xc2\x19\xcd6\x01t,t%\x19\xc4/\xdf\xc71t#\x0fV\"\xf4\x99\xd3\xfa\xb0q\xa5R\xc0g\x03\xd5h\x17\x86\x92\xff\xa1\x9dL-\x8a\xc2\x10)\x942\x8d\x00}\x91\xd1u;\xb6`\xa1X4\xb3\'\xb9]7\x1d\xa1,\x82f;\xb9c\x90\x8a\xb6\xf7') chdir(&(0x7f0000000100)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x1, 0xa000200000a958, 0x4276, 0x3, 0x8, 0x100, 0xfffffffffffffffc, 0x100fff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) write$char_usb(r3, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b"], 0xe) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000200)="abf9f3369b3a67c55ac9c94963084e14cb8340e6c2ace2048780d8c62023a033b6ee9c99b83000687446476c27a5f98575cade655afea223b6f996c599e514148731154047205f1d655f86c0f4938670acac10", 0x53) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x100800, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}, {@metacopy_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100, 0x102) mkdirat(r4, &(0x7f0000000300)='./file0\x00', 0x1ce) 2.172565808s ago: executing program 4 (id=3959): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080), 0x10, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0x811) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000c80)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x1000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc2f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mkdir(&(0x7f0000000200)='./file0\x00', 0x56) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000002440)=""/4100, 0x1004) 1.640804912s ago: executing program 4 (id=3960): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4a21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c, 0x0}, 0xd158e5cd3365600d) write$char_usb(r0, &(0x7f00000003c0)='0', 0x1) 1.18366752s ago: executing program 5 (id=3961): socket$inet(0x2b, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r1, 0xe7d4c009da6c1985}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r2], 0x5c}, 0x1, 0x0, 0x0, 0x2000094}, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001800dd8d00000000fbdbdf47020000002000fe09003400000600150006000000100016800c000100000801000000000a7f6a82326daa370e4ccf0d4b43c8f15907cf0710d641"], 0x34}}, 0x0) 685.321123ms ago: executing program 3 (id=3962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0xa, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 195.009343ms ago: executing program 5 (id=3963): r0 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee00) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x3}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r6, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) close(r3) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x20000) 39.722995ms ago: executing program 7 (id=3964): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d40)="cf", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4009811) syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f01000000000000000000042413050524010208042413"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000140)={0x20, 0x14, 0x2, "d817"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000007c0)={0x14, &(0x7f0000000680)={0x20, 0x24, 0x68, {0x68, 0x21, "114825513fe5499fabdf84a9b1b1421c6a754b4894e825dd185351d1cb8ae18aaa6fb3322a572afd5970c6416930fd2b96e74efeae38896f86592de80605ac0dae85d07daa8c89371369a9f43c046cc02c82fb926f4d230a1aaaa08e25a7dbefd839becea83e"}}, &(0x7f0000000700)={0x0, 0x3, 0xa5, @string={0xa5, 0x3, "fae487ab4287101031ee94442b369948a0ece2baed232a498d0f94daa40723db7f942236b42c98c930121fcd114953fb45e7d05e27eb1962646d8df7c4ebb84fe5628d3521e3a2eeb2dfff9b72fc06ab9c9156a4836823af198c09184cd64688b8c665a5d87499d7bf9d9d57cd78ddb18d25cdc7a4d08f00ef68480863a08395728c9d0bc55c680676fc1e4e71dec58975b78a6522f60b12283f5b4989de3e65fa1838"}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000880)={0x40, 0x0, 0xad, "6c34a468b307d1c21e2660ceeda52398e86ba0551f885a8097d05f66bed2d80500b0dc42f14c1bf693dc00eeccf86dd85b42adab54ee528c929528770ff5c8c6cbc9c464fca703eb444e09cac217fd59799fc2cee0d8765ccf12a2baeda1eee13ce2c497c5b8e4e47912b695f913f4438111160662ff819db8d6b12cfcf9a31e2f07a6c9286528b2c063df6d2dfa46345b3b224bf4076f536daee4e670ea1f3f9a41ae0b203f6c0d8e2d129c85"}, &(0x7f0000000800)={0x0, 0xa, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1}, &(0x7f0000000980)={0x20, 0x81, 0x3, "f33425"}, &(0x7f00000009c0)={0x20, 0x82, 0x3, "10875b"}, &(0x7f0000000a00)={0x20, 0x83, 0x2, "1521"}, &(0x7f0000000a40)={0x20, 0x84, 0x1, "f1"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "cee8de"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpid() open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10004, &(0x7f00000005c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}}) tgkill(0xffffffffffffffff, r2, 0x1e) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x4000) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x40, 0x3, 0x1, '['}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xc38, &(0x7f0000000d80)=ANY=[@ANYBLOB="ddf963efbeb08a", @ANYBLOB="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"]) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 6 (id=3965): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tcp_congestion(r2, 0x0, 0x46) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x1000, {0x2, 0xff, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x0, {0x0, 0xf0, 0x2}, 0xff}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) kernel console output (not intermixed with test programs): ace_switch+0x54/0x90 [ 1357.338077][T20003] ? do_vfs_ioctl+0x226/0x13e0 [ 1357.338102][T20003] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1357.338133][T20003] ? __fget_files+0x215/0x3d0 [ 1357.338149][T20003] ? hook_file_ioctl_common+0x146/0x410 [ 1357.338179][T20003] ? selinux_file_ioctl+0x139/0x290 [ 1357.338199][T20003] ? selinux_file_ioctl+0xb4/0x290 [ 1357.338220][T20003] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1357.338243][T20003] __x64_sys_ioctl+0x18e/0x210 [ 1357.338269][T20003] do_syscall_64+0x106/0xf80 [ 1357.338288][T20003] ? clear_bhb_loop+0x40/0x90 [ 1357.338311][T20003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.338329][T20003] RIP: 0033:0x7f1ce679c799 [ 1357.338345][T20003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1357.338361][T20003] RSP: 002b:00007f1ce7578028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1357.338378][T20003] RAX: ffffffffffffffda RBX: 00007f1ce6a15fa0 RCX: 00007f1ce679c799 [ 1357.338389][T20003] RDX: 0000200000000040 RSI: 00000000c040aed5 RDI: 0000000000000005 [ 1357.338399][T20003] RBP: 00007f1ce7578090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.338410][T20003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.338420][T20003] R13: 00007f1ce6a16038 R14: 00007f1ce6a15fa0 R15: 00007ffc6d576838 [ 1357.338445][T20003] [ 1357.599010][ T5876] usbhid 5-1:0.0: can't add hid device: -71 [ 1357.623115][ T5876] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1357.651560][ T5876] usb 5-1: USB disconnect, device number 9 [ 1357.667926][ T976] rc_core: IR keymap rc-hauppauge not found [ 1357.673871][ T976] Registered IR keymap rc-empty [ 1357.680637][ T976] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1357.701596][ T976] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1357.721969][ T976] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1357.734746][ T976] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input167 [ 1357.748501][ T976] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1357.785720][ T976] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1358.109180][ T976] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1358.191640][ T976] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1358.223685][ T976] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1358.245164][ T976] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1358.266661][ T976] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1358.287958][ T976] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1358.347626][ T29] audit: type=1400 audit(2000000192.823:561): avc: denied { append } for pid=20014 comm="syz.4.3616" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1358.376348][ T976] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1358.387206][T20017] binder: 20016:20017 ioctl 4018620d 0 returned -22 [ 1358.416136][ T976] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1358.453178][ T976] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1358.471732][ T976] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1358.484788][ T976] usb 7-1: USB disconnect, device number 11 [ 1358.678980][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1358.685375][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1358.876250][ T29] audit: type=1400 audit(2000000193.328:562): avc: denied { audit_write } for pid=20006 comm="syz.7.3615" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1358.935772][ T29] audit: type=1107 audit(2000000193.356:563): pid=20006 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='mÉà’¿ßâ;ÍÏÅr“’93%“(hTuï5 ûª³|.‡^î²Â ¿c+ ŠôšD¨Èk©¼!ï¸u_‚îâM²ØÇN7 CCº6+bÊ(‘£®L»?,5çgVYüð¿¬ìúJ8š–óܺïWI¶‡GK6S"ð}²ÝÚ¤#%Å$fÅvö¶Éui' [ 1360.062921][T20044] netlink: 'syz.6.3623': attribute type 27 has an invalid length. [ 1360.389686][T20046] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3624'. [ 1360.409355][T20046] gtp1: entered promiscuous mode [ 1360.445366][T20046] gtp1: entered allmulticast mode [ 1360.521769][T20052] dummy0: entered promiscuous mode [ 1361.271214][T20060] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3627'. [ 1362.160872][T20065] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1362.167415][T20065] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1362.176510][T20065] vhci_hcd vhci_hcd.0: Device attached [ 1362.295300][T20051] dummy0: left promiscuous mode [ 1362.308208][T20067] vhci_hcd: connection closed [ 1362.309918][ T66] vhci_hcd vhci_hcd.5: stop threads [ 1362.332406][ T66] vhci_hcd vhci_hcd.5: release socket [ 1362.392291][ T66] vhci_hcd vhci_hcd.5: disconnect device [ 1362.459166][ T5927] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 1362.867969][T20078] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1362.874531][T20078] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1362.883559][T20078] vhci_hcd vhci_hcd.0: Device attached [ 1363.081014][ T976] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1363.125831][ T976] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1363.139687][T20079] vhci_hcd: connection closed [ 1363.139971][ T35] vhci_hcd vhci_hcd.6: stop threads [ 1363.198370][ T35] vhci_hcd vhci_hcd.6: release socket [ 1363.228325][ T35] vhci_hcd vhci_hcd.6: disconnect device [ 1363.249458][ T5911] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1363.378127][ T5911] usb 45-1: enqueue for inactive port 0 [ 1363.888099][ T5911] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1364.485312][T20108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3640'. [ 1364.883129][T20108] gtp1: entered promiscuous mode [ 1364.889187][T20108] gtp1: entered allmulticast mode [ 1364.915986][ T976] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1365.100866][ T976] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1365.111081][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.134784][ T976] usb 6-1: config 0 descriptor?? [ 1365.483868][T20115] overlayfs: overlapping lowerdir path [ 1365.636468][ T5911] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1365.825924][ T5911] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1365.904844][T20119] syzkaller0: entered promiscuous mode [ 1365.972892][T20119] syzkaller0: entered allmulticast mode [ 1366.242005][T20125] overlayfs: overlapping lowerdir path [ 1366.893558][T20133] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3645'. [ 1366.987599][T20132] FAULT_INJECTION: forcing a failure. [ 1366.987599][T20132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1367.179368][T20132] CPU: 1 UID: 0 PID: 20132 Comm: syz.3.3646 Tainted: G L syzkaller #0 PREEMPT(full) [ 1367.179399][T20132] Tainted: [L]=SOFTLOCKUP [ 1367.179405][T20132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1367.179416][T20132] Call Trace: [ 1367.179422][T20132] [ 1367.179430][T20132] dump_stack_lvl+0x100/0x190 [ 1367.179462][T20132] should_fail_ex.cold+0x5/0xa [ 1367.179485][T20132] core_sys_select+0x5d1/0xbb0 [ 1367.179509][T20132] ? __pfx_core_sys_select+0x10/0x10 [ 1367.179524][T20132] ? lockdep_hardirqs_on+0x78/0x100 [ 1367.179547][T20132] ? irqentry_exit+0x180/0x670 [ 1367.179564][T20132] ? lockdep_hardirqs_on+0x78/0x100 [ 1367.179600][T20132] ? __pfx_set_user_sigmask+0x10/0x10 [ 1367.179621][T20132] ? read_tsc+0x9/0x20 [ 1367.179642][T20132] ? ktime_get_ts64+0x256/0x3f0 [ 1367.179668][T20132] do_pselect.constprop.0+0x238/0x270 [ 1367.179689][T20132] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1367.179719][T20132] __x64_sys_pselect6+0x149/0x1c0 [ 1367.179739][T20132] do_syscall_64+0x106/0xf80 [ 1367.179758][T20132] ? clear_bhb_loop+0x40/0x90 [ 1367.179776][T20132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.179791][T20132] RIP: 0033:0x7f4f8319c799 [ 1367.179805][T20132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1367.179819][T20132] RSP: 002b:00007f4f83f88028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1367.179834][T20132] RAX: ffffffffffffffda RBX: 00007f4f83415fa0 RCX: 00007f4f8319c799 [ 1367.179843][T20132] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 1367.179852][T20132] RBP: 00007f4f83f88090 R08: 0000200000000280 R09: 0000000000000000 [ 1367.179861][T20132] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1367.179869][T20132] R13: 00007f4f83416038 R14: 00007f4f83415fa0 R15: 00007ffe42c87b38 [ 1367.179888][T20132] [ 1367.498300][ T976] usb 6-1: Cannot set MAC address [ 1367.544921][ T976] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1367.738373][ T976] usb 6-1: USB disconnect, device number 29 [ 1368.531099][ T5927] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1369.101766][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3653'. [ 1369.107749][T20160] overlayfs: overlapping lowerdir path [ 1369.442291][T20159] gtp2: entered promiscuous mode [ 1369.447363][T20159] gtp2: entered allmulticast mode [ 1369.531117][T20170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3654'. [ 1369.897812][ T5927] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1370.391319][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 1370.496903][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.543873][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1370.562565][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1371.668971][ T5927] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1371.683157][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1371.708244][ T5927] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1371.728615][ T5927] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1371.771233][ T5927] usb 6-1: Manufacturer: syz [ 1371.792310][ T5927] usb 6-1: config 0 descriptor?? [ 1371.875932][T18693] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1372.048732][T18693] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.077211][T18693] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1372.123371][ T5927] rc_core: IR keymap rc-hauppauge not found [ 1372.137395][T18693] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1372.151105][ T5927] Registered IR keymap rc-empty [ 1372.156337][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.170988][T18693] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1372.183779][T18693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.195049][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.240452][ T5927] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1372.258448][T18693] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1372.287137][T18693] usb 5-1: invalid MIDI out EP 0 [ 1372.311202][ T5927] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input168 [ 1372.414929][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.503889][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.549994][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.602616][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.616445][T18693] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1372.626676][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.666782][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.684342][T18693] usb 5-1: USB disconnect, device number 10 [ 1372.710637][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.821440][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.848556][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.880540][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1373.425770][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1373.453363][ T5927] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1373.475870][ T5927] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1373.488913][ T5927] usb 6-1: USB disconnect, device number 30 [ 1373.592273][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3658'. [ 1374.198567][ T29] audit: type=1400 audit(2000000207.658:564): avc: denied { mount } for pid=20207 comm="syz.7.3658" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1374.401968][T20210] netlink: 'syz.7.3658': attribute type 1 has an invalid length. [ 1374.682799][T20223] sg_write: data in/out 187/14 bytes for SCSI command 0x0-- guessing data in; [ 1374.682799][T20223] program syz.4.3665 not setting count and/or reply_len properly [ 1375.512280][ T29] audit: type=1400 audit(2000000207.911:565): avc: denied { mounton } for pid=20207 comm="syz.7.3658" path="/file0" dev="bpf" ino=80122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 1375.544085][T20210] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3658'. [ 1376.904102][T20246] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1376.910647][T20246] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1377.027255][T20246] vhci_hcd vhci_hcd.0: Device attached [ 1377.199622][T18693] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1377.796882][T20255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3672'. [ 1377.812169][T20247] vhci_hcd: connection reset by peer [ 1377.817681][T20255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3672'. [ 1377.835422][ T13] vhci_hcd vhci_hcd.3: stop threads [ 1378.282631][T20255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3672'. [ 1378.284093][ T13] vhci_hcd vhci_hcd.3: release socket [ 1378.298754][T20255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3672'. [ 1378.323726][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 1378.331513][ T29] audit: type=1400 audit(2000000211.493:566): avc: denied { ioctl } for pid=20239 comm="syz.4.3672" path="socket:[80312]" dev="sockfs" ino=80312 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1378.358203][T20255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3672'. [ 1378.377065][T20255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3672'. [ 1378.386038][T20255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3672'. [ 1378.398759][T20255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3672'. [ 1378.416873][T20255] gtp0: left allmulticast mode [ 1378.424390][T20255] geneve2: left allmulticast mode [ 1378.665265][ T24] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1379.074205][ T29] audit: type=1400 audit(2000000211.942:567): avc: denied { execute_no_trans } for pid=20268 comm="syz.6.3677" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1379.169537][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1379.176243][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.197672][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1379.219424][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1379.268328][ T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1379.393453][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1379.425320][ T24] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1379.920498][ T24] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1379.945199][ T24] usb 8-1: Manufacturer: syz [ 1379.970125][ T5911] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1379.978565][ T24] usb 8-1: config 0 descriptor?? [ 1380.277540][T20285] __nla_validate_parse: 144 callbacks suppressed [ 1380.277574][T20285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3679'. [ 1381.287580][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 1381.324369][ T5911] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1381.368129][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.396670][ T5911] usb 7-1: Product: syz [ 1381.406973][ T5911] usb 7-1: Manufacturer: syz [ 1381.415899][ T24] rc_core: IR keymap rc-hauppauge not found [ 1381.421826][ T24] Registered IR keymap rc-empty [ 1381.431171][ T5911] usb 7-1: SerialNumber: syz [ 1381.455535][ T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1381.473307][ T5911] usb 7-1: config 0 descriptor?? [ 1381.509869][ T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1381.536610][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1381.675986][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input169 [ 1381.690546][T12916] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1381.718944][ T5911] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1381.835868][ T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1381.870599][T12916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1382.026801][T12916] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1382.037641][T12916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.047114][ T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1382.060302][T12916] usb 5-1: config 0 descriptor?? [ 1382.075862][ T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1382.097321][ T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1382.120679][ T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1382.151125][ T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1382.172426][ T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1382.193816][ T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1382.215289][ T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1382.236954][ T24] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1382.261497][ T24] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1382.279616][ T24] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1382.305478][T12916] usbhid 5-1:0.0: can't add hid device: -71 [ 1382.314048][T12916] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1382.330177][ T24] usb 8-1: USB disconnect, device number 20 [ 1382.377188][T12916] usb 5-1: USB disconnect, device number 11 [ 1382.943476][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1382.955555][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3686'. [ 1383.679186][ T5911] usb write operation failed. (-71) [ 1383.694824][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 1383.757568][ T5911] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1383.776839][ T5911] dvbdev: DVB: registering new adapter (Terratec H7) [ 1383.783940][ T5911] usb 7-1: media controller created [ 1383.791229][ T5911] usb read operation failed. (-71) [ 1383.798198][ T5911] usb write operation failed. (-71) [ 1383.825756][ T5911] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1383.912716][T18693] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1384.032166][T20322] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.3688'. [ 1384.192743][ T5911] usb 7-1: USB disconnect, device number 12 [ 1384.205290][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1384.217506][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1384.265754][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1384.472098][T20326] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1384.478666][T20326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1384.490506][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.499938][T20326] vhci_hcd vhci_hcd.0: Device attached [ 1384.622368][ T9] usb 5-1: config 0 descriptor?? [ 1384.652453][T20327] vhci_hcd: connection closed [ 1384.684923][T17545] vhci_hcd vhci_hcd.5: stop threads [ 1384.697047][T17545] vhci_hcd vhci_hcd.5: release socket [ 1384.702514][T17545] vhci_hcd vhci_hcd.5: disconnect device [ 1384.767915][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1384.784543][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1384.798771][ T9] usb 5-1: USB disconnect, device number 12 [ 1384.807127][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1385.299153][T20345] netlink: 181284 bytes leftover after parsing attributes in process `syz.4.3695'. [ 1386.432511][T20348] syzkaller0: entered promiscuous mode [ 1386.448035][T20348] syzkaller0: entered allmulticast mode [ 1386.507854][T20358] FAULT_INJECTION: forcing a failure. [ 1386.507854][T20358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1386.531120][T20358] CPU: 0 UID: 0 PID: 20358 Comm: syz.4.3700 Tainted: G L syzkaller #0 PREEMPT(full) [ 1386.531150][T20358] Tainted: [L]=SOFTLOCKUP [ 1386.531156][T20358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1386.531166][T20358] Call Trace: [ 1386.531172][T20358] [ 1386.531178][T20358] dump_stack_lvl+0x100/0x190 [ 1386.531211][T20358] should_fail_ex.cold+0x5/0xa [ 1386.531234][T20358] _copy_to_user+0x32/0xd0 [ 1386.531266][T20358] snd_pcm_oss_read2+0x294/0x400 [ 1386.531293][T20358] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1386.531325][T20358] snd_pcm_oss_read+0x5aa/0x730 [ 1386.531353][T20358] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1386.531379][T20358] vfs_read+0x1e4/0xb30 [ 1386.531409][T20358] ? __pfx_vfs_read+0x10/0x10 [ 1386.531432][T20358] ? find_held_lock+0x2b/0x80 [ 1386.531453][T20358] ? __fget_files+0x215/0x3d0 [ 1386.531471][T20358] ? __fget_files+0x215/0x3d0 [ 1386.531492][T20358] ? __fget_files+0x21f/0x3d0 [ 1386.531517][T20358] ksys_read+0x12a/0x250 [ 1386.531542][T20358] ? __pfx_ksys_read+0x10/0x10 [ 1386.531575][T20358] do_syscall_64+0x106/0xf80 [ 1386.531594][T20358] ? clear_bhb_loop+0x40/0x90 [ 1386.531616][T20358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.531632][T20358] RIP: 0033:0x7f273639c799 [ 1386.531647][T20358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.531664][T20358] RSP: 002b:00007f273718e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1386.531681][T20358] RAX: ffffffffffffffda RBX: 00007f2736616090 RCX: 00007f273639c799 [ 1386.531693][T20358] RDX: 000000000000004f RSI: 0000200000000280 RDI: 0000000000000003 [ 1386.531709][T20358] RBP: 00007f273718e090 R08: 0000000000000000 R09: 0000000000000000 [ 1386.531719][T20358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1386.531729][T20358] R13: 00007f2736616128 R14: 00007f2736616090 R15: 00007ffc59572fa8 [ 1386.531753][T20358] [ 1388.149498][T20375] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3703'. [ 1388.587001][ T29] audit: type=1400 audit(2000000221.119:568): avc: denied { map } for pid=20368 comm="syz.5.3702" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1388.587592][T20372] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1388.611522][ T5911] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1388.867870][ T5911] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1388.905722][ T1219] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1388.958679][ T5911] usb 7-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 1389.010340][ T5911] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1389.069493][ T1219] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1389.107673][ T1219] usb 8-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 1389.131961][ T1219] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1389.159263][ T1219] usb 8-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1389.191630][ T5911] usb 7-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1389.202400][ T1219] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.202427][ T1219] usb 8-1: Product: syz [ 1389.202442][ T1219] usb 8-1: Manufacturer: syz [ 1389.202457][ T1219] usb 8-1: SerialNumber: syz [ 1389.364257][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.420999][ T5911] usb 7-1: Product: syz [ 1389.459706][ T5911] usb 7-1: Manufacturer: syz [ 1389.530887][ T5911] usb 7-1: SerialNumber: syz [ 1389.945467][T20383] syz.4.3706 (20383): drop_caches: 2 [ 1390.113491][ T5911] usb 7-1: USB disconnect, device number 13 [ 1390.163309][ T29] audit: type=1400 audit(2000000222.597:569): avc: denied { bind } for pid=20398 comm="syz.4.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1390.289541][T17375] udevd[17375]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1390.361833][ T1219] usb 8-1: USB disconnect, device number 21 [ 1390.417264][T17388] udevd[17388]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1390.535882][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3711'. [ 1391.430097][ T5911] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1391.510284][T20413] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1391.516847][T20413] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1391.528243][T20413] vhci_hcd vhci_hcd.0: Device attached [ 1391.677892][T20414] vhci_hcd: connection closed [ 1391.688581][ T66] vhci_hcd vhci_hcd.6: stop threads [ 1391.698583][ T66] vhci_hcd vhci_hcd.6: release socket [ 1391.703966][ T66] vhci_hcd vhci_hcd.6: disconnect device [ 1391.744929][ T29] audit: type=1400 audit(2000000224.075:570): avc: denied { mount } for pid=20417 comm="syz.3.3715" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1391.748652][T20418] CUSE: unknown device info "" [ 1391.777980][ T29] audit: type=1400 audit(2000000224.075:571): avc: denied { mounton } for pid=20417 comm="syz.3.3715" path="/161/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1391.801592][T20418] CUSE: unknown device info "" [ 1391.812007][T20418] CUSE: unknown device info "" [ 1391.817327][T20418] CUSE: unknown device info "" [ 1391.822182][T20418] CUSE: unknown device info "ÿ" [ 1391.827704][T20418] CUSE: unknown device info "" [ 1391.832676][T20418] CUSE: unknown device info "" [ 1391.838540][T20418] CUSE: unknown device info "ÿ" [ 1391.843524][T20418] CUSE: DEVNAME unspecified [ 1391.879233][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 1391.885974][ T5911] usb 5-1: config index 0 descriptor too short (expected 22308, got 36) [ 1391.896020][ T5911] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 1391.906584][ T29] audit: type=1400 audit(2000000224.206:572): avc: denied { unmount } for pid=17055 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1391.946888][ T5911] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1391.959030][ T5911] usb 5-1: config 250 has no interface number 0 [ 1391.967745][ T5911] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65309, setting to 1024 [ 1392.072465][ T5911] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1392.084296][ T5911] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 239 [ 1392.096124][ T5911] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1392.115692][ T5911] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1392.183338][T20428] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3718'. [ 1392.485190][ T5911] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1392.495794][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1392.505581][ T5911] usb 5-1: Product: syz [ 1392.511282][ T5911] usb 5-1: SerialNumber: syz [ 1392.537245][ T5911] hub 5-1:250.228: bad descriptor, ignoring hub [ 1392.545128][ T5911] hub 5-1:250.228: probe with driver hub failed with error -5 [ 1392.759728][ T5911] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1393.459915][ T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1393.590338][ T1219] usb 5-1: USB disconnect, device number 13 [ 1393.598773][ T1219] usblp0: removed [ 1393.652650][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1393.677778][ T9] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1393.708554][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.728612][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 1393.731442][ T9] usb 8-1: Product: syz [ 1393.746846][ T9] usb 8-1: Manufacturer: syz [ 1393.760514][ T9] usb 8-1: SerialNumber: syz [ 1393.900075][ T5911] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1394.257580][ T5861] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1394.321071][ T9] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1394.338308][ T9] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1394.383719][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1394.398818][ T9] usb 8-1: media controller created [ 1394.445618][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1394.468083][ T5911] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1394.480736][ T29] audit: type=1326 audit(2000000226.638:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.6.3727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effe519c799 code=0x0 [ 1394.514901][ T5911] usb 4-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 1394.559320][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1394.560667][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1394.658738][ T5911] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1394.699783][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.765964][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1394.774311][ T5911] usb 4-1: Product: syz [ 1394.808422][ T5911] usb 4-1: Manufacturer: syz [ 1394.826580][ T5911] usb 4-1: SerialNumber: syz [ 1394.936908][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1394.950061][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.990218][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.061810][ T24] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1395.098557][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.152396][ T9] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1395.165096][ T24] usb 5-1: config 0 descriptor?? [ 1395.201339][ T9] usb 8-1: USB disconnect, device number 22 [ 1395.646857][ T24] ntrig 0003:1B96:0008.0019: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0 [ 1395.766225][T20468] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1395.772784][T20468] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1395.781611][T20468] vhci_hcd vhci_hcd.0: Device attached [ 1396.052697][T20469] vhci_hcd: connection closed [ 1396.059008][T17545] vhci_hcd vhci_hcd.7: stop threads [ 1396.085533][T17545] vhci_hcd vhci_hcd.7: release socket [ 1396.095483][ T24] ntrig 0003:1B96:0008.0019: Firmware version: 2.15.24.29.0 (7f55 b00b) [ 1396.111811][T17545] vhci_hcd vhci_hcd.7: disconnect device [ 1396.123674][ T5911] usb 4-1: USB disconnect, device number 33 [ 1396.155703][T18693] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1396.544340][T17363] udevd[17363]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1396.567684][ T24] usb 5-1: USB disconnect, device number 14 [ 1397.030805][ T1219] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1397.044288][T20482] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3732'. [ 1397.401595][T17545] bridge_slave_1: left allmulticast mode [ 1397.423823][T17545] bridge_slave_1: left promiscuous mode [ 1397.438226][T17545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.450725][T17545] bridge_slave_0: left allmulticast mode [ 1397.464696][T17545] bridge_slave_0: left promiscuous mode [ 1397.481351][T17545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.498323][T20484] netlink: 181392 bytes leftover after parsing attributes in process `syz.4.3733'. [ 1397.567084][ T1219] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1398.838624][T20493] syz.4.3736 (20493): drop_caches: 2 [ 1398.898818][ T1219] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1398.926414][ T1219] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1399.079476][ T1219] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1399.122044][ T1219] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1399.131237][ T1219] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.146657][ T1219] usb 7-1: config 0 descriptor?? [ 1399.441484][ T1219] hdpvr 7-1:0.0: unexpected answer of status request, len 2 [ 1399.519370][ T1219] hdpvr 7-1:0.0: device init failed [ 1399.588510][ T1219] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 1399.961899][T20510] random: crng reseeded on system resumption [ 1400.117353][T17545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1400.146748][T17545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.165197][T17545] bond0 (unregistering): Released all slaves [ 1400.183872][T17545] bond1 (unregistering): Released all slaves [ 1400.225565][T20486] dummy0: entered promiscuous mode [ 1400.231333][T20486] dummy0: left promiscuous mode [ 1400.394132][T17545] tipc: Left network mode [ 1400.819854][T17545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1400.844803][T17545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1400.888249][T17545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1400.909790][T17545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1400.939958][T17545] veth1_macvtap: left promiscuous mode [ 1400.954199][T17545] veth0_macvtap: left promiscuous mode [ 1400.965349][T17545] veth1_vlan: left promiscuous mode [ 1400.975467][T17545] veth0_vlan: left promiscuous mode [ 1401.126439][ T1219] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1401.308764][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1401.359873][ T1219] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1401.398907][ T1219] usb 8-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 1401.435099][ T1219] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1401.544251][T20537] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1401.550793][T20537] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1401.558550][T20537] vhci_hcd vhci_hcd.0: Device attached [ 1401.588084][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1401.724062][ T1219] usb 8-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1401.733223][ T1219] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.748169][T20538] vhci_hcd: connection closed [ 1401.749783][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 1401.763723][T17551] vhci_hcd vhci_hcd.4: stop threads [ 1401.778189][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.788587][ T1219] usb 8-1: Product: syz [ 1401.792761][ T1219] usb 8-1: Manufacturer: syz [ 1401.797442][T17551] vhci_hcd vhci_hcd.4: release socket [ 1401.797490][ T9] usb 4-1: Product: syz [ 1401.807417][ T1219] usb 8-1: SerialNumber: syz [ 1401.812323][ T9] usb 4-1: Manufacturer: syz [ 1401.834055][ T9] usb 4-1: SerialNumber: syz [ 1401.839544][T17545] team0 (unregistering): Port device team_slave_1 removed [ 1401.853224][T17551] vhci_hcd vhci_hcd.4: disconnect device [ 1402.008743][T17545] team0 (unregistering): Port device team_slave_0 removed [ 1402.080687][T20544] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3747'. [ 1402.093600][T20544] Cannot find add_set index 0 as target [ 1402.572456][T18693] usb 7-1: USB disconnect, device number 14 [ 1403.235268][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1403.277596][T20558] random: crng reseeded on system resumption [ 1403.338394][ T9] usb 4-1: USB disconnect, device number 34 [ 1403.380046][ T1219] usb 8-1: USB disconnect, device number 23 [ 1403.388848][T17375] udevd[17375]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1403.466518][T18693] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1403.493174][T17363] udevd[17363]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1403.712485][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1403.720304][T18693] usb 5-1: Using ep0 maxpacket: 16 [ 1403.732256][T18693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.755346][T18693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1403.765826][T18693] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1403.774907][T18693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.806853][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3756'. [ 1404.183252][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1404.199122][T18693] usb 5-1: config 0 descriptor?? [ 1404.241351][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1404.251678][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1404.275022][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1404.295577][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.326509][ T9] usb 4-1: config 0 descriptor?? [ 1404.585791][T20574] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3759'. [ 1404.782233][ T1219] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1404.822340][T17545] IPVS: stop unused estimator thread 0... [ 1404.921331][T18693] ntrig 0003:1B96:0008.001A: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0 [ 1405.052240][ T1219] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1405.074285][ T1219] usb 8-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1405.115046][T18693] ntrig 0003:1B96:0008.001A: Firmware version: 2.15.24.29.0 (7f55 b00b) [ 1405.130113][ T1219] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1405.140719][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1405.152005][ T1219] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1405.163681][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1405.172001][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1405.179574][ T1219] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 1405.192217][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1405.200793][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1405.208318][ T1219] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 1405.301783][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1405.335511][ T1219] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1405.361605][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1405.381234][ T1219] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1405.410228][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1405.426212][T18693] usb 5-1: USB disconnect, device number 15 [ 1405.466868][ T1219] usb 8-1: Product: syz [ 1405.473603][ T9] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1405.491115][ T1219] usb 8-1: Manufacturer: syz [ 1405.527703][ T1219] cdc_wdm 8-1:1.0: skipping garbage [ 1405.550703][ T9] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1405.570423][ T1219] cdc_wdm 8-1:1.0: skipping garbage [ 1405.594051][ T1219] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1405.640118][ T9] usb 4-1: USB disconnect, device number 35 [ 1405.679825][ T5927] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1405.762558][T20581] fido_id[20581]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1405.806931][ T1219] usb 8-1: USB disconnect, device number 24 [ 1405.916065][ T5927] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1405.937146][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.980529][ T5927] usb 7-1: config 0 descriptor?? [ 1406.025350][ T5927] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1407.218781][ T29] audit: type=1400 audit(2000000238.293:574): avc: denied { bind } for pid=20587 comm="syz.4.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1409.649708][T20594] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1409.656261][T20594] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1409.665424][T20594] vhci_hcd vhci_hcd.0: Device attached [ 1409.784067][T20600] vhci_hcd: connection closed [ 1409.784775][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1409.818914][ T13] vhci_hcd vhci_hcd.5: release socket [ 1409.873124][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1409.888407][T20606] random: crng reseeded on system resumption [ 1409.902281][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1409.903141][T20184] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1410.075027][T20184] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.088572][T20184] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1410.098788][T20184] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.108166][T20184] usb 8-1: Product: syz [ 1410.112466][T20184] usb 8-1: Manufacturer: syz [ 1410.118343][T20184] usb 8-1: SerialNumber: syz [ 1410.142471][T20184] usb 8-1: config 0 descriptor?? [ 1410.153095][T20184] dm9601 8-1:0.0: probe with driver dm9601 failed with error -22 [ 1410.201489][ T1219] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1410.376294][ T976] usb 8-1: USB disconnect, device number 25 [ 1411.002326][ T1219] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1411.068991][ T5927] usb 7-1: USB disconnect, device number 15 [ 1411.082847][ T1219] usb 4-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 1411.108680][ T1219] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1411.141798][ T1219] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1411.175744][ T1219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.193947][ T1219] usb 4-1: Product: syz [ 1411.200863][ T1219] usb 4-1: Manufacturer: syz [ 1411.205604][ T1219] usb 4-1: SerialNumber: syz [ 1411.832627][ T1219] usb 4-1: USB disconnect, device number 36 [ 1411.883542][T17363] udevd[17363]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1412.090222][ T5927] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1412.166849][ T1219] IPVS: starting estimator thread 0... [ 1412.289412][T20635] IPVS: using max 45 ests per chain, 108000 per kthread [ 1412.362378][T20639] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3777'. [ 1412.436754][T20184] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1412.593640][ T5927] usb 6-1: Using ep0 maxpacket: 8 [ 1412.638404][ T5927] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1412.730125][ T5927] usb 6-1: config 6 has an invalid interface number: 57 but max is 0 [ 1412.743196][ T5927] usb 6-1: config 6 has no interface number 0 [ 1412.759867][ T5927] usb 6-1: config 6 interface 57 has no altsetting 0 [ 1412.775646][ T5927] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=67.16 [ 1412.780863][T20184] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1412.785564][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.831979][ T5927] usb 6-1: Product: syz [ 1412.841245][T20184] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1412.843629][ T5927] usb 6-1: Manufacturer: syz [ 1412.873594][ T5927] usb 6-1: SerialNumber: syz [ 1412.880459][T20184] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1412.907827][T20184] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1412.921032][T20184] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1412.945387][T20184] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1412.956630][T20184] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1412.967117][T20184] usb 8-1: Product: syz [ 1412.982579][T20184] usb 8-1: Manufacturer: syz [ 1413.092445][ T5861] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1413.093918][T20184] cdc_wdm 8-1:1.0: skipping garbage [ 1413.114934][T20184] cdc_wdm 8-1:1.0: skipping garbage [ 1413.126555][ T5927] legousbtower 6-1:6.57: interrupt endpoints not found [ 1413.133899][T20184] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1413.149811][T20184] cdc_wdm 8-1:1.0: Unknown control protocol [ 1413.153125][ T5927] usb 6-1: USB disconnect, device number 32 [ 1413.261428][T20650] random: crng reseeded on system resumption [ 1413.310375][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1413.310607][T20184] usb 8-1: USB disconnect, device number 26 [ 1413.317012][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1413.317033][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1413.322366][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.352503][T20636] cdc_wdm 8-1:1.0: Tx URB error: -19 [ 1413.384166][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.402753][ T5861] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1413.414757][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.440397][ T5861] usb 4-1: config 0 descriptor?? [ 1414.120970][T20641] loop5: detected capacity change from 0 to 7 [ 1414.201720][ T5861] hkems 0003:2006:0118.001C: item fetching failed at offset 5/7 [ 1414.262340][ T5861] hkems 0003:2006:0118.001C: parse failed [ 1414.300874][ T5861] hkems 0003:2006:0118.001C: probe with driver hkems failed with error -22 [ 1414.476683][T20665] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1414.483234][T20665] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1414.495204][T20665] vhci_hcd vhci_hcd.0: Device attached [ 1414.725801][T20666] vhci_hcd: connection closed [ 1414.726150][T17551] vhci_hcd vhci_hcd.7: stop threads [ 1414.745211][T17551] vhci_hcd vhci_hcd.7: release socket [ 1414.750964][T17551] vhci_hcd vhci_hcd.7: disconnect device [ 1414.789283][ T5927] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1414.790755][T20641] Dev loop5: unable to read RDB block 7 [ 1414.827809][T20641] loop5: unable to read partition table [ 1414.840459][T20641] loop5: partition table beyond EOD, truncated [ 1414.864214][T20641] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 1414.912109][T18693] usb 4-1: USB disconnect, device number 37 [ 1414.921876][T20677] FAULT_INJECTION: forcing a failure. [ 1414.921876][T20677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1414.958726][T20677] CPU: 0 UID: 0 PID: 20677 Comm: syz.5.3787 Tainted: G L syzkaller #0 PREEMPT(full) [ 1414.958755][T20677] Tainted: [L]=SOFTLOCKUP [ 1414.958761][T20677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1414.958771][T20677] Call Trace: [ 1414.958777][T20677] [ 1414.958784][T20677] dump_stack_lvl+0x100/0x190 [ 1414.958817][T20677] should_fail_ex.cold+0x5/0xa [ 1414.958839][T20677] _copy_from_user+0x2e/0xd0 [ 1414.958864][T20677] bpf_test_init.isra.0+0xaf/0x100 [ 1414.958897][T20677] bpf_prog_test_run_xdp+0x57e/0x1670 [ 1414.958924][T20677] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1414.958950][T20677] ? fput+0x79/0x100 [ 1414.958970][T20677] ? __bpf_prog_get+0x97/0x2a0 [ 1414.958994][T20677] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1414.959013][T20677] __sys_bpf+0x1725/0x4b90 [ 1414.959034][T20677] ? __pfx___sys_bpf+0x10/0x10 [ 1414.959050][T20677] ? finish_task_switch.isra.0+0x200/0xb80 [ 1414.959075][T20677] ? rcu_is_watching+0x12/0xc0 [ 1414.959094][T20677] ? finish_task_switch.isra.0+0x205/0xb80 [ 1414.959117][T20677] ? lockdep_hardirqs_on+0x78/0x100 [ 1414.959136][T20677] ? finish_task_switch.isra.0+0x205/0xb80 [ 1414.959160][T20677] ? rcu_is_watching+0x12/0xc0 [ 1414.959178][T20677] ? trace_sched_exit_tp+0x13a/0x180 [ 1414.959204][T20677] ? __schedule+0x1000/0x60e0 [ 1414.959237][T20677] ? xfd_validate_state+0x129/0x190 [ 1414.959271][T20677] __x64_sys_bpf+0x7b/0xc0 [ 1414.959288][T20677] ? lockdep_hardirqs_on+0x78/0x100 [ 1414.959305][T20677] do_syscall_64+0x106/0xf80 [ 1414.959323][T20677] ? clear_bhb_loop+0x40/0x90 [ 1414.959344][T20677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.959367][T20677] RIP: 0033:0x7fd53479c799 [ 1414.959382][T20677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1414.959398][T20677] RSP: 002b:00007fd53561f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1414.959415][T20677] RAX: ffffffffffffffda RBX: 00007fd534a15fa0 RCX: 00007fd53479c799 [ 1414.959426][T20677] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1414.959436][T20677] RBP: 00007fd53561f090 R08: 0000000000000000 R09: 0000000000000000 [ 1414.959446][T20677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1414.959456][T20677] R13: 00007fd534a16038 R14: 00007fd534a15fa0 R15: 00007fff87087568 [ 1414.959479][T20677] [ 1415.217303][ T5175] Dev loop5: unable to read RDB block 7 [ 1415.222959][ T5175] loop5: unable to read partition table [ 1415.229149][ T5175] loop5: partition table beyond EOD, truncated [ 1415.268751][ T5861] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1415.547187][T20682] loop5: detected capacity change from 0 to 6023 [ 1415.554179][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 1415.574300][T20682] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1415.735484][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1415.782091][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 1415.783847][T17363] buffer_io_error: 64 callbacks suppressed [ 1415.783862][T17363] Buffer I/O error on dev loop5, logical block 752, async page read [ 1415.820144][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 1415.844725][ T5861] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1415.858183][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.863369][T17363] Buffer I/O error on dev loop5, logical block 752, async page read [ 1415.905195][ T5861] usb 5-1: Product: syz [ 1415.918103][ T5861] usb 5-1: Manufacturer: syz [ 1415.929606][ T5861] usb 5-1: SerialNumber: syz [ 1415.959993][ T5861] usb 5-1: config 0 descriptor?? [ 1416.035355][T20691] dummy0: entered promiscuous mode [ 1416.049171][ T5861] rc_core: IR keymap rc-streamzap not found [ 1416.059374][ T5861] Registered IR keymap rc-empty [ 1416.096138][ T5861] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1416.554525][ T5861] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input170 [ 1416.663440][ T5861] usb 5-1: USB disconnect, device number 16 [ 1416.910577][T20688] dummy0: left promiscuous mode [ 1417.103792][ T5911] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1417.342437][T20714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1417.427917][ T5911] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1417.481522][ T5911] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1417.601301][ T5911] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1417.641210][ T5911] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1417.711516][ T5911] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1417.840108][ T5911] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1417.853942][ T5911] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1417.881000][ T5911] usb 8-1: Product: syz [ 1417.889341][ T5911] usb 8-1: Manufacturer: syz [ 1418.042725][ T5911] cdc_wdm 8-1:1.0: skipping garbage [ 1418.048042][ T5911] cdc_wdm 8-1:1.0: skipping garbage [ 1418.061109][ T5911] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1418.067904][ T5911] cdc_wdm 8-1:1.0: Unknown control protocol [ 1418.223194][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1418.229803][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1418.236054][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1418.242630][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1418.248868][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1418.255443][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1418.261696][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1418.268278][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1418.274566][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1418.281161][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1418.287438][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1418.294011][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1418.300510][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1418.307099][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1418.313580][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1418.320167][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1418.326877][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1418.333469][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1418.340283][ T5861] usb 8-1: USB disconnect, device number 27 [ 1418.346183][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1418.366133][T20723] random: crng reseeded on system resumption [ 1419.615550][T12483] Bluetooth: hci1: unexpected event for opcode 0x0413 [ 1420.132847][T20752] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3808'. [ 1422.037719][ T5911] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1422.262225][ T5911] usb 8-1: Using ep0 maxpacket: 8 [ 1422.281564][ T5911] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.320833][ T5911] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1422.363830][ T5911] usb 8-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1422.395758][ T5911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.445462][ T5911] usb 8-1: config 0 descriptor?? [ 1422.806939][T20773] netlink: 'syz.3.3813': attribute type 27 has an invalid length. [ 1423.021325][T20779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3815'. [ 1423.558137][T20793] FAULT_INJECTION: forcing a failure. [ 1423.558137][T20793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1423.595328][T20793] CPU: 0 UID: 0 PID: 20793 Comm: syz.4.3817 Tainted: G L syzkaller #0 PREEMPT(full) [ 1423.595361][T20793] Tainted: [L]=SOFTLOCKUP [ 1423.595367][T20793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1423.595375][T20793] Call Trace: [ 1423.595379][T20793] [ 1423.595384][T20793] dump_stack_lvl+0x100/0x190 [ 1423.595407][T20793] should_fail_ex.cold+0x5/0xa [ 1423.595422][T20793] _copy_from_user+0x2e/0xd0 [ 1423.595439][T20793] binder_ioctl+0x4f5/0x7610 [ 1423.595458][T20793] ? tomoyo_path_number_perm+0x188/0x580 [ 1423.595474][T20793] ? __pfx_binder_ioctl+0x10/0x10 [ 1423.595490][T20793] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1423.595507][T20793] ? do_vfs_ioctl+0x226/0x13e0 [ 1423.595524][T20793] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1423.595540][T20793] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1423.595559][T20793] ? hook_file_ioctl_common+0x146/0x410 [ 1423.595578][T20793] ? selinux_file_ioctl+0x139/0x290 [ 1423.595591][T20793] ? selinux_file_ioctl+0xb4/0x290 [ 1423.595606][T20793] ? __pfx_binder_ioctl+0x10/0x10 [ 1423.595620][T20793] __x64_sys_ioctl+0x18e/0x210 [ 1423.595638][T20793] do_syscall_64+0x106/0xf80 [ 1423.595656][T20793] ? clear_bhb_loop+0x40/0x90 [ 1423.595677][T20793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.595695][T20793] RIP: 0033:0x7f273639c799 [ 1423.595709][T20793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1423.595720][T20793] RSP: 002b:00007f273718e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1423.595732][T20793] RAX: ffffffffffffffda RBX: 00007f2736616090 RCX: 00007f273639c799 [ 1423.595739][T20793] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1423.595746][T20793] RBP: 00007f273718e090 R08: 0000000000000000 R09: 0000000000000000 [ 1423.595752][T20793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1423.595759][T20793] R13: 00007f2736616128 R14: 00007f2736616090 R15: 00007ffc59572fa8 [ 1423.595773][T20793] [ 1423.596272][T20793] binder: 20788:20793 ioctl c0306201 2000000001c0 returned -14 [ 1424.006930][ T5861] usb 8-1: USB disconnect, device number 28 [ 1424.035144][ T5927] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1424.058099][ T5911] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1424.198828][ T5927] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1424.208103][ T5927] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1424.237452][ T5927] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1424.258396][ T5911] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1424.269947][ T5927] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1424.269979][ T5927] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1424.299892][ T5911] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1424.300078][ T5927] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1424.311323][ T5911] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1424.330590][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.342600][T20792] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1424.355339][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.370509][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1424.386928][ T5911] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1424.397835][ T5927] usb 7-1: Product: syz [ 1424.418921][ T5927] usb 7-1: Manufacturer: syz [ 1424.470700][ T5927] cdc_wdm 7-1:1.0: skipping garbage [ 1424.489161][ T5927] cdc_wdm 7-1:1.0: skipping garbage [ 1424.514314][ T5927] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1424.530140][ T5927] cdc_wdm 7-1:1.0: Unknown control protocol [ 1424.634477][T20792] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3812'. [ 1424.684926][ C0] wdm_int_callback: 4 callbacks suppressed [ 1424.684950][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1424.697348][ C0] wdm_int_callback: 4 callbacks suppressed [ 1424.697361][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1424.709521][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1424.716135][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1424.721336][ T5911] usb 6-1: USB disconnect, device number 33 [ 1424.722437][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1424.734638][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1424.742341][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1424.748918][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1424.755156][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1424.761725][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1424.767992][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1424.774571][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1424.780883][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1424.787457][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1424.793695][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1424.800277][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1424.806326][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1424.815126][ T5927] usb 7-1: USB disconnect, device number 16 [ 1426.131765][T17099] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1426.249425][T20817] netlink: 'syz.3.3825': attribute type 27 has an invalid length. [ 1426.302898][T17099] usb 5-1: Using ep0 maxpacket: 32 [ 1426.315041][T17099] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1426.326857][T17099] usb 5-1: config 0 has no interface number 0 [ 1426.347327][T17099] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1426.359151][T17099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.368495][T17099] usb 5-1: Product: syz [ 1426.373261][T17099] usb 5-1: Manufacturer: syz [ 1426.381045][T17099] usb 5-1: SerialNumber: syz [ 1426.439576][T17099] usb 5-1: config 0 descriptor?? [ 1426.504127][T17099] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1426.528276][T17099] usb 5-1: selecting invalid altsetting 1 [ 1426.534144][T17099] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1426.605326][T17099] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1426.619753][T17099] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1426.635956][T17099] usb 5-1: media controller created [ 1426.744719][T17099] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1427.114172][T20822] FAULT_INJECTION: forcing a failure. [ 1427.114172][T20822] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.149975][T20822] CPU: 0 UID: 0 PID: 20822 Comm: syz.3.3828 Tainted: G L syzkaller #0 PREEMPT(full) [ 1427.150006][T20822] Tainted: [L]=SOFTLOCKUP [ 1427.150012][T20822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1427.150022][T20822] Call Trace: [ 1427.150029][T20822] [ 1427.150036][T20822] dump_stack_lvl+0x100/0x190 [ 1427.150069][T20822] should_fail_ex.cold+0x5/0xa [ 1427.150091][T20822] should_failslab+0xc2/0x120 [ 1427.150120][T20822] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1427.150144][T20822] ? skb_clone+0x190/0x400 [ 1427.150168][T20822] skb_clone+0x190/0x400 [ 1427.150187][T20822] netlink_deliver_tap+0xaed/0xcc0 [ 1427.150213][T20822] netlink_unicast+0x650/0x870 [ 1427.150237][T20822] ? __pfx_netlink_unicast+0x10/0x10 [ 1427.150271][T20822] netlink_sendmsg+0x8b0/0xda0 [ 1427.150295][T20822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1427.150314][T20822] ? __might_fault+0xc0/0x140 [ 1427.150345][T20822] ____sys_sendmsg+0xa54/0xc30 [ 1427.150371][T20822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1427.150404][T20822] ___sys_sendmsg+0x190/0x1e0 [ 1427.150430][T20822] ? __pfx____sys_sendmsg+0x10/0x10 [ 1427.150485][T20822] __sys_sendmsg+0x170/0x220 [ 1427.150504][T20822] ? __pfx___sys_sendmsg+0x10/0x10 [ 1427.150536][T20822] do_syscall_64+0x106/0xf80 [ 1427.150554][T20822] ? clear_bhb_loop+0x40/0x90 [ 1427.150577][T20822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.150595][T20822] RIP: 0033:0x7f4f8319c799 [ 1427.150612][T20822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.150629][T20822] RSP: 002b:00007f4f83f88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1427.150647][T20822] RAX: ffffffffffffffda RBX: 00007f4f83415fa0 RCX: 00007f4f8319c799 [ 1427.150658][T20822] RDX: 0000000000000080 RSI: 0000200000000540 RDI: 0000000000000004 [ 1427.150668][T20822] RBP: 00007f4f83f88090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.150677][T20822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.150687][T20822] R13: 00007f4f83416038 R14: 00007f4f83415fa0 R15: 00007ffe42c87b38 [ 1427.150711][T20822] [ 1427.171285][T20827] FAULT_INJECTION: forcing a failure. [ 1427.171285][T20827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1427.409845][T20827] CPU: 1 UID: 0 PID: 20827 Comm: syz.5.3827 Tainted: G L syzkaller #0 PREEMPT(full) [ 1427.409876][T20827] Tainted: [L]=SOFTLOCKUP [ 1427.409883][T20827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1427.409893][T20827] Call Trace: [ 1427.409898][T20827] [ 1427.409905][T20827] dump_stack_lvl+0x100/0x190 [ 1427.409941][T20827] should_fail_ex.cold+0x5/0xa [ 1427.409964][T20827] _copy_from_user+0x2e/0xd0 [ 1427.409990][T20827] do_handle_open+0x60e/0xce0 [ 1427.410012][T20827] ? __fget_files+0x21f/0x3d0 [ 1427.410029][T20827] ? __pfx_do_handle_open+0x10/0x10 [ 1427.410054][T20827] ? ksys_write+0x1ac/0x250 [ 1427.410087][T20827] ? do_syscall_64+0x106/0xf80 [ 1427.410105][T20827] do_syscall_64+0x106/0xf80 [ 1427.410122][T20827] ? clear_bhb_loop+0x40/0x90 [ 1427.410144][T20827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.410161][T20827] RIP: 0033:0x7fd53479c799 [ 1427.410176][T20827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.410192][T20827] RSP: 002b:00007fd5355fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1427.410209][T20827] RAX: ffffffffffffffda RBX: 00007fd534a16090 RCX: 00007fd53479c799 [ 1427.410220][T20827] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1427.410230][T20827] RBP: 00007fd5355fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.410240][T20827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.410251][T20827] R13: 00007fd534a16128 R14: 00007fd534a16090 R15: 00007fff87087568 [ 1427.410274][T20827] [ 1427.853014][T20812] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1427.878599][T17099] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1427.898097][T17099] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1427.941328][T17099] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1428.189873][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3823'. [ 1429.201336][T17099] usb 5-1: USB disconnect, device number 17 [ 1429.530284][ T5927] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1429.540754][ T5861] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1429.690439][ T5927] usb 7-1: Using ep0 maxpacket: 8 [ 1429.697374][ T5927] usb 7-1: config 1 has an invalid interface number: 243 but max is 2 [ 1429.705926][ T5927] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.716718][ T5861] usb 6-1: device descriptor read/64, error -71 [ 1429.724217][ T5927] usb 7-1: config 1 has no interface number 2 [ 1429.730666][ T5927] usb 7-1: too many endpoints for config 1 interface 243 altsetting 248: 58, using maximum allowed: 30 [ 1429.743195][ T5927] usb 7-1: config 1 interface 243 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 1429.759103][ T5927] usb 7-1: config 1 interface 243 has no altsetting 0 [ 1430.820690][ T29] audit: type=1400 audit(2000000260.621:575): avc: denied { getopt } for pid=20856 comm="syz.7.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1430.841765][ T5927] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1430.856929][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.864958][ T5927] usb 7-1: Product: syz [ 1430.871875][ T5927] usb 7-1: Manufacturer: syz [ 1430.877201][ T5927] usb 7-1: SerialNumber: syz [ 1430.931291][ T5861] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1431.080277][ T5861] usb 6-1: device descriptor read/64, error -71 [ 1431.116960][ T5927] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1431.131989][ T1219] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 1431.147281][ T5927] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1431.200176][ T5861] usb usb6-port1: attempt power cycle [ 1431.226097][ T5927] snd-usb-audio 7-1:1.243: probe with driver snd-usb-audio failed with error -22 [ 1431.238359][T17363] udevd[17363]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.243/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1431.268773][ T5927] usb 7-1: USB disconnect, device number 17 [ 1431.297592][T20868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3840'. [ 1431.311532][T20868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3840'. [ 1431.453050][ T1219] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1431.463432][ T1219] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.471556][T18693] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1431.479285][ T1219] usb 8-1: Product: syz [ 1431.483424][ T1219] usb 8-1: Manufacturer: syz [ 1431.488267][ T1219] usb 8-1: SerialNumber: syz [ 1431.559295][ T29] audit: type=1400 audit(2000000261.275:576): avc: denied { connect } for pid=20867 comm="syz.4.3840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1431.625462][ T5861] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1431.690996][T18693] usb 4-1: Using ep0 maxpacket: 16 [ 1431.704075][ T5861] usb 6-1: device descriptor read/8, error -71 [ 1431.732843][T20873] netlink: 'syz.4.3841': attribute type 27 has an invalid length. [ 1431.877437][T18693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1431.929958][T18693] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1431.956611][T18693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.988839][T18693] usb 4-1: Product: syz [ 1431.995053][T18693] usb 4-1: Manufacturer: syz [ 1432.007066][T18693] usb 4-1: SerialNumber: syz [ 1432.032769][T18693] usb 4-1: config 0 descriptor?? [ 1432.059426][T20875] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1432.059806][T18693] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1432.081076][T18693] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1433.067979][T20877] syz.4.3843 (20877): drop_caches: 2 [ 1433.346592][ T5861] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1433.357574][T18693] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1433.484512][ T1219] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1433.519987][ T1219] usb 8-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1433.562100][ T1219] usb 8-1: found format II with max.bitrate = 0, frame size=9 [ 1433.569615][ T1219] usb 8-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1433.593042][T18693] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1433.624117][T18693] em28xx 4-1:0.0: board has no eeprom [ 1433.645601][ T1219] usb 8-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1433.687099][ T1219] usb 8-1: found format II with max.bitrate = 0, frame size=9 [ 1433.697891][ T1219] usb 8-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1433.707782][ T5861] usb 6-1: device not accepting address 37, error -71 [ 1433.742430][ T5861] usb usb6-port1: unable to enumerate USB device [ 1433.761343][ T1219] usb 8-1: unit 5 not found! [ 1433.773789][ T1219] usb 8-1: unit 2 not found! [ 1433.873180][ T1219] usb 8-1: USB disconnect, device number 29 [ 1433.947508][T18693] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1433.955387][T18693] em28xx 4-1:0.0: dvb set to bulk mode. [ 1434.072159][ T5861] em28xx 4-1:0.0: Binding DVB extension [ 1434.817656][ T1219] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1434.854157][ T5861] em28xx 4-1:0.0: Registering input extension [ 1435.856046][ T5911] usb 4-1: USB disconnect, device number 38 [ 1435.884954][ T5911] em28xx 4-1:0.0: Disconnecting em28xx [ 1435.890793][ T5911] em28xx 4-1:0.0: Closing input extension [ 1435.904913][ T1219] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1435.965783][ T1219] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1436.013594][ T1219] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1436.029297][ T5911] em28xx 4-1:0.0: Freeing device [ 1436.045362][ T1219] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.219575][ T1219] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1436.244302][ T1219] usb 8-1: invalid MIDI out EP 0 [ 1436.313662][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3851'. [ 1436.780089][T20910] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1437.047960][ T1219] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1437.293168][ T1219] usb 8-1: USB disconnect, device number 30 [ 1437.400161][T20916] syzkaller0: entered promiscuous mode [ 1437.503750][T20916] syzkaller0: entered allmulticast mode [ 1437.516350][ T29] audit: type=1400 audit(2000000266.860:577): avc: denied { append } for pid=20915 comm="syz.3.3854" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1438.484917][T20927] syz.3.3857 (20927): drop_caches: 2 [ 1438.672298][T20184] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1438.745516][T18693] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1438.818265][T20933] binder: 20930:20933 ioctl 4018620d 0 returned -22 [ 1438.825015][T20184] usb 7-1: device descriptor read/64, error -71 [ 1438.927275][T18693] usb 6-1: Using ep0 maxpacket: 8 [ 1438.933732][T18693] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.954470][T18693] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1438.968157][T18693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.979540][T18693] usb 6-1: Product: syz [ 1438.991196][T18693] usb 6-1: Manufacturer: syz [ 1438.995827][T18693] usb 6-1: SerialNumber: syz [ 1439.006396][T20936] 9pnet_fd: Insufficient options for proto=fd [ 1439.020792][T18693] usb 6-1: config 0 descriptor?? [ 1439.027574][T20936] syz_tun: entered allmulticast mode [ 1439.041844][T18693] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1439.048570][T18693] usb 6-1: selecting invalid altsetting 1 [ 1439.156668][T20184] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1439.161324][T20935] syz_tun: left allmulticast mode [ 1439.282574][T18693] gspca_stk014: init reg: 0x00 [ 1439.303027][T18693] stk014 6-1:0.0: probe with driver stk014 failed with error -5 [ 1439.390161][T20184] usb 7-1: device descriptor read/64, error -71 [ 1439.528071][T18693] usb 6-1: USB disconnect, device number 38 [ 1439.533571][T20184] usb usb7-port1: attempt power cycle [ 1439.922585][T20184] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1439.944862][T20184] usb 7-1: device descriptor read/8, error -71 [ 1440.282467][T20184] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1440.334118][T20184] usb 7-1: device descriptor read/8, error -71 [ 1440.418943][T20957] netlink: 'syz.3.3865': attribute type 1 has an invalid length. [ 1440.441449][T20957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3865'. [ 1440.457996][T20184] usb usb7-port1: unable to enumerate USB device [ 1440.743887][T20960] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1440.750426][T20960] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1440.762732][T20960] vhci_hcd vhci_hcd.0: Device attached [ 1440.804000][T20961] vhci_hcd: connection closed [ 1440.809753][T17551] vhci_hcd vhci_hcd.7: stop threads [ 1440.820458][T17545] bridge_slave_1: left allmulticast mode [ 1440.826154][T17551] vhci_hcd vhci_hcd.7: release socket [ 1440.835156][T17545] bridge_slave_1: left promiscuous mode [ 1440.842790][T17551] vhci_hcd vhci_hcd.7: disconnect device [ 1440.849659][T17545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.885506][T18693] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1440.898288][T17545] bridge_slave_0: left allmulticast mode [ 1440.904221][T17545] bridge_slave_0: left promiscuous mode [ 1440.910321][T17545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.054955][T18693] usb 4-1: Using ep0 maxpacket: 16 [ 1441.092733][T18693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.139173][T18693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.182060][T18693] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1441.229260][T18693] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1441.263793][T18693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.560652][T18693] usb 4-1: config 0 descriptor?? [ 1441.578873][T20973] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1441.585430][T20973] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1441.615712][T20977] random: crng reseeded on system resumption [ 1441.655562][T20973] vhci_hcd vhci_hcd.0: Device attached [ 1441.669538][T20975] vhci_hcd: connection closed [ 1441.669987][T17550] vhci_hcd vhci_hcd.5: stop threads [ 1441.687029][T17550] vhci_hcd vhci_hcd.5: release socket [ 1441.697095][T17550] vhci_hcd vhci_hcd.5: disconnect device [ 1441.801373][T17545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.861329][T17545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1441.885646][T17545] bond0 (unregistering): Released all slaves [ 1442.049623][ T5927] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1442.225523][T18693] usbhid 4-1:0.0: can't add hid device: -71 [ 1442.231530][ T5927] usb 8-1: Using ep0 maxpacket: 8 [ 1442.239664][T18693] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1442.250184][ T5927] usb 8-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1442.260999][ T5927] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1442.317776][T18693] usb 4-1: USB disconnect, device number 39 [ 1442.323729][ T5927] usb 8-1: Product: syz [ 1442.337168][ T5927] usb 8-1: Manufacturer: syz [ 1442.337193][T17545] hsr_slave_0: left promiscuous mode [ 1442.367627][ T5927] usb 8-1: SerialNumber: syz [ 1442.395196][ T5927] usb 8-1: config 0 descriptor?? [ 1442.410863][ T5927] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1442.446131][T17545] hsr_slave_1: left promiscuous mode [ 1442.474648][T17545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1442.501491][T17545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.517303][T17545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1442.542430][T17545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1442.575883][T17545] veth1_macvtap: left promiscuous mode [ 1442.581376][T17545] veth0_macvtap: left promiscuous mode [ 1442.600539][T17545] veth1_vlan: left promiscuous mode [ 1442.613998][T17545] veth0_vlan: left promiscuous mode [ 1442.621960][ T5927] gspca_sn9c2028: read1 error -32 [ 1442.635956][ T5927] gspca_sn9c2028: read1 error -32 [ 1442.865233][ T5927] usb 8-1: USB disconnect, device number 31 [ 1442.924303][T20991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3872'. [ 1443.038350][T17545] team0 (unregistering): Port device team_slave_1 removed [ 1443.070657][T17545] team0 (unregistering): Port device team_slave_0 removed [ 1443.226006][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1443.403954][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1443.454456][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1443.503915][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1443.537642][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.806017][T20984] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 1443.824495][T20989] dummy0: entered promiscuous mode [ 1443.833884][T20993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1443.838011][T20991] gtp1: entered promiscuous mode [ 1443.852447][T20991] gtp1: entered allmulticast mode [ 1443.884903][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1443.904136][T20989] dummy0: left promiscuous mode [ 1444.326783][T21010] overlayfs: overlapping lowerdir path [ 1444.383053][T20993] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3873'. [ 1444.493389][ T24] usb 4-1: USB disconnect, device number 40 [ 1444.785820][T21024] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1444.792369][T21024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1444.858745][T21024] vhci_hcd vhci_hcd.0: Device attached [ 1444.900624][T21026] vhci_hcd: connection closed [ 1444.900971][ T8842] vhci_hcd vhci_hcd.5: stop threads [ 1444.927620][T20184] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1444.928870][ T8842] vhci_hcd vhci_hcd.5: release socket [ 1445.069857][ T8842] vhci_hcd vhci_hcd.5: disconnect device [ 1445.103206][T17545] IPVS: stop unused estimator thread 0... [ 1445.110277][T20184] usb 7-1: device descriptor read/64, error -71 [ 1445.604816][T21033] dummy0: entered promiscuous mode [ 1445.684658][T20184] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1445.823605][T20184] usb 7-1: device descriptor read/64, error -71 [ 1445.995837][T20184] usb usb7-port1: attempt power cycle [ 1446.115356][T21039] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3882'. [ 1446.126383][T21039] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3882'. [ 1446.207441][T18693] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1446.267783][T21032] dummy0: left promiscuous mode [ 1446.838475][T18693] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1447.185274][T18693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.192942][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 1447.195781][T18693] usb 5-1: Product: syz [ 1447.203658][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 1447.203889][T18693] usb 5-1: Manufacturer: syz [ 1447.216397][T18693] usb 5-1: SerialNumber: syz [ 1447.224108][T20184] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1447.230985][T18693] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1447.231718][T21040] ceph: No mds server is up or the cluster is laggy [ 1447.249520][ T5861] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1447.282055][T21047] FAULT_INJECTION: forcing a failure. [ 1447.282055][T21047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1447.295364][T21047] CPU: 0 UID: 0 PID: 21047 Comm: syz.3.3883 Tainted: G L syzkaller #0 PREEMPT(full) [ 1447.295395][T21047] Tainted: [L]=SOFTLOCKUP [ 1447.295401][T21047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1447.295412][T21047] Call Trace: [ 1447.295418][T21047] [ 1447.295425][T21047] dump_stack_lvl+0x100/0x190 [ 1447.295460][T21047] should_fail_ex.cold+0x5/0xa [ 1447.295487][T21047] _copy_to_user+0x32/0xd0 [ 1447.295514][T21047] simple_read_from_buffer+0xcb/0x170 [ 1447.295545][T21047] proc_fail_nth_read+0x1af/0x230 [ 1447.295571][T21047] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1447.295596][T21047] ? rw_verify_area+0xce/0x6d0 [ 1447.295619][T21047] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1447.295642][T21047] vfs_read+0x1e4/0xb30 [ 1447.295669][T21047] ? __pfx_vfs_read+0x10/0x10 [ 1447.295694][T21047] ? __fget_files+0x215/0x3d0 [ 1447.295718][T21047] ? __fget_files+0x21f/0x3d0 [ 1447.295743][T21047] ksys_read+0x12a/0x250 [ 1447.295767][T21047] ? __pfx_ksys_read+0x10/0x10 [ 1447.295800][T21047] do_syscall_64+0x106/0xf80 [ 1447.295818][T21047] ? clear_bhb_loop+0x40/0x90 [ 1447.295841][T21047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.295859][T21047] RIP: 0033:0x7f4f8315cfce [ 1447.295875][T21047] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1447.295892][T21047] RSP: 002b:00007f4f813f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1447.295910][T21047] RAX: ffffffffffffffda RBX: 00007f4f813f66c0 RCX: 00007f4f8315cfce [ 1447.295921][T21047] RDX: 000000000000000f RSI: 00007f4f813f60a0 RDI: 0000000000000006 [ 1447.295932][T21047] RBP: 00007f4f813f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1447.295943][T21047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1447.295953][T21047] R13: 00007f4f83416128 R14: 00007f4f83416090 R15: 00007ffe42c87b38 [ 1447.295978][T21047] [ 1447.512781][T20184] usb 7-1: device descriptor read/8, error -71 [ 1447.596196][ T5911] usb 5-1: USB disconnect, device number 18 [ 1447.649645][ T29] audit: type=1400 audit(2000000276.354:578): avc: denied { lock } for pid=21050 comm="syz.3.3885" path="socket:[83755]" dev="sockfs" ino=83755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1447.734515][T21052] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3885'. [ 1447.779995][T20184] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1448.004729][T20184] usb 7-1: device not accepting address 25, error -71 [ 1448.129835][T20184] usb usb7-port1: unable to enumerate USB device [ 1448.143235][T21037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1448.636709][ T5861] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1448.651682][ T5861] ath9k_htc: Failed to initialize the device [ 1448.758783][ T5911] usb 5-1: ath9k_htc: USB layer deinitialized [ 1448.799706][T21064] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3887'. [ 1448.851610][T21067] overlayfs: overlapping lowerdir path [ 1449.031874][T20184] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1449.083930][ T5911] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1449.139170][ T5927] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1449.236618][T20184] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.258026][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 1449.265956][T20184] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1449.275063][T20184] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.290272][ T5911] usb 5-1: device descriptor read/all, error -71 [ 1449.300499][T20184] usb 7-1: config 0 descriptor?? [ 1449.308113][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 1449.309762][T20184] pwc: Askey VC010 type 2 USB webcam detected. [ 1449.326089][ T5927] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1449.483844][ T5927] usb 4-1: config 8 has an invalid interface number: 254 but max is 0 [ 1449.498902][ T5927] usb 4-1: config 8 has no interface number 0 [ 1449.511859][ T5927] usb 4-1: config 8 interface 254 has no altsetting 0 [ 1449.522620][ T24] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1449.602681][ T5927] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=4e.f5 [ 1449.612035][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.621630][ T5927] usb 4-1: Product: syz [ 1449.625808][ T5927] usb 4-1: Manufacturer: syz [ 1449.630744][ T5927] usb 4-1: SerialNumber: syz [ 1449.727244][T21077] random: crng reseeded on system resumption [ 1449.749539][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 1449.770171][T20184] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1449.773681][T21059] veth0: entered promiscuous mode [ 1449.786824][ T24] usb 6-1: config 127 has an invalid interface number: 136 but max is 0 [ 1449.812831][T20184] pwc: recv_control_msg error -32 req 02 val 2700 [ 1449.824702][ T24] usb 6-1: config 127 has no interface number 0 [ 1449.862201][ T24] usb 6-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice=a3.4c [ 1449.876447][T17099] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1449.908991][T20184] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1449.918139][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.923598][ T5927] usb 4-1: USB disconnect, device number 41 [ 1449.945499][ T24] usb 6-1: Product: syz [ 1449.950870][T20184] pwc: recv_control_msg error -32 req 04 val 1000 [ 1449.975586][ T24] usb 6-1: Manufacturer: syz [ 1449.989191][T20184] pwc: recv_control_msg error -32 req 04 val 1300 [ 1449.998231][ T24] usb 6-1: SerialNumber: syz [ 1450.020124][T20184] pwc: recv_control_msg error -32 req 04 val 1400 [ 1450.067286][T17099] usb 8-1: Using ep0 maxpacket: 32 [ 1450.081928][T17099] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1450.122657][T17099] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1450.146025][T17099] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1450.186086][T17099] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.225496][T17099] usb 8-1: config 0 descriptor?? [ 1450.254399][ T24] kaweth 6-1:127.136: couldn't find required endpoints [ 1450.278789][T20184] pwc: recv_control_msg error -32 req 02 val 2100 [ 1450.308766][ T24] usb 6-1: USB disconnect, device number 39 [ 1450.341510][T20184] pwc: recv_control_msg error -32 req 04 val 1500 [ 1450.378488][T20184] pwc: recv_control_msg error -32 req 02 val 2500 [ 1450.390031][T20184] pwc: recv_control_msg error -32 req 02 val 2400 [ 1450.409413][T20184] pwc: recv_control_msg error -32 req 02 val 2600 [ 1450.420649][T21058] veth0: left promiscuous mode [ 1450.420989][T20184] pwc: recv_control_msg error -32 req 02 val 2900 [ 1450.453220][T20184] pwc: recv_control_msg error -71 req 02 val 2800 [ 1450.463598][T20184] pwc: recv_control_msg error -71 req 04 val 1100 [ 1450.480978][T20184] pwc: recv_control_msg error -71 req 04 val 1200 [ 1450.501718][T20184] pwc: Registered as video103. [ 1450.545236][T20184] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input173 [ 1450.604895][T20184] usb 7-1: USB disconnect, device number 26 [ 1450.911462][ T1219] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1451.050277][ T1219] usb 4-1: device descriptor read/64, error -71 [ 1451.086752][T17099] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0 [ 1451.101327][T17099] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0 [ 1451.109663][T17099] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0 [ 1451.119078][T17099] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0 [ 1451.128052][T20184] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1451.147789][T17099] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0 [ 1451.160449][T17099] corsair-cpro 0003:1B1C:0C10.001D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.7-1/input0 [ 1451.247435][T21076] FAULT_INJECTION: forcing a failure. [ 1451.247435][T21076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1451.261899][T21076] CPU: 0 UID: 0 PID: 21076 Comm: syz.7.3894 Tainted: G L syzkaller #0 PREEMPT(full) [ 1451.261928][T21076] Tainted: [L]=SOFTLOCKUP [ 1451.261934][T21076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1451.261944][T21076] Call Trace: [ 1451.261950][T21076] [ 1451.261956][T21076] dump_stack_lvl+0x100/0x190 [ 1451.261979][T21076] should_fail_ex.cold+0x5/0xa [ 1451.261999][T21076] _copy_to_user+0x32/0xd0 [ 1451.262018][T21076] simple_read_from_buffer+0xcb/0x170 [ 1451.262047][T21076] proc_fail_nth_read+0x1af/0x230 [ 1451.262071][T21076] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1451.262094][T21076] ? rw_verify_area+0xce/0x6d0 [ 1451.262112][T21076] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1451.262127][T21076] vfs_read+0x1e4/0xb30 [ 1451.262146][T21076] ? __pfx_vfs_read+0x10/0x10 [ 1451.262162][T21076] ? __fget_files+0x215/0x3d0 [ 1451.262184][T21076] ? __fget_files+0x21f/0x3d0 [ 1451.262208][T21076] ksys_read+0x12a/0x250 [ 1451.262230][T21076] ? __pfx_ksys_read+0x10/0x10 [ 1451.262256][T21076] do_syscall_64+0x106/0xf80 [ 1451.262268][T21076] ? clear_bhb_loop+0x40/0x90 [ 1451.262282][T21076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.262294][T21076] RIP: 0033:0x7f1ce675cfce [ 1451.262304][T21076] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1451.262318][T21076] RSP: 002b:00007f1ce7577fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1451.262335][T21076] RAX: ffffffffffffffda RBX: 00007f1ce75786c0 RCX: 00007f1ce675cfce [ 1451.262346][T21076] RDX: 000000000000000f RSI: 00007f1ce75780a0 RDI: 0000000000000004 [ 1451.262356][T21076] RBP: 00007f1ce7578090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.262365][T21076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1451.262375][T21076] R13: 00007f1ce6a16038 R14: 00007f1ce6a15fa0 R15: 00007ffc6d576838 [ 1451.262395][T21076] [ 1451.329120][T20184] usb 6-1: Using ep0 maxpacket: 32 [ 1451.330584][ T1219] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1451.806991][T17099] corsair-cpro 0003:1B1C:0C10.001D: probe with driver corsair-cpro failed with error -110 [ 1451.832689][T20184] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1451.843535][ T1219] usb 4-1: device descriptor read/64, error -71 [ 1451.856127][T20184] usb 6-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 1451.878769][T17099] usb 8-1: USB disconnect, device number 32 [ 1451.896408][T20184] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.904469][T20184] usb 6-1: Product: syz [ 1451.916214][T18693] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1452.088751][ T1219] usb usb4-port1: attempt power cycle [ 1452.122186][T20184] usb 6-1: Manufacturer: syz [ 1452.225213][T20184] usb 6-1: SerialNumber: syz [ 1452.251346][T21099] overlayfs: overlapping lowerdir path [ 1452.728759][T18693] usb 7-1: Using ep0 maxpacket: 16 [ 1452.750091][ T1219] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1452.901352][T18693] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1452.934745][T18693] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1452.946193][ T1219] usb 4-1: device descriptor read/8, error -71 [ 1453.174003][ T29] audit: type=1400 audit(2000000281.387:579): avc: denied { write } for pid=21085 comm="syz.5.3897" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1453.307576][T21106] netlink: 'syz.7.3902': attribute type 27 has an invalid length. [ 1453.339383][T18693] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1453.348465][T18693] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.370818][T18693] usb 7-1: Product: syz [ 1453.380772][T18693] usb 7-1: Manufacturer: syz [ 1453.385428][T18693] usb 7-1: SerialNumber: syz [ 1453.433655][T18693] usb 7-1: config 0 descriptor?? [ 1453.562633][ T1219] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1453.637027][ T1219] usb 4-1: device descriptor read/8, error -71 [ 1453.673327][T18693] appledisplay 7-1:0.0: Error while getting initial brightness: -71 [ 1453.707556][T18693] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -71 [ 1453.742779][T18693] usb 7-1: USB disconnect, device number 27 [ 1453.775747][ T1219] usb usb4-port1: unable to enumerate USB device [ 1455.240020][T20184] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1455.292762][T20184] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1455.388210][T20184] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1455.428747][T20184] usb 6-1: USB disconnect, device number 40 [ 1455.503202][T17363] udevd[17363]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1456.279110][T17099] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1456.476097][T17099] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1456.525972][T17099] usb 5-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 1456.572140][T17099] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1456.637518][T17099] usb 5-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1456.669204][T17099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.702490][T17099] usb 5-1: Product: syz [ 1456.722176][T17099] usb 5-1: Manufacturer: syz [ 1456.740058][T17099] usb 5-1: SerialNumber: syz [ 1456.898019][T18693] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1457.108259][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3912'. [ 1457.133472][T18693] usb 4-1: Using ep0 maxpacket: 8 [ 1457.153331][T18693] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1457.184932][T18693] usb 4-1: config 0 has no interface number 0 [ 1457.208818][T18693] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1457.223476][T18693] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1457.235306][T18693] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1457.246289][T18693] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1457.259489][T18693] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1457.275349][T18693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.301801][T18693] usb 4-1: config 0 descriptor?? [ 1457.333267][T18693] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1457.649580][T17099] usb 5-1: USB disconnect, device number 21 [ 1457.661965][T21144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.674981][T21144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.727267][T17363] udevd[17363]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1457.788599][T21151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.798366][T21151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.588377][T20184] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1458.609524][T17099] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1459.498337][T20184] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.526273][T20184] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.554450][T20184] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1459.578246][T17099] usb 8-1: device descriptor read/64, error -71 [ 1459.586233][T20184] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1459.597382][T20184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.621085][T20184] usb 6-1: config 0 descriptor?? [ 1459.774454][ T24] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1459.787985][ T5911] usb 4-1: USB disconnect, device number 46 [ 1459.813310][ T5911] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1459.840017][T17099] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1459.948918][ T24] usb 5-1: device descriptor read/64, error -71 [ 1459.993782][T17099] usb 8-1: device descriptor read/64, error -71 [ 1460.118101][T17099] usb usb8-port1: attempt power cycle [ 1460.272678][ T24] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1460.314703][T20184] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1460.472056][ T24] usb 5-1: device descriptor read/64, error -71 [ 1460.556705][T18693] usb 6-1: USB disconnect, device number 41 [ 1460.598094][ T24] usb usb5-port1: attempt power cycle [ 1460.603597][T17099] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1460.890368][T17099] usb 8-1: device descriptor read/8, error -71 [ 1461.011191][T21187] kvm_intel: kvm [21186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 1461.022866][T21187] kvm_intel: kvm [21186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 1461.033896][T21187] kvm_intel: kvm [21186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 1461.045028][T21187] kvm_intel: kvm [21186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 1461.055144][T21187] kvm_intel: kvm [21186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 1461.069055][T21187] kvm_intel: kvm [21186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x9 [ 1461.164432][T17099] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1461.198424][T17099] usb 8-1: device descriptor read/8, error -71 [ 1461.218280][ T24] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1461.253905][ T24] usb 5-1: device descriptor read/8, error -71 [ 1461.315510][T17099] usb usb8-port1: unable to enumerate USB device [ 1461.334874][T18693] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1461.478646][T21196] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1461.485214][T21196] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1461.494460][T21196] vhci_hcd vhci_hcd.0: Device attached [ 1461.560200][ T24] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1461.595142][ T24] usb 5-1: device descriptor read/8, error -71 [ 1461.647379][T18693] usb 7-1: Using ep0 maxpacket: 32 [ 1461.655172][T21198] vhci_hcd: connection closed [ 1461.656482][T17545] vhci_hcd vhci_hcd.3: stop threads [ 1461.678388][T17545] vhci_hcd vhci_hcd.3: release socket [ 1461.689360][T18693] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1461.698918][T17545] vhci_hcd vhci_hcd.3: disconnect device [ 1461.708452][T18693] usb 7-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 1461.726586][T21201] dummy0: entered promiscuous mode [ 1461.739102][ T24] usb usb5-port1: unable to enumerate USB device [ 1461.741647][T18693] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.752073][T17099] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1461.761443][T17099] usb 39-1: enqueue for inactive port 0 [ 1461.764733][T18693] usb 7-1: Product: syz [ 1461.772437][T18693] usb 7-1: Manufacturer: syz [ 1461.777735][T18693] usb 7-1: SerialNumber: syz [ 1461.839829][T17099] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1462.259055][T18693] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1462.297646][T18693] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1462.400017][T18693] usb 7-1: USB disconnect, device number 28 [ 1462.509309][T17363] udevd[17363]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1462.678207][T21200] dummy0: left promiscuous mode [ 1462.975942][T21224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3935'. [ 1463.228187][T21225] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1463.235134][T21225] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1463.245856][T21225] vhci_hcd vhci_hcd.0: Device attached [ 1463.529221][T17099] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 1463.601683][T21224] gtp0: entered promiscuous mode [ 1463.618853][T21224] gtp0: entered allmulticast mode [ 1464.135538][ T5861] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1464.222395][T20184] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1464.242614][T21243] input: syz0 as /devices/virtual/input/input175 [ 1464.296249][ T5861] usb 7-1: Using ep0 maxpacket: 16 [ 1464.324940][ T5861] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.341632][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1464.356014][T21245] FAULT_INJECTION: forcing a failure. [ 1464.356014][T21245] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.370931][T21245] CPU: 0 UID: 0 PID: 21245 Comm: syz.5.3939 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.370962][T21245] Tainted: [L]=SOFTLOCKUP [ 1464.370968][T21245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1464.370979][T21245] Call Trace: [ 1464.370986][T21245] [ 1464.370993][T21245] dump_stack_lvl+0x100/0x190 [ 1464.371024][T21245] should_fail_ex.cold+0x5/0xa [ 1464.371046][T21245] should_failslab+0xc2/0x120 [ 1464.371074][T21245] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1464.371094][T21245] ? kvm_irqfd+0x17f/0x1840 [ 1464.371117][T21245] ? __lock_acquire+0x4a5/0x2630 [ 1464.371154][T21245] kvm_irqfd+0x17f/0x1840 [ 1464.371184][T21245] ? __pfx_kvm_irqfd+0x10/0x10 [ 1464.371205][T21245] ? __might_fault+0xc5/0x140 [ 1464.371227][T21245] ? __might_fault+0xc5/0x140 [ 1464.371257][T21245] kvm_vm_ioctl+0x1260/0x4080 [ 1464.371286][T21245] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1464.371318][T21245] ? tomoyo_path_number_perm+0x46d/0x580 [ 1464.371338][T21245] ? kasan_quarantine_put+0x104/0x240 [ 1464.371361][T21245] ? lockdep_hardirqs_on+0x78/0x100 [ 1464.371380][T21245] ? find_held_lock+0x2b/0x80 [ 1464.371400][T21245] ? tomoyo_path_number_perm+0x28f/0x580 [ 1464.371416][T21245] ? tomoyo_path_number_perm+0x28f/0x580 [ 1464.371438][T21245] ? tomoyo_path_number_perm+0x188/0x580 [ 1464.371456][T21245] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1464.371481][T21245] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1464.371506][T21245] ? do_vfs_ioctl+0x226/0x13e0 [ 1464.371531][T21245] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1464.371555][T21245] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1464.371583][T21245] ? __fget_files+0x215/0x3d0 [ 1464.371598][T21245] ? hook_file_ioctl_common+0x146/0x410 [ 1464.371627][T21245] ? selinux_file_ioctl+0x139/0x290 [ 1464.371645][T21245] ? selinux_file_ioctl+0xb4/0x290 [ 1464.371665][T21245] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1464.371686][T21245] __x64_sys_ioctl+0x18e/0x210 [ 1464.371712][T21245] do_syscall_64+0x106/0xf80 [ 1464.371729][T21245] ? clear_bhb_loop+0x40/0x90 [ 1464.371749][T21245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.371766][T21245] RIP: 0033:0x7fd53479c799 [ 1464.371781][T21245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.371796][T21245] RSP: 002b:00007fd53561f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1464.371813][T21245] RAX: ffffffffffffffda RBX: 00007fd534a15fa0 RCX: 00007fd53479c799 [ 1464.371824][T21245] RDX: 00002000000000c0 RSI: 000000004020ae76 RDI: 0000000000000004 [ 1464.371834][T21245] RBP: 00007fd53561f090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.371843][T21245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.371852][T21245] R13: 00007fd534a16038 R14: 00007fd534a15fa0 R15: 00007fff87087568 [ 1464.371875][T21245] [ 1464.371942][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1464.705623][T20184] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1464.733683][T20184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.754599][T20184] usb 5-1: Product: syz [ 1464.770501][T20184] usb 5-1: Manufacturer: syz [ 1464.775100][T20184] usb 5-1: SerialNumber: syz [ 1464.805932][T20184] usb 5-1: config 0 descriptor?? [ 1464.981861][ T24] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1464.990133][T21227] vhci_hcd: connection reset by peer [ 1465.017968][T17550] vhci_hcd vhci_hcd.3: stop threads [ 1465.034756][T17550] vhci_hcd vhci_hcd.3: release socket [ 1465.069895][T17550] vhci_hcd vhci_hcd.3: disconnect device [ 1465.107426][ T5861] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1465.110555][T21247] dummy0: entered promiscuous mode [ 1465.141451][ T5861] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1465.173868][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1465.179341][ T5861] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1465.182516][ T24] usb 8-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1465.210381][ T5861] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1465.210948][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.249570][T20184] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1465.259456][ T24] usb 8-1: Product: syz [ 1465.263695][ T24] usb 8-1: Manufacturer: syz [ 1465.268425][ T24] usb 8-1: SerialNumber: syz [ 1465.279205][ T5861] usb 7-1: Manufacturer: syz [ 1465.312574][ T5861] usb 7-1: config 0 descriptor?? [ 1465.386397][T18693] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1465.546664][T18693] usb 6-1: Using ep0 maxpacket: 16 [ 1465.566761][T18693] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.609754][T18693] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1465.639088][T18693] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1465.654877][ T5861] rc_core: IR keymap rc-hauppauge not found [ 1465.692740][ T5861] Registered IR keymap rc-empty [ 1465.698926][T18693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.710719][ T5861] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1465.721422][T18693] usb 6-1: config 0 descriptor?? [ 1465.750578][ T5861] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1465.781490][ T24] mxuport 8-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 1465.783275][ T5861] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1465.801767][ T24] mxuport 8-1:254.0: probe with driver mxuport failed with error -5 [ 1465.832278][ T5861] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input176 [ 1465.850058][ T5861] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1465.888932][ T5861] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1465.910312][ T5861] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1465.934267][ T5861] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1465.963711][ T5861] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1465.986298][ T5861] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1466.038583][ T5861] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1466.084302][ T5861] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1466.105109][T21246] dummy0: left promiscuous mode [ 1466.124746][ T5861] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1466.145394][ T5861] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1466.190227][ T5861] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1466.206241][ T5861] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1466.218647][T21255] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1466.229518][ T5861] usb 7-1: USB disconnect, device number 29 [ 1466.462802][T21260] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1466.469361][T21260] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1466.481068][T21260] vhci_hcd vhci_hcd.0: Device attached [ 1466.819979][T21261] vhci_hcd: connection closed [ 1466.820914][ T24] usb 8-1: USB disconnect, device number 37 [ 1466.833210][T17550] vhci_hcd vhci_hcd.3: stop threads [ 1466.852717][T17550] vhci_hcd vhci_hcd.3: release socket [ 1466.863160][T17550] vhci_hcd vhci_hcd.3: disconnect device [ 1467.150381][ T5861] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1467.327236][ T5861] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1467.336740][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.345458][ T5861] usb 7-1: Product: syz [ 1467.350004][ T5861] usb 7-1: Manufacturer: syz [ 1467.354903][ T5861] usb 7-1: SerialNumber: syz [ 1467.363462][ T5861] usb 7-1: config 0 descriptor?? [ 1467.491629][T21274] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3946'. [ 1467.533169][ T29] audit: type=1326 audit(2000000294.969:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21273 comm="syz.3.3946" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f8319c799 code=0x0 [ 1467.594480][ T5861] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1467.958709][T21279] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1467.965288][T21279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1467.973677][T21279] vhci_hcd vhci_hcd.0: Device attached [ 1467.993709][ T29] audit: type=1326 audit(2000000295.399:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21240 comm="syz.4.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273639c799 code=0x7fc00000 [ 1468.111781][T20184] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1468.301701][T20184] usb 5-1: USB disconnect, device number 26 [ 1468.315684][T18693] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 1468.365360][T21280] vhci_hcd: connection reset by peer [ 1468.382818][ T8842] vhci_hcd vhci_hcd.7: stop threads [ 1468.391109][ T8842] vhci_hcd vhci_hcd.7: release socket [ 1468.393446][ T5911] usb 6-1: USB disconnect, device number 42 [ 1468.402601][ T8842] vhci_hcd vhci_hcd.7: disconnect device [ 1468.596822][T21286] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1468.603381][T21286] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1468.625891][T21286] vhci_hcd vhci_hcd.0: Device attached [ 1469.591807][ T5861] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1469.685792][T20184] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1469.693794][T21287] vhci_hcd: connection closed [ 1469.695662][T17551] vhci_hcd vhci_hcd.4: stop threads [ 1469.696713][T17099] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1469.700367][T17551] vhci_hcd vhci_hcd.4: release socket [ 1469.759588][T17551] vhci_hcd vhci_hcd.4: disconnect device [ 1470.116462][ T5861] usb 7-1: USB disconnect, device number 30 [ 1470.186624][ T976] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1470.246311][T21308] loop8: detected capacity change from 0 to 524287999 [ 1470.261719][T21308] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1470.280419][T17363] Buffer I/O error on dev loop8, logical block 65535998, async page read [ 1470.370520][ T976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.395134][ T976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.406622][ T976] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1470.415726][ T976] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.425443][ T976] usb 8-1: config 0 descriptor?? [ 1470.569906][ T5861] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1470.723003][ T5927] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1470.735773][ T976] usbhid 8-1:0.0: can't add hid device: -71 [ 1470.795740][ T5861] usb 7-1: device descriptor read/64, error -71 [ 1470.805824][ T976] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1470.831775][ T976] usb 8-1: USB disconnect, device number 38 [ 1471.073723][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 1471.095385][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.116829][ T5861] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1471.127264][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1471.152952][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1471.253760][ T5927] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1471.288019][ T5861] usb 7-1: device descriptor read/64, error -71 [ 1471.298219][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1471.324111][ T29] audit: type=1326 audit(2000000298.514:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21321 comm="syz.5.3958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd53479c799 code=0x0 [ 1471.363412][ T5927] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1471.372642][ T5927] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1471.386858][ T5927] usb 4-1: Manufacturer: syz [ 1471.436957][ T5861] usb usb7-port1: attempt power cycle [ 1471.470208][ T5927] usb 4-1: config 0 descriptor?? [ 1471.535200][T17099] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1471.538746][T21327] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1471.823895][ T5927] rc_core: IR keymap rc-hauppauge not found [ 1471.835996][T17099] usb 8-1: device descriptor read/64, error -71 [ 1471.836691][ T5927] Registered IR keymap rc-empty [ 1471.847467][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1471.855651][ T5861] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1471.875875][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1471.883476][ T5861] usb 7-1: device descriptor read/8, error -71 [ 1471.898098][ T5927] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1471.910698][ T5927] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input177 [ 1471.924804][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1471.961247][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1471.993206][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1472.025688][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1472.057444][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1472.079379][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1472.089370][ T1219] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1472.100994][T17099] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1472.110798][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1472.132201][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1472.142805][ T5861] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1472.168052][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1472.175911][ T5861] usb 7-1: device descriptor read/8, error -71 [ 1472.196378][ T5927] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1472.219188][ T5927] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1472.236530][ T5927] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1472.240831][T17099] usb 8-1: device descriptor read/64, error -71 [ 1472.250708][ T5927] usb 4-1: USB disconnect, device number 47 [ 1472.265892][ T1219] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1472.278517][ T1219] usb 5-1: config 0 has no interface number 0 [ 1472.287170][ T1219] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1472.299543][ T5861] usb usb7-port1: unable to enumerate USB device [ 1472.319619][ T1219] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1472.329201][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.337436][ T1219] usb 5-1: Product: syz [ 1472.341743][ T1219] usb 5-1: Manufacturer: syz [ 1472.346384][ T1219] usb 5-1: SerialNumber: syz [ 1472.364474][ T1219] usb 5-1: config 0 descriptor?? [ 1472.374068][ T1219] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 1472.425106][T17099] usb usb8-port1: attempt power cycle [ 1472.547697][T21336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3961'. [ 1472.957059][T17099] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1472.992344][T17099] usb 8-1: device descriptor read/8, error -71 [ 1473.349390][T21344] kernel read not supported for file /cpuacct.usage_percpu (pid: 21344 comm: syz.5.3963) [ 1473.400899][ T29] audit: type=1800 audit(2000000300.450:583): pid=21344 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3963" name="cpuacct.usage_percpu" dev="mqueue" ino=86256 res=0 errno=0 [ 1473.522699][T21350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3965'. [ 1473.523867][T21349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3965'. [ 1473.695349][T12483] ------------[ cut here ]------------ [ 1473.701150][T12483] refcnt < 0 [ 1473.701161][T12483] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0x16a/0x230, CPU#1: kworker/u9:0/12483 [ 1473.717030][T12483] Modules linked in: [ 1473.721225][T12483] CPU: 1 UID: 0 PID: 12483 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1473.733806][T12483] Tainted: [L]=SOFTLOCKUP [ 1473.739835][T12483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1473.751377][T12483] Workqueue: hci1 hci_conn_timeout [ 1473.756507][T12483] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 1473.763147][T12483] Code: 44 0f b6 2d 73 d9 4d 06 31 ff 41 83 e5 40 44 89 ee e8 fa 61 81 f7 45 84 ed 0f 84 02 ff ff ff e9 36 75 ea f6 e8 97 67 81 f7 90 <0f> 0b 90 e8 8e 67 81 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 1473.784398][T12483] RSP: 0018:ffffc900056c7c18 EFLAGS: 00010293 [ 1473.792010][T12483] RAX: 0000000000000000 RBX: ffff888077a50a40 RCX: ffffffff8a87362f [ 1473.801460][T12483] RDX: ffff88805a844900 RSI: ffffffff8a873729 RDI: ffff88805a844900 [ 1473.809437][T12483] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1473.818873][T12483] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888077a50000 [ 1473.828328][T12483] R13: ffff88805a844d84 R14: ffffffff90d9b804 R15: 0000000000000000 [ 1473.837746][T12483] FS: 0000000000000000(0000) GS:ffff888124444000(0000) knlGS:0000000000000000 [ 1473.848046][T12483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1473.855681][T12483] CR2: 0000200000076030 CR3: 000000006080d000 CR4: 00000000003526f0 [ 1473.863671][T12483] Call Trace: [ 1473.868153][T12483] [ 1473.871084][T12483] process_one_work+0x9d7/0x1920 [ 1473.877473][T12483] ? __pfx_process_one_work+0x10/0x10 [ 1473.882867][T12483] ? __pfx_hci_conn_timeout+0x10/0x10 [ 1473.889704][T12483] worker_thread+0x5da/0xe40 [ 1473.894300][T12483] ? __pfx_worker_thread+0x10/0x10 [ 1473.900838][T12483] ? kthread+0x13a/0x450 [ 1473.905082][T12483] ? __pfx_worker_thread+0x10/0x10 [ 1473.911609][T12483] kthread+0x370/0x450 [ 1473.915683][T12483] ? __pfx_kthread+0x10/0x10 [ 1473.921684][T12483] ret_from_fork+0x754/0xd80 [ 1473.926274][T12483] ? __pfx_ret_from_fork+0x10/0x10 [ 1473.932805][T12483] ? __switch_to+0x7b4/0x1120 [ 1473.937478][T12483] ? __pfx_kthread+0x10/0x10 [ 1473.943485][T12483] ret_from_fork_asm+0x1a/0x30 [ 1473.948249][T12483] [ 1473.952671][T12483] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1473.959952][T12483] CPU: 1 UID: 0 PID: 12483 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1473.971083][T12483] Tainted: [L]=SOFTLOCKUP [ 1473.975416][T12483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1473.985468][T12483] Workqueue: hci1 hci_conn_timeout [ 1473.990576][T12483] Call Trace: [ 1473.993844][T12483] [ 1473.996765][T12483] dump_stack_lvl+0x100/0x190 [ 1474.001450][T12483] vpanic+0x552/0x970 [ 1474.005422][T12483] ? __pfx_vpanic+0x10/0x10 [ 1474.009920][T12483] panic+0xd1/0xe0 [ 1474.013620][T12483] ? __pfx_panic+0x10/0x10 [ 1474.018043][T12483] ? check_panic_on_warn+0x1f/0x90 [ 1474.023181][T12483] check_panic_on_warn.cold+0x19/0x34 [ 1474.028557][T12483] ? hci_conn_timeout+0x16a/0x230 [ 1474.033565][T12483] __warn.cold+0x191/0x348 [ 1474.037969][T12483] __report_bug+0x296/0x3d0 [ 1474.042448][T12483] ? hci_conn_timeout+0x16a/0x230 [ 1474.047459][T12483] ? __pfx___report_bug+0x10/0x10 [ 1474.052470][T12483] ? look_up_lock_class+0x55/0x120 [ 1474.057569][T12483] ? register_lock_class+0x40/0x560 [ 1474.062765][T12483] ? do_raw_spin_lock+0x128/0x260 [ 1474.067781][T12483] ? hci_conn_timeout+0x16a/0x230 [ 1474.072810][T12483] report_bug+0xb2/0x220 [ 1474.077045][T12483] ? hci_conn_timeout+0x16a/0x230 [ 1474.082059][T12483] handle_bug+0x166/0x2a0 [ 1474.086389][T12483] exc_invalid_op+0x17/0x50 [ 1474.090884][T12483] asm_exc_invalid_op+0x1a/0x20 [ 1474.095727][T12483] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 1474.101359][T12483] Code: 44 0f b6 2d 73 d9 4d 06 31 ff 41 83 e5 40 44 89 ee e8 fa 61 81 f7 45 84 ed 0f 84 02 ff ff ff e9 36 75 ea f6 e8 97 67 81 f7 90 <0f> 0b 90 e8 8e 67 81 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 1474.120952][T12483] RSP: 0018:ffffc900056c7c18 EFLAGS: 00010293 [ 1474.127021][T12483] RAX: 0000000000000000 RBX: ffff888077a50a40 RCX: ffffffff8a87362f [ 1474.135000][T12483] RDX: ffff88805a844900 RSI: ffffffff8a873729 RDI: ffff88805a844900 [ 1474.142975][T12483] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1474.150928][T12483] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888077a50000 [ 1474.158878][T12483] R13: ffff88805a844d84 R14: ffffffff90d9b804 R15: 0000000000000000 [ 1474.166832][T12483] ? hci_conn_timeout+0x6f/0x230 [ 1474.171772][T12483] ? hci_conn_timeout+0x169/0x230 [ 1474.176795][T12483] ? hci_conn_timeout+0x169/0x230 [ 1474.181826][T12483] process_one_work+0x9d7/0x1920 [ 1474.186801][T12483] ? __pfx_process_one_work+0x10/0x10 [ 1474.192204][T12483] ? __pfx_hci_conn_timeout+0x10/0x10 [ 1474.197590][T12483] worker_thread+0x5da/0xe40 [ 1474.202194][T12483] ? __pfx_worker_thread+0x10/0x10 [ 1474.207312][T12483] ? kthread+0x13a/0x450 [ 1474.211536][T12483] ? __pfx_worker_thread+0x10/0x10 [ 1474.216651][T12483] kthread+0x370/0x450 [ 1474.220714][T12483] ? __pfx_kthread+0x10/0x10 [ 1474.225288][T12483] ret_from_fork+0x754/0xd80 [ 1474.229876][T12483] ? __pfx_ret_from_fork+0x10/0x10 [ 1474.234983][T12483] ? __switch_to+0x7b4/0x1120 [ 1474.239648][T12483] ? __pfx_kthread+0x10/0x10 [ 1474.244224][T12483] ret_from_fork_asm+0x1a/0x30 [ 1474.248982][T12483] [ 1474.252349][T12483] Kernel Offset: disabled [ 1474.256655][T12483] Rebooting in 86400 seconds..