last executing test programs:

2m20.967549367s ago: executing program 2 (id=337):
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r5, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc)
syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x64, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x1000}], 0x1, 0x0, 0x0, 0x0)
syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x800, 0x3, 0x800000c5}, &(0x7f0000000580), 0x0, 0x0)
r7 = socket(0x11, 0x2, 0x0)
bind$packet(r7, &(0x7f0000000500)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005618000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)

2m17.107123203s ago: executing program 2 (id=357):
sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="0f114228131708d4a6b535069b7dac46350e10c264f611ef9c93743ca3b69304709d4a00908369c78984abba0096", 0x2e}], 0x1}, 0x4001)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0"], 0x50)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000004000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000de00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
time(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)={0x0, <r4=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, r4, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000009c0)={<r6=>0x0, @in={{0x2, 0x4e20, @empty}}, [0x7, 0x8000000000000001, 0x7, 0xb, 0x0, 0x8, 0x80000000, 0x6, 0x2, 0xc8, 0xfffffffeffffffff, 0x100000001, 0xd7f, 0x3, 0x61]}, &(0x7f0000000ac0)=0x100)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000b00)={r6, 0x7, 0x8000}, 0x8)
read$msr(r5, &(0x7f0000000f00)=""/102400, 0x19000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000)="573458ded72ba68ebb5a4b46bf212904ba4a3eaaedd957ed7b1baaee0d06bf473a802861072b9c3cd6a54f6cf7e0ade48bd954dee980", 0x10f0, r0}, 0x38)

2m15.776358651s ago: executing program 2 (id=360):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000280)='>', 0xfffffffffffffe5b}, {&(0x7f0000000800)="083916227964388bb632dc3416bc"}], 0x1}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000280)={0xf0f022})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0)
write$rfkill(r4, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8)
landlock_restrict_self(0xffffffffffffffff, 0xc)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000680)={'NETMAP\x00'}, &(0x7f0000000780)=0x1e)
r5 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x20980)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3008, 0x804, 0xfffffffe, 0x100000, 0x8, 0x1})
r6 = openat$ttyprintk(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$TIOCSETD(r6, 0x5423, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000540)={'erspan0\x00', <r8=>0x0, 0x20, 0x80, 0x2, 0x7, {{0x33, 0x4, 0x1, 0x32, 0xcc, 0x64, 0x0, 0x7, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp_prespec={0x44, 0x34, 0x7d, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x7}, {@empty}, {@multicast2, 0x7}, {@remote, 0x80000001}, {@rand_addr=0x64010101, 0x7fffffff}, {@empty, 0x5}]}, @timestamp={0x44, 0x10, 0x53, 0x0, 0x3, [0x8, 0x100, 0x2]}, @timestamp={0x44, 0x8, 0x58, 0x0, 0x7, [0xff]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0xc4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @private=0xa010100, @local, @dev={0xac, 0x14, 0x14, 0x17}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xac, 0x3, 0x1, [{@loopback}, {@broadcast, 0x8}, {@local, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb7ac}]}, @ssrr={0x89, 0x17, 0x2d, [@remote, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1]}]}}}}})
sendmsg$inet(r1, &(0x7f0000000840)={&(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f00000001c0)="b812d269678d5f9d134e138989abfc5a27c02073d94135e525a1adf550aa544820cfb03b0f634747c28ff92451d4", 0x2e}, {&(0x7f00000002c0)="92a8e72d081932e47afb7fef6cc908e956f03a9815f9b90e33d2567df08425052fe0a76583f4234a0bdd7346b9aaef3d8e7ec2dc67f6d8d6c17aa76e68b00626e949", 0x42}, {&(0x7f0000000340)="61ee3ce93c1558011d1b451180276b76ccc542005906adb08ae47eb7d4dddc2fb20db602c2ec0f7ef0563b045afab8d3d805a79d9aa7b91526d7d731c5afc1d1", 0x40}, {&(0x7f0000000380)="821b13e93e3c0ffc5d5a2b792547ed9863f99b935453ced6", 0x18}, {&(0x7f00000003c0)="c74fea2661fbcc72fa3e1da71f4463ba3f9890eace2545e69d431f9547e7e277261e479c99b765f65bb623c2baa918f1fbd947541162702f05fe46b79c698fa573d5f8a0ff07218c96b0483c86b899ae395cab5a462dfd34b9bb437d642ce08b730f2c4d51d3abac06d1b851a086206d2dc2c6a58bb15266c8", 0x79}], 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="100000000000000001000000040000000d0000000000000001000000170000001000000000000000020000009c0f0000100000000000000001000000120b0000180000000000000008000000", @ANYRES32=r8], 0xb0}, 0x4091)
ioctl$TCFLSH(r3, 0x400455c8, 0x4)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x1, 0x0)
request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='keyring\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file1\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0xc0089364, &(0x7f0000000080))
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000980)={0x2, @win={{0x4, 0x7, 0x2, 0x40}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}})
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003c3b6f640fd0b12019e9d010203010902240001040b10b40904"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0})
eventfd(0x6119)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000240))

2m11.962513693s ago: executing program 2 (id=379):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004080, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766644dd59f", @ANYRESHEX=r0, @ANYBLOB=',\x00'])
r2 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000000040)=0x3c00, 0x4)
r4 = syz_pidfd_open(r2, 0x0)
ioctl$EXT4_IOC_MIGRATE(r4, 0xff05)

2m11.302833524s ago: executing program 2 (id=381):
syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x100, 0x2001, 0x80, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @opaque="87b7ff00000000000000000003000000"}}}}}, 0x0)

2m7.783962476s ago: executing program 2 (id=392):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (rerun: 64)
pivot_root(&(0x7f0000000200)='./file2\x00', &(0x7f0000000240)='./file1\x00') (async)
recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffe5}, 0x0) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x11622}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r3) (async)
stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x2200003, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '\x00\x00,\xa0\x00Z\xfd\xbb\xcbP\x99U~<Ax\xd0\xa8\x83h\r<C\xbdL\v\xaf\x1e\xaeg\xf9\x7fqQ5\xc6\x96,G\'\xca\xd8Q\x8dty\xfa\x87\xbf\x12\xe7\x1d\xc1|\x95\x02JS\xd51M\xf2\xec^9\x18{\x94I\xd3bc\xaf\xc2<\f\x04f<\xfc4\'\xdc\xfe\xc7\xcc\x0e\xd1\x04;f,\xc3\x16\xcdT\x10\'\x96N0\xe7\xb6p\xb6\x1f0bu\x892/\x9d\x1c\xe8L!\xd7\xde\x12\xb8\xfd6Z\xcc\x82\xa7\x93~\xf1el\x1eE\xe5\x9b\xf3}\xcf9v\x8d\xe4*\xf0+w\xc5?+\nj\xd3\f\x91\x8b`Wd\xfeJ4x\xea\xfa\xa9'}}, {@posixacl}], [{@uid_gt={'uid>', r6}}, {@permit_directio}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '-,-v]/$.'}}, {@uid_eq={'uid', 0x3d, r6}}]}}) (async)
sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000001"], 0x20}, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x5b5c, 0x4000, 0x3, 0x39d}, 0x0, 0x4, 0x0, 0x0)
r7 = io_uring_setup(0x3eac, &(0x7f0000000080)={0x0, 0x4dc2, 0x40, 0x0, 0x2ca})
r8 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r8, 0x3a, 0x3c, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async)
setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000000000)=0x5, 0x4)
close(r0)

2m7.330979528s ago: executing program 32 (id=392):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (rerun: 64)
pivot_root(&(0x7f0000000200)='./file2\x00', &(0x7f0000000240)='./file1\x00') (async)
recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffe5}, 0x0) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x11622}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r3) (async)
stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x2200003, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '\x00\x00,\xa0\x00Z\xfd\xbb\xcbP\x99U~<Ax\xd0\xa8\x83h\r<C\xbdL\v\xaf\x1e\xaeg\xf9\x7fqQ5\xc6\x96,G\'\xca\xd8Q\x8dty\xfa\x87\xbf\x12\xe7\x1d\xc1|\x95\x02JS\xd51M\xf2\xec^9\x18{\x94I\xd3bc\xaf\xc2<\f\x04f<\xfc4\'\xdc\xfe\xc7\xcc\x0e\xd1\x04;f,\xc3\x16\xcdT\x10\'\x96N0\xe7\xb6p\xb6\x1f0bu\x892/\x9d\x1c\xe8L!\xd7\xde\x12\xb8\xfd6Z\xcc\x82\xa7\x93~\xf1el\x1eE\xe5\x9b\xf3}\xcf9v\x8d\xe4*\xf0+w\xc5?+\nj\xd3\f\x91\x8b`Wd\xfeJ4x\xea\xfa\xa9'}}, {@posixacl}], [{@uid_gt={'uid>', r6}}, {@permit_directio}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '-,-v]/$.'}}, {@uid_eq={'uid', 0x3d, r6}}]}}) (async)
sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000001"], 0x20}, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x5b5c, 0x4000, 0x3, 0x39d}, 0x0, 0x4, 0x0, 0x0)
r7 = io_uring_setup(0x3eac, &(0x7f0000000080)={0x0, 0x4dc2, 0x40, 0x0, 0x2ca})
r8 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r8, 0x3a, 0x3c, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async)
setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000000000)=0x5, 0x4)
close(r0)

13.492585422s ago: executing program 3 (id=743):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000093293defcd6f0008003d1ef6fc16ccdc573377c4148e9bfb285ed717c8b84ea315be9d3c885e718fd1e5df130c430f3df362d7c1f030af82d23bd5eb559910790cc614a5dd321aeac83df927b1418b089b6d6c2f512b07"], 0x28}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x800000da, 0x5, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x200)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8814)
mount(0x0, 0x0, 0x0, 0x8, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r6, &(0x7f0000006e80)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x29, 0x4, 0x840120, 0x7, 0x909b, 0x40057, 0x1, 0x0, 0x0, 0x2, 0x8}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0)

13.35877762s ago: executing program 4 (id=745):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x3, 0x3e, 0x9, 0x4, 0x8080]}, &(0x7f00000000c0)=0x54)

12.040169544s ago: executing program 0 (id=747):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x8000, 0x46, 0x3e}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = userfaultfd(0x80000)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1b5})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
mprotect(&(0x7f00006bb000/0x2000)=nil, 0x2000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000700)={0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0xffc000, 0x6, [0x3, 0x4, 0x4, 0x0]}})
sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)

11.283739488s ago: executing program 4 (id=749):
syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
pipe2$watch_queue(0x0, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x4)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x37, [0x40001, 0xc95a, 0xfffffff3, 0x9, 0x4, 0x7, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x40000, 0x9, 0x5, 0x0, 0x2af, 0x4, 0x7, 0x4, 0x3c5b, 0x7, 0xd, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x80000001, 0x8, 0xe, 0x0, 0x1074, 0x5, 0x10001, 0x5, 0x0, 0xfff, 0x6, 0x8f, 0x8000006, 0x6, 0x80003, 0x6, 0x4, 0x3, 0x20000000, 0x1, 0x0, 0x7, 0x6, 0x9, 0x6, 0x1, 0x40], [0x10000007, 0x7ff, 0x7, 0x9, 0xd, 0x4, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffb, 0xfffffffc, 0x80, 0x800000, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xffff, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x3, 0x5, 0x6c4, 0x4, 0x8009, 0x8, 0x809, 0x1006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x10000006, 0x7c, 0x9, 0xfffffffe, 0x3, 0x9, 0xffffffff, 0x10007, 0x3, 0x9, 0x48c93690, 0x42, 0xc400], [0x6, 0x6, 0x80000001, 0x2, 0x102, 0x100, 0x10008d0, 0x9, 0x5, 0x7ff7, 0x0, 0x1ff, 0xb, 0x4, 0x5, 0x1005, 0x5, 0x4, 0x3, 0x2, 0x86, 0x1, 0xc, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x7fd, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800104, 0x2b6, 0x80, 0xc, 0xcc52, 0x950bfaf, 0x2001000, 0xfffffff6, 0x7, 0x80, 0xfffffff9, 0x6, 0x4, 0xbf, 0x10002, 0x403, 0x13, 0xffffffff, 0x0, 0x1, 0xfffffff0, 0x10, 0x400006, 0x1c, 0x120000, 0xffff, 0x6, 0xaaef, 0xfffffffd, 0xff], [0x9, 0xbb33, 0x3, 0xb, 0x7, 0x7f, 0x6, 0x205, 0x0, 0x3, 0x75e2, 0x1ff, 0x0, 0x7, 0x4, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe623, 0xfffffffd, 0x5, 0x7fff, 0x2, 0x14c, 0x60a5, 0x1, 0x4, 0x7ff, 0x80000000, 0x7, 0x8, 0x10, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x1007d, 0x26, 0x55a4, 0x30b1d693, 0x5a2b, 0x7f, 0x7, 0x1, 0x6c1b, 0xfffffffe, 0x4, 0x5, 0xb18, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, &(0x7f0000000880)=[{}, {{}, {<r0=>0x80000000}}]})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)="d79962e9c40172675b635e2d26d253dc4915347e77a85acf6b566f727f9de2c978f99d025ae135dea86d41714e0de20b377de2bf83559f840696af0976a65dbf2af825a177136ad4a5622af8a79a06a9c035865ffcb8cae8d00c0c24d26541368689396453ce13916abb6d9b26451a7d8103", 0x72, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b05, &(0x7f0000000000)={'wlan1\x00'})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r5, 0x0, r4})
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
pread64(r6, &(0x7f0000000040)=""/107, 0x6b, 0xab7f)
ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000240)={r0})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x382, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r8, 0x400455c8, 0x1000000000)
ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000400)={0x1, 0x6, ' \x00', 0x7, 0x6})

11.270679013s ago: executing program 1 (id=750):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe030001000000000800040001000000060015000700000028001680080001000200000014000c00fe8000000000000000000000000000010800070001"], 0x54}}, 0x0)

10.730755522s ago: executing program 1 (id=751):
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)

9.872077635s ago: executing program 4 (id=752):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x2, 0x0, 0x7, 0x1a, 0xaa, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c0001800600060065580000203302801c33118004"], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000)
write(r2, &(0x7f0000000440)="bb245f34e2bf5a720e36ca51bddbd51a0b2926f1fe225c8b56f17a3c87e262e9e0f9e0f6c66d88d6c90695c6c5cd45e515196ab4511ece245d07dd0c86ae912a2b294fcc4adf839540da537313fcc3d29074d8d964425a814905aa8422366431efad7c2a1e8832890361e8ab2ce807289949aac2790264ca6f514f332cb27e773385443aaa90fae4d79c153f255eb97c00ef96d5769a5f91ea0b89c5e3df1fc39c89946945ef580381e0661ef9cd4c486a", 0xb1)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002b00)=ANY=[@ANYBLOB="1c000000ce87ce38c784f8670e8bd5b36ca5d60104010200000000000000000d000005050001007c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x24004000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002800)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="1102230100003402000006000000", @ANYRES32=0x0, @ANYBLOB="0800030000000000"], 0x24}}, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c)
read(r6, &(0x7f0000001680)=""/4096, 0x1000)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r8, 0x8010aebc, &(0x7f0000000040)={0x40000, 0x102000})
syz_emit_ethernet(0x3e, &(0x7f0000001640)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a1b8100000000000000ff020000000081000000000000080001040000000008907800"/62], 0x0)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000100)={@local})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3041969534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb75e83eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038433b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02de325f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f62cfb5800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"})
writev(r6, &(0x7f00000027c0)=[{&(0x7f0000002680)="9574f65a074297a18e66fe7e75ef5716a0742da75b8e33d0ffb37b168c3149333c9705c3f7e0e5ea5c45655c735c00ae6b9cab909d112595d23ea2de4bf68e37e72859ebdd8285b0ac4003586b9cb875fe141dc9ce30610eb230be339e17037ed07d7da6d0a45a7b1e0a734324a2c7842b3238ee073d2e6957b2b3acbdb7c5d2ea069c713a1fc2b0abd2f5ffe88fb8ea445de9c16b", 0x95}, {&(0x7f0000002740)="d8d42e52ccf08fad4bb6c3d8dd7cf061e4e510310b3cb08339288e6a48ea7c98a52ff153d55768dae063d81d7b6c98ae3211de90ed43", 0x36}], 0x2)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc)
r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r11, 0x4c02, &(0x7f0000002a40)={0x0, {}, 0x0, {}, 0xc, 0x12, 0x1e, 0x29, "5bd40707fe3b393718a38434cb5ddc79e851ac3beb91829dc4b510b0d17b32b483660e06547432333f9b185f293dd90beaa3baea5bccab15e2349cfa044e7de7", "834ad6cadcbdc529a4cd3e6a8bd92b236991092a337efb817be9782e3058ca8d", [0x6, 0x1]})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r9, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe372, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x91ce, 0x4f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})

9.031734651s ago: executing program 1 (id=753):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0xfff0}, 0x20040084)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x14b400, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4894}, 0x42)
close(r4)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)='\x00', 0x14}], 0x1}, 0x2000600d)

8.846397946s ago: executing program 3 (id=754):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x8000, 0x46, 0x3e}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
mprotect(&(0x7f00006bb000/0x2000)=nil, 0x2000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f0000000700)={0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c00018006000600800a000018010280140117"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0)

7.875710328s ago: executing program 3 (id=756):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2000000, 0x2}]}, @func={0x2, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x3c, 0x0, 0x1, 0x0, 0x0, @void, @value=0x13}, 0x28)

7.690597284s ago: executing program 5 (id=757):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x5, 0xffffffff, 0xffff, 0x6, 0x7})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x35}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7adb971ef3"}]}, 0x4c}}, 0x200008d0) (async)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x35}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7adb971ef3"}]}, 0x4c}}, 0x200008d0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)

6.831228876s ago: executing program 0 (id=758):
mkdir(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000100)={0x5, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r5 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0xa0701, 0x0)
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2})
ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0xffe, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f0000000040)}, 0x6})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0)

6.232071756s ago: executing program 3 (id=759):
syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c00fe8000000000000000000000000000bbfe8000"/50], 0x0)
syz_emit_ethernet(0x23e, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232502082c00fe8000000000000100000000000000bbfe8000000000000000000000000000aa89000001"], 0x0)

6.163052802s ago: executing program 3 (id=760):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c0000060001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c3258e6248ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000100)={{@local, 0xfffffff7}, @my=0x1, 0xa, 0x1, 0xffffffffffffffff, 0x8000000000000001, 0x80, 0x5})
ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7})
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0)

4.872310763s ago: executing program 0 (id=761):
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000))
syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r3)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, r3)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x4)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28b38100", @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf250900000008000100010000000c0006000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002004e207f0000020000000000000000"], 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000280)={&(0x7f0000000a80)={0x78, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "00172233f60ad0b992422bc1ccddeeff13596dbe548e3414b3da8002d1d36b2c9fcfea65"}}]}]}, 0x78}}, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004180)='smaps_rollup\x00')
read$FUSE(r7, &(0x7f00000041c0)={0x2020}, 0x2024)
ioctl$TIOCL_SCROLLCONSOLE(r7, 0x541c, &(0x7f0000000300)={0xd, 0xb886})
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000325bd7000fcdbdf25100000001400038008000100531b00884cbbb30001000000"], 0x28}, 0x1, 0x0, 0x0, 0x828}, 0x8800)
close_range(r0, r2, 0x0)

4.238430221s ago: executing program 4 (id=762):
mkdir(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000100)={0x5, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r5 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0xa0701, 0x0)
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2})
ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0xffe, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f0000000040)}, 0x6})
ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000780)={0x5, [[0x4, 0x10001, 0x400007, 0x4, 0x1ff, 0xffff, 0x402, 0x8000], [0x7f, 0x800, 0x3, 0x75, 0x0, 0x4, 0x62e2, 0x80], [0x401, 0x8, 0x1d6, 0x1, 0x0, 0x10000, 0x6c2, 0x5]], '\x00', [{0x4, 0x7fffffff, 0x1, 0x1}, {0xbbade33f, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x101, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0xfffffffa, 0x1, 0x1, 0x1}, {0x0, 0x3}, {0x1, 0x5, 0x1, 0x0, 0x1}, {0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xc1, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x9e98, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x10001, 0x6, 0x1, 0x1}, {0xc, 0x7, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x3e800000})

3.84868259s ago: executing program 1 (id=763):
r0 = eventfd2(0x0, 0x0)
io_setup(0x81, &(0x7f00000000c0)=<r1=>0x0)
read$eventfd(r0, &(0x7f0000000000), 0x8)
r2 = socket$netlink(0x10, 0x3, 0xf)
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, r2, 0x0, 0x0, 0xfffffdfe, 0x0, 0x1, r0}])

3.848126446s ago: executing program 5 (id=764):
r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0)
syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00')
r1 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x3)
fcntl$addseals(r1, 0x409, 0x4)
fallocate(r1, 0x0, 0x800657, 0x40000b7)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdir(&(0x7f0000000240)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x42, 0xc9, "8ead4b88484d4c53"}}}, 0xe)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000004000)={'syztnl2\x00', 0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
read(r2, 0x0, 0x0)
getdents64(r2, &(0x7f0000000000)=""/188, 0xbc)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04004100000010"])

3.298860737s ago: executing program 4 (id=765):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025003f00190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f931", 0x38}], 0x1)

2.89901471s ago: executing program 0 (id=766):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYRES8=r1, @ANYRES64=0x0, @ANYBLOB="aa93b9dc2a2d763a1f0dd66fafd085f83be2df379358a0f9b4089e223d89d5746751761caf3ecc84ced4c97ba43673705b38da67351595a8e990aea3ef9fbc3681deaeb4a41ed3c87d283a09a5516858eb5a3b0eefc2272a0cca0990de2c45e2cd610baa4c2af4cfc0e6fe71eb02d501df8f9e85e819d426eefe25dd0e1bbc97688cb0155d214fcf85a01ef3b3606442f56ed760ac3d179ad66599c24456f818be20471ac00c449f55077649096df8"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6)
ftruncate(r3, 0x2000000)
r4 = getpgrp(0x0)
capset(&(0x7f00000000c0)={0x20071026, r4}, &(0x7f0000000040)={0x8, 0x10ffff, 0xfffffefd, 0x800, 0x0, 0x7ff})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)
sched_setattr(r4, &(0x7f0000000100)={0x38, 0x3, 0x22, 0x3, 0x7, 0x7, 0x4, 0x5, 0x2, 0x6}, 0x0)
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x1f, 0x0, 0x1000000})

2.830985261s ago: executing program 4 (id=767):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_open_dev$loop(&(0x7f0000000400), 0x3, 0xc0802)
syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0)
ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f0000000700)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @broadcast, @broadcast, @from_mac=@broadcast, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
syz_usb_connect$hid(0xa1c7a9bee845ee69, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x4d8, 0x0, 0x0, 0x0, 0xff, 0x1e71, 0x2020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xf0, 0xe, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x94}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xdc, 0x77}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xff, 0xa, 0x9}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x7, 0x7f, 0x0, 0x40, 0x8}, 0x19, &(0x7f0000000540)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "8c789a31d2e03d43958d85b53ba2255f"}]}, 0x3, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x6048}}, {0xf, &(0x7f0000000600)=@string={0xf, 0x3, "4cdb968f8530a32166cca17e34"}}]})
syz_open_dev$swradio(0x0, 0x1, 0x2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x7}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x0, 0x2, 0xfff9, 0x2})

2.757345304s ago: executing program 1 (id=768):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029000000070000001c0000000000000000000000080000ff", @ANYRES32=r2], 0x30}}], 0x1, 0xc0)

2.648691193s ago: executing program 0 (id=769):
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000dc0)={&(0x7f0000000080), 0xc, &(0x7f0000000d80)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x4d4}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000004)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000200)={0x9d0000, 0x400, 0x322d, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9a091c, 0x2, '\x00', @string=0x0}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x1}, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000100)=0x42)
dup2(r3, r4)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x480a4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101900, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fc, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x4b77, &(0x7f0000000040)={0x0, 0x66ad, 0xc000, 0x1, 0x800000bf})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.367411272s ago: executing program 5 (id=770):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x500, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x4d, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0xfe, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)

1.570392333s ago: executing program 1 (id=771):
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240))
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
mount(0x0, &(0x7f0000000000)='./proc\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000cc0)={0x0, 0xfb, 0x3f4, 0x2, 0x8, "de47b8ff9d6748d0cfe067ceecce19a1", "e77cea838f4d9195d502fe050ff6605669d6842b3a7aef92e027d0453e1988ccacd5ba002aca94aa808af5cb373490bb10c8fa90171c08da573a9cca85a0b80705fef230286f98f73ed4e7077b50abb79fb4100455e18848eac17d76e553985400302bac2c326fb79951b48423c8909c0a7d172b398ca2aa26e3b1d68cb540a447c833e8f96d7de6f80db6cbedd4106deb1c76f8f7e2e88745582f9775328d376d394bc4965264f6e3019684b847e28a0f5203d1a60c7ca5ac32049d7de58a4044f3219d6d0012b648271939e53d9a12b41134c5117b8d2b06a2553e79c954bd08d07453998ca1825566732ad06c6a2bf331a6ec79c62e0ee9992583e485f2a677aaf8fdc87884c717bd4c2e5ffc721228ef75e65c39f63db9b78cf767ea57aea0226be630dc3e0c8ef614240a599ab6cc911562b027b7f20603603ec99a8097dfd43ca1ad44a7e89e1683f7162b738fbbb7b8b14739e974d6b689b18a76748d9d812d77aa09bae974fcd6dde55074a39036a4df8596cab7187310aab101fe818276a9fa831e3adcdd91c90e710e8a6ab5369a8bf021d7c26340463b98f132d3d7a913c85125a2bf0e606667214aad84b3edac14e2a21ac7c6f8d2155904b32a92aa379228c8cbd52e9b97f577158e383950e76811ae48c088a31a36c67a1147d84a1ce0dff9ad71e97786e399544a08595b00af374f673883e39c5466e4417e85134854835deb9cafcfef92e68107bf98bd97d5e15193b5cbf0e806688559e58df6f5fa663cbb0f5b94976f3d6355fe2023b1458c5fb1cb72fe8c7a5a476eb251879b20add33df597ae1e488f5e3b6c3f89b28459ace10f316fe6635ee41741a95c35bd99c4236d0424481f878c757a9d94e184e1808ee623efec69bd0d20b9e2aabf71b7805f07bbd10a1f2b3bf6cab9b706650a4b18cbf4fa9aa365abab55ef56efa291ef1407ead2d93d796cd93a4e2754ca680636a615efe8ae51e3c7246a0686001513cdc7f4f9678aaeaab9384d5a3ad49ca5dff70fba3e411c5bc764c4ef908cb0d9e231b9f620012ed430dc34ac4214c3c781f3c9180ffb15268cb741a41f97019c454b3a1967559c486f51d089e4ee60000398ceb36c6c7871c14cb2ba5b05d6f308dcdde42acd4403970ef7c1bb0675f367c2b1b1d2103892215dcf95774ad22de20732e5285de7c47362e4f87414e6dce2278fbd3202cd8104b21637877bfcde73f9cd7e9d4560d1f740311e4291f68f02dd25901caf0adf3b169d097b12601f8d1cdc3814f6c357c3ec4af80c6f986f72650a1c10d4b9abd3d69ef558b3aab234b7e177f1b0cfd93a660ca70737db7b63ebbe738463b4eefa76bc7c9ffed422efaaa3ebcdceffc586575a0ee60b97dfcbe63a05a4198cad2c"}, 0x3f4, 0x0)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r4, 0xc138fd03, &(0x7f0000001000)="04000000320000000000000038010000")
ioctl(r4, 0xc138fd01, &(0x7f0000002000)="0400000032000000000000006c01")
openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)

1.555392043s ago: executing program 0 (id=772):
mkdir(&(0x7f0000000640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12)
chdir(&(0x7f0000001640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) (async)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="04000000ffffffffffffa2aaaaaaaaaa86dd60b79a56004c29"], 0x86) (async)
r2 = syz_usb_connect$hid(0x0, 0xffffffffffffff04, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150095ff0904a1"], 0x0}, 0x0)

1.484396748s ago: executing program 5 (id=773):
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x8010, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, r1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000340)={0x0, 0xffff, 0x0, 0x0, <r3=>0xffffffffffffffff})
prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000010640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0)
r5 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000940))
ioctl$BTRFS_IOC_SEND(r1, 0x7b9, 0x0)

1.30820236s ago: executing program 5 (id=774):
mkdir(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000100)={0x5, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r5 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0xa0701, 0x0)
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2})
ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0xffe, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f0000000040)}, 0x6})
ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000780)={0x5, [[0x4, 0x10001, 0x400007, 0x4, 0x1ff, 0xffff, 0x402, 0x8000], [0x7f, 0x800, 0x3, 0x75, 0x0, 0x4, 0x62e2, 0x80], [0x401, 0x8, 0x1d6, 0x1, 0x0, 0x10000, 0x6c2, 0x5]], '\x00', [{0x4, 0x7fffffff, 0x1, 0x1}, {0xbbade33f, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x101, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0xfffffffa, 0x1, 0x1, 0x1}, {0x0, 0x3}, {0x1, 0x5, 0x1, 0x0, 0x1}, {0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xc1, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x9e98, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x10001, 0x6, 0x1, 0x1}, {0xc, 0x7, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x3e800000})

314.83756ms ago: executing program 5 (id=775):
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)

0s ago: executing program 3 (id=776):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x8000, 0x46, 0x3e}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
mprotect(&(0x7f00006bb000/0x2000)=nil, 0x2000, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000700)={0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_cmd={0x2, 0x7ff, 0x8, 0x6, 0x5, 0x7, 0xb, 0x5, 0x3, 0x4, 0x3, 0x2, 0x2, 0xff, 0x7f, 0x8, [0x4, 0x3]}})
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
socket$kcm(0x29, 0x2, 0x0)
getsockname$packet(r5, 0x0, &(0x7f0000000200))

kernel console output (not intermixed with test programs):

][ T6785]  dump_stack_lvl+0x100/0x190
[  176.148316][ T6785]  should_fail_ex.cold+0x5/0xa
[  176.148340][ T6785]  _copy_from_user+0x2e/0xd0
[  176.148358][ T6785]  restore_altstack+0x98/0x170
[  176.148378][ T6785]  ? __pfx_restore_altstack+0x10/0x10
[  176.148401][ T6785]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.148426][ T6785]  ? lockdep_hardirqs_on+0x7d/0x110
[  176.148453][ T6785]  ? _raw_spin_unlock_irq+0x2e/0x50
[  176.148479][ T6785]  __do_sys_rt_sigreturn+0x1ab/0x2c0
[  176.148503][ T6785]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[  176.148533][ T6785]  do_syscall_64+0x123/0x790
[  176.148561][ T6785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.148579][ T6785] RIP: 0033:0x7fd10773f459
[  176.148594][ T6785] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25
[  176.148610][ T6785] RSP: 002b:00007fd1086d5300 EFLAGS: 00000206 ORIG_RAX: 000000000000000f
[  176.148626][ T6785] RAX: ffffffffffffffda RBX: 00007fd1086d66c0 RCX: 00007fd10773f459
[  176.148637][ T6785] RDX: 00007fd1086d5300 RSI: 00007fd1086d5430 RDI: 0000000000000021
[  176.148648][ T6785] RBP: 00007fd1086d6090 R08: 0000000000000000 R09: 0000000000000000
[  176.148658][ T6785] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
[  176.148668][ T6785] R13: 00007fd107a26128 R14: 00007fd107a26090 R15: 00007ffe7848dfb8
[  176.148692][ T6785]  </TASK>
[  176.521210][ T6792] fuse: Unknown parameter 'gid'
[  176.552597][ T4963] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  176.560963][ T5826] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  176.572568][ T6792] netlink: 'syz.0.296': attribute type 12 has an invalid length.
[  176.580374][ T6792] netlink: 'syz.0.296': attribute type 29 has an invalid length.
[  176.588106][ T6792] netlink: 148 bytes leftover after parsing attributes in process `syz.0.296'.
[  176.597113][ T6792] netlink: 59 bytes leftover after parsing attributes in process `syz.0.296'.
[  176.647677][ T5826] usb 4-1: device descriptor read/8, error -71
[  176.773549][ T5826] usb usb4-port1: unable to enumerate USB device
[  178.674947][ T6803] binder: 6802:6803 ioctl c00c6211 0 returned -14
[  179.801731][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  179.801749][   T30] audit: type=1400 audit(1787366642.392:419): avc:  denied  { write } for  pid=6808 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  180.430947][ T6814] netlink: 'syz.2.304': attribute type 4 has an invalid length.
[  180.658124][ T5603] Bluetooth: hci3: command 0x0406 tx timeout
[  180.664624][ T5615] Bluetooth: hci2: command 0x0406 tx timeout
[  180.672217][ T5606] Bluetooth: hci1: command 0x0406 tx timeout
[  181.324691][   T30] audit: type=1400 audit(1787366643.922:420): avc:  denied  { write } for  pid=6816 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  182.492760][ T5730] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  182.493464][ T4963] usb 2-1: device descriptor read/64, error -110
[  182.663207][ T5730] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  182.682753][   T30] audit: type=1400 audit(1787366645.232:421): avc:  denied  { create } for  pid=6824 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  182.752291][ T5730] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.782892][ T5730] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  182.802639][ T5730] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  182.826173][ T5730] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  182.857699][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.872620][ T5598] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  184.054253][ T5598] usb 4-1: Using ep0 maxpacket: 32
[  184.076740][ T5598] usb 4-1: unable to get BOS descriptor or descriptor too short
[  184.092587][ T5598] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  184.122198][  T189] usb 3-1: USB disconnect, device number 11
[  184.129196][ T5598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.162551][ T5598] usb 4-1: Product: syz
[  184.172769][ T5598] usb 4-1: Manufacturer: syz
[  184.184269][ T5598] usb 4-1: SerialNumber: syz
[  184.203531][ T6839] netlink: 'syz.0.311': attribute type 39 has an invalid length.
[  184.212325][ T5598] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  185.176295][ T5598] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  185.205642][ T5598] usb 4-1: disable ehci-hcd to run US-144
[  185.217415][ T5598] usb 4-1: disable ehci-hcd to run US-144
[  185.228688][ T5598] usb 4-1: disable ehci-hcd to run US-144
[  185.244074][ T5598] usb 4-1: USB disconnect, device number 15
[  185.279739][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  185.335132][ T5730] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  185.473584][ T5730] usb 5-1: device descriptor read/64, error -71
[  185.555470][ T5598] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  185.740412][ T6859] fuse: Unknown parameter 'gid'
[  186.039693][ T5730] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  186.163112][ T5598] usb 4-1: Using ep0 maxpacket: 32
[  186.769151][ T5598] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  186.806285][ T5598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.822567][ T5598] usb 4-1: Product: syz
[  186.834144][ T5598] usb 4-1: Manufacturer: syz
[  186.840068][ T5598] usb 4-1: SerialNumber: syz
[  186.853975][ T5598] usb 4-1: config 0 descriptor??
[  186.870322][ T5598] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  186.888165][ T5598] dvb-usb: bulk message failed: -22 (4/0)
[  186.894438][ T5598] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  186.906889][ T5598] dvb-usb: bulk message failed: -22 (5/0)
[  186.912672][ T5598] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  186.924065][ T5730] usb 5-1: device descriptor read/64, error -71
[  186.942374][ T5598] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  186.964520][ T5598] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  186.973518][ T5598] usb 4-1: media controller created
[  186.982756][   T30] audit: type=1400 audit(1787366649.572:422): avc:  denied  { create } for  pid=6866 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  186.991465][ T5598] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  187.056263][ T5730] usb usb5-port1: attempt power cycle
[  187.078543][ T5598] usb 4-1: selecting invalid altsetting 3
[  187.088531][   T30] audit: type=1400 audit(1787366649.652:423): avc:  denied  { setopt } for  pid=6866 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  187.093530][ T5598] ttusb2: set interface to alts=3 failed
[  187.176549][   T30] audit: type=1400 audit(1787366649.722:424): avc:  denied  { write } for  pid=6866 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  187.226890][ T6855] xfrm0: entered promiscuous mode
[  187.256335][ T6855] xfrm0: entered allmulticast mode
[  187.267134][ T5598] DVB: Unable to find symbol tda10086_attach()
[  187.272919][   T30] audit: type=1400 audit(1787366649.722:425): avc:  denied  { connect } for  pid=6866 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  187.306456][ T5598] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  187.346050][ T5598] dvb-usb: bulk message failed: -22 (4/0)
[  187.359496][ T6854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.376370][ T5598] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  187.391570][ T5598] dvb-usb: bulk message failed: -22 (5/0)
[  187.401354][ T5598] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  187.403797][ T6879] FAULT_INJECTION: forcing a failure.
[  187.403797][ T6879] name failslab, interval 1, probability 0, space 0, times 1
[  187.419639][ T5598] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  187.433051][ T5730] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  187.445062][ T5598] usb 4-1: USB disconnect, device number 16
[  187.465539][ T5730] usb 5-1: device descriptor read/8, error -71
[  187.488559][ T6879] CPU: 0 UID: 0 PID: 6879 Comm: syz.2.322 Not tainted syzkaller #0 PREEMPT(full) 
[  187.488583][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  187.488591][ T6879] Call Trace:
[  187.488596][ T6879]  <TASK>
[  187.488602][ T6879]  dump_stack_lvl+0x100/0x190
[  187.488628][ T6879]  should_fail_ex.cold+0x5/0xa
[  187.488648][ T6879]  should_failslab+0xc2/0x120
[  187.488670][ T6879]  kmem_cache_alloc_noprof+0x91/0x6a0
[  187.488690][ T6879]  ? trace_kmem_cache_alloc+0xdd/0x100
[  187.488713][ T6879]  ? security_file_alloc+0x34/0x2c0
[  187.488741][ T6879]  security_file_alloc+0x34/0x2c0
[  187.488763][ T6879]  init_file+0x95/0x480
[  187.488776][ T6879]  alloc_empty_file+0x79/0x1c0
[  187.488797][ T6879]  path_openat+0xdb/0x2440
[  187.488822][ T6879]  ? __pfx_path_openat+0x10/0x10
[  187.488848][ T6879]  do_file_open+0x20e/0x430
[  187.488871][ T6879]  ? __pfx_do_file_open+0x10/0x10
[  187.488905][ T6879]  ? _raw_spin_unlock+0x28/0x50
[  187.488924][ T6879]  ? alloc_fd+0x471/0x7a0
[  187.488950][ T6879]  do_sys_openat2+0x10f/0x1e0
[  187.488965][ T6879]  ? __pfx_do_sys_openat2+0x10/0x10
[  187.488978][ T6879]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  187.489001][ T6879]  ? __fget_files+0x21f/0x3d0
[  187.489027][ T6879]  __x64_sys_creat+0xcc/0x120
[  187.489042][ T6879]  ? __pfx___x64_sys_creat+0x10/0x10
[  187.489055][ T6879]  ? __pfx_ksys_write+0x10/0x10
[  187.489077][ T6879]  ? do_syscall_64+0xae/0x790
[  187.489099][ T6879]  do_syscall_64+0x123/0x790
[  187.489122][ T6879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.489137][ T6879] RIP: 0033:0x7f698ad9e0d9
[  187.489149][ T6879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.489162][ T6879] RSP: 002b:00007f698bd1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  187.489176][ T6879] RAX: ffffffffffffffda RBX: 00007f698b025fa0 RCX: 00007f698ad9e0d9
[  187.489186][ T6879] RDX: 0000000000000000 RSI: ecf86c37d53049cc RDI: 0000200000000280
[  187.489195][ T6879] RBP: 00007f698bd1d090 R08: 0000000000000000 R09: 0000000000000000
[  187.489204][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.489211][ T6879] R13: 00007f698b026038 R14: 00007f698b025fa0 R15: 00007ffe51fbef48
[  187.489230][ T6879]  </TASK>
[  187.739190][ T5598] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  187.772084][   T30] audit: type=1400 audit(1787366650.362:426): avc:  denied  { write } for  pid=6882 comm="syz.1.324" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  187.798668][   T30] audit: type=1400 audit(1787366650.392:427): avc:  denied  { setopt } for  pid=6882 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  187.800555][ T5730] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  188.706128][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  188.713295][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  188.943355][   T30] audit: type=1400 audit(1787366651.532:428): avc:  denied  { create } for  pid=6888 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  188.964535][ T5730] usb 5-1: device not accepting address 12, error -71
[  189.009093][ T5730] usb usb5-port1: unable to enumerate USB device
[  189.235578][   T30] audit: type=1400 audit(1787366651.832:429): avc:  denied  { read } for  pid=6889 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  189.311294][   T30] audit: type=1400 audit(1787366651.902:430): avc:  denied  { write } for  pid=6889 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  190.109451][ T6915] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800
[  190.248579][ T6919] netlink: 'syz.3.336': attribute type 12 has an invalid length.
[  190.263648][   T30] audit: type=1400 audit(1787366652.852:431): avc:  denied  { connect } for  pid=6918 comm="syz.3.336" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  190.684279][ T6932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.708705][ T6932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.710502][ T6931] netlink: 'syz.2.337': attribute type 4 has an invalid length.
[  190.724269][ T6932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.848224][ T6938] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  191.112730][ T5598] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  191.331373][ T6950] ip6gre1: entered promiscuous mode
[  191.342609][ T5598] usb 5-1: device descriptor read/64, error -71
[  191.352555][ T6950] ip6gre1: entered allmulticast mode
[  191.852572][ T5598] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  192.018367][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  192.018380][   T30] audit: type=1400 audit(1787366654.612:440): avc:  denied  { bind } for  pid=6954 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  192.101036][   T30] audit: type=1400 audit(1787366654.692:441): avc:  denied  { sqpoll } for  pid=6962 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  192.192588][ T5598] usb 5-1: device descriptor read/64, error -71
[  192.304287][ T5598] usb usb5-port1: attempt power cycle
[  192.412623][   T29] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  192.573405][   T29] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  192.583407][   T29] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  192.594809][   T29] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  192.606705][   T29] usb 2-1: config 0 interface 0 has no altsetting 0
[  192.615602][   T29] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  192.624074][   T29] usb 2-1: Product: syz
[  192.628319][   T29] usb 2-1: Manufacturer: syz
[  192.633950][   T29] usb 2-1: SerialNumber: syz
[  192.644760][   T29] usb 2-1: config 0 descriptor??
[  192.656954][   T29] usb 2-1: selecting invalid altsetting 0
[  192.662797][ T5598] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  192.695255][ T5598] usb 5-1: device descriptor read/8, error -71
[  192.786816][ T6973] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  192.897977][ T4963] usb 2-1: USB disconnect, device number 9
[  192.953695][ T5598] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  192.995763][ T5598] usb 5-1: device descriptor read/8, error -71
[  193.112947][ T5598] usb usb5-port1: unable to enumerate USB device
[  193.262573][ T5826] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  193.415599][ T5826] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e
[  194.302350][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.318485][ T5826] pwc: Logitech QuickCam Zoom USB webcam detected.
[  194.943321][ T6979] xt_l2tp: wrong L2TP version: 0
[  194.954529][ T6979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'.
[  195.671897][ T5826] pwc: Failed to set LED on/off time (-71)
[  195.710793][ T5826] pwc: send_video_command error -71
[  195.729046][ T5826] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  195.758700][ T5826] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71
[  195.797802][ T5826] usb 1-1: USB disconnect, device number 14
[  195.918473][ T7007] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  195.942926][ T7007] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  196.032955][ T7007] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  196.052572][ T7007] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  196.074686][ T7007] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  196.092691][ T7007] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  196.127876][ T7007] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  196.134931][ T7007] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  196.170081][   T30] audit: type=1400 audit(1787366658.762:442): avc:  denied  { write } for  pid=7004 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  196.206253][   T30] audit: type=1400 audit(1787366658.762:443): avc:  denied  { mount } for  pid=7004 comm="syz.2.360" name="/" dev="autofs" ino=15413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  196.417112][ T7029] fuse: Unknown parameter 'gid'
[  196.433695][ T5826] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  196.729921][ T5826] usb 3-1: unable to get BOS descriptor or descriptor too short
[  196.776672][ T5826] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e
[  196.826459][ T5826] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  196.877013][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'.
[  196.905353][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.929338][ T5826] usb 3-1: Product: syz
[  196.961030][ T5826] usb 3-1: Manufacturer: syz
[  197.016981][ T5826] usb 3-1: SerialNumber: syz
[  197.769822][   T30] audit: type=1400 audit(1787366660.362:444): avc:  denied  { create } for  pid=7038 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  197.802343][   T30] audit: type=1400 audit(1787366660.392:445): avc:  denied  { setopt } for  pid=7038 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  197.887590][ T7046] Cannot find del_set index 0 as target
[  197.970210][ T7050] netlink: 868 bytes leftover after parsing attributes in process `syz.0.372'.
[  198.029036][   T30] audit: type=1400 audit(1787366660.622:446): avc:  denied  { write } for  pid=7049 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  198.050606][ T7050] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  198.057696][ T7050] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  198.065856][ T7050] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  198.072225][ T7050] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  198.080196][ T7050] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  198.086605][ T7050] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  198.116417][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'.
[  198.126752][ T7055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.372'.
[  198.151534][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'.
[  198.160708][ T7050] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  198.167165][ T7050] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  198.180694][ T7055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.372'.
[  198.196130][ T7050] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  198.203684][ T7050] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  198.215375][ T7055] xt_hashlimit: max too large, truncated to 1048576
[  198.258166][ T4963] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  198.321839][ T7059] binder: 7058:7059 ioctl c00c6211 0 returned -14
[  198.512948][ T5730] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  198.686065][ T5730] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  198.707917][ T4963] usb 2-1: unable to get BOS descriptor or descriptor too short
[  198.770860][ T5730] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  198.877218][ T5730] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  198.995310][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.142218][ T7063] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  199.269309][ T7063] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  199.295464][ T5826] kvaser_usb 3-1:4.0: error -ENODEV: Cannot get usb endpoint(s)
[  199.548385][   T30] audit: type=1400 audit(1787366662.112:447): avc:  denied  { unmount } for  pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  199.641908][ T5730] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  199.903112][ T4963] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6
[  199.921663][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.927131][ T5826] usb 3-1: USB disconnect, device number 12
[  199.936547][ T4963] usb 2-1: config 12 has an invalid interface number: 99 but max is 0
[  199.946834][ T4963] usb 2-1: config 12 has no interface number 0
[  199.963409][ T4963] usb 2-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64
[  199.975839][ T4963] usb 2-1: config 12 interface 99 has no altsetting 0
[  199.985319][ T4963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.993626][ T4963] usb 2-1: Product: syz
[  199.997805][ T4963] usb 2-1: Manufacturer: syz
[  200.002402][ T4963] usb 2-1: SerialNumber: syz
[  200.020178][ T7072] 9pnet_fd: Insufficient options for proto=fd
[  200.028115][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.079416][   T30] audit: type=1400 audit(1787366662.672:448): avc:  denied  { setopt } for  pid=7071 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  200.149796][   T30] audit: type=1400 audit(1787366662.742:449): avc:  denied  { ioctl } for  pid=7060 comm="syz.4.376" path="socket:[15588]" dev="sockfs" ino=15588 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  200.224802][ T7052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.371'.
[  200.266479][ T5826] usb 5-1: USB disconnect, device number 17
[  200.307811][ T4963] usb 2-1: no audio or video endpoints found
[  200.540520][ T4963] usb 2-1: USB disconnect, device number 10
[  201.657987][   T30] audit: type=1400 audit(1787366664.252:450): avc:  denied  { read write } for  pid=7084 comm="syz.1.384" name="sg0" dev="devtmpfs" ino=802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  201.659235][ T7086] netlink: 68 bytes leftover after parsing attributes in process `syz.3.383'.
[  201.717659][   T30] audit: type=1400 audit(1787366664.252:451): avc:  denied  { open } for  pid=7084 comm="syz.1.384" path="/dev/sg0" dev="devtmpfs" ino=802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  202.502437][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'.
[  202.584668][ T3321] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.212014][ T7099] bond1: (slave bridge0): Device is not bonding slave
[  203.231583][ T7099] bond1: option active_slave: invalid value (bridge0)
[  203.248439][ T7099] bond1 (unregistering): Released all slaves
[  203.603908][ T5610] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  203.614721][ T5605] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  203.644105][ T7109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.390'.
[  203.738042][ T7112] net_ratelimit: 2 callbacks suppressed
[  203.738059][ T7112] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  203.829745][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.390'.
[  203.838834][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.390'.
[  203.862450][ T3321] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.138592][ T3321] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.455628][ T3321] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.568566][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  204.582430][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  204.591803][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  204.606013][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  204.616664][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  204.670923][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  204.679623][ T5605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  204.691306][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  204.708351][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  204.719596][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  205.228594][ T7130] netlink: 332 bytes leftover after parsing attributes in process `syz.4.397'.
[  205.346646][   T30] audit: type=1400 audit(1787366667.932:452): avc:  denied  { firmware_load } for  pid=7127 comm="syz.4.397" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  205.450507][ T3321] bridge_slave_1: left allmulticast mode
[  205.489630][ T3321] bridge_slave_1: left promiscuous mode
[  205.528352][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.605011][ T3321] bridge_slave_0: left allmulticast mode
[  205.631094][ T3321] bridge_slave_0: left promiscuous mode
[  205.643456][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.773179][ T7150] netlink: 'syz.1.399': attribute type 4 has an invalid length.
[  205.910175][ T7153] loop3: detected capacity change from 0 to 7
[  205.970478][ T7153] Dev loop3: unable to read RDB block 7
[  205.994586][ T7153]  loop3: unable to read partition table
[  206.030992][ T7153] loop3: partition table beyond EOD, truncated
[  206.042638][ T5826] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  206.087197][ T7153] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  206.229372][ T5826] usb 1-1: unable to get BOS descriptor or descriptor too short
[  206.261048][ T5826] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  206.304821][ T7128] syz.4.397 (7128) used greatest stack depth: 18992 bytes left
[  206.310024][ T5826] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.333724][ T3321] tipc: Left network mode
[  206.378346][ T5826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  206.408613][   T30] audit: type=1400 audit(1787366669.002:453): avc:  denied  { write } for  pid=7139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  206.464124][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.483992][ T5826] usb 1-1: Product: syz
[  206.500144][ T5826] usb 1-1: Manufacturer: syz
[  206.513743][ T7168] Cannot find add_set index 0 as target
[  206.527374][ T5826] usb 1-1: SerialNumber: syz
[  207.360426][ T5605] Bluetooth: hci4: command tx timeout
[  207.377094][ T5826] usb 1-1: selecting invalid altsetting 1
[  207.468039][ T5826] usb 1-1: unit 6 not found!
[  207.501167][   T30] audit: type=1400 audit(1787366670.092:454): avc:  denied  { write } for  pid=7174 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  207.673090][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1
[  207.724271][   T30] audit: type=1400 audit(1787366670.322:455): avc:  denied  { create } for  pid=7176 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  207.827946][   T30] audit: type=1400 audit(1787366670.422:456): avc:  denied  { shutdown } for  pid=7152 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  207.882592][   T30] audit: type=1400 audit(1787366670.462:457): avc:  denied  { name_connect } for  pid=7152 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  208.088766][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.108332][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.168621][ T3321] hsr_slave_0: left promiscuous mode
[  208.181345][ T3321] hsr_slave_1: left promiscuous mode
[  208.197698][ T3321] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.218482][ T3321] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.249372][ T3321] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.261265][ T3321] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.380364][ T3321] veth1_macvtap: left promiscuous mode
[  208.403359][ T3321] veth0_macvtap: left promiscuous mode
[  208.431144][ T3321] veth1_vlan: left promiscuous mode
[  208.462232][ T3321] veth0_vlan: left promiscuous mode
[  208.697804][   T30] audit: type=1400 audit(1787366671.292:458): avc:  denied  { write } for  pid=7182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  208.771597][ T5826] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  208.826582][ T5826] usb 1-1: USB disconnect, device number 15
[  208.904133][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  208.999457][   T30] audit: type=1400 audit(1787366671.572:459): avc:  denied  { write } for  pid=7197 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  209.112582][ T5784] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  209.301994][ T7200] netlink: 32 bytes leftover after parsing attributes in process `syz.0.407'.
[  209.323986][ T5784] usb 2-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00
[  209.356434][ T5784] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  209.383582][ T5784] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  209.438758][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.447749][ T5605] Bluetooth: hci4: command tx timeout
[  209.519542][ T5784] ums-sddr55 2-1:1.0: USB Mass Storage device detected
[  209.568247][ T5784] ums-sddr55 2-1:1.0: This device (55aa,a103,0000 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  209.568247][ T5784]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  209.598840][ T5784] scsi host1: usb-storage 2-1:1.0
[  209.701764][ T3321] team0 (unregistering): Port device team_slave_1 removed
[  210.241666][ T5784] usb 2-1: USB disconnect, device number 11
[  210.357600][ T3321] team0 (unregistering): Port device team_slave_0 removed
[  210.981972][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2
[  211.399180][ T7122] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.419741][ T7122] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.446851][ T7122] bridge_slave_0: entered allmulticast mode
[  211.472612][ T5598] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  211.488849][ T7122] bridge_slave_0: entered promiscuous mode
[  211.533009][ T5605] Bluetooth: hci4: command tx timeout
[  211.541761][ T7122] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.600240][ T7122] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.640998][ T7122] bridge_slave_1: entered allmulticast mode
[  211.666531][ T7122] bridge_slave_1: entered promiscuous mode
[  211.762926][ T5598] usb 2-1: Using ep0 maxpacket: 16
[  212.586493][ T5598] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[  212.692647][ T5598] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.706858][ T5598] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  212.731962][ T5598] usb 2-1: config 0 interface 0 has no altsetting 0
[  212.739138][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.751718][ T5598] usb 2-1: config 0 descriptor??
[  212.772638][   T30] audit: type=1400 audit(1787366675.362:460): avc:  denied  { write } for  pid=7228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  213.214719][ T7122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.307423][ T7122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.324148][   T30] audit: type=1400 audit(1787366675.922:461): avc:  denied  { write } for  pid=7258 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  213.457051][ T7122] team0: Port device team_slave_0 added
[  213.483706][ T7122] team0: Port device team_slave_1 added
[  213.555491][ T7261] Cannot find del_set index 0 as target
[  213.571089][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3
[  213.604402][ T5605] Bluetooth: hci4: command tx timeout
[  213.634386][ T7122] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.641401][ T7122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  213.668328][ T7122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.693717][ T7122] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.707950][ T7122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  213.771907][ T7122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.806935][ T5598] usbhid 2-1:0.0: can't add hid device: -71
[  213.814846][ T5598] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  213.858146][ T5598] usb 2-1: USB disconnect, device number 12
[  213.916134][ T7122] hsr_slave_0: entered promiscuous mode
[  213.939276][ T7122] hsr_slave_1: entered promiscuous mode
[  213.948645][ T7122] debugfs: 'hsr0' already exists in 'hsr'
[  213.959259][   T30] audit: type=1400 audit(1787366676.552:462): avc:  denied  { mounton } for  pid=7264 comm="syz.0.422" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  213.988913][ T7122] Cannot create hsr debugfs directory
[  213.990436][ T7267] overlay: Bad value for 'uuid'
[  214.097380][ T7271] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  214.573104][ T7288] netlink: 4884 bytes leftover after parsing attributes in process `syz.0.427'.
[  214.615813][ T7292] netlink: 'syz.1.428': attribute type 32 has an invalid length.
[  214.676897][ T7296] fuse: Unknown parameter 'gid'
[  214.914385][   T30] audit: type=1400 audit(1787366677.512:463): avc:  denied  { write } for  pid=7272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  215.068639][ T7307] fuse: Unknown parameter 'gid'
[  215.087126][ T7122] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  215.795303][ T7122] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  215.911861][ T7122] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  216.007571][   T30] audit: type=1400 audit(1787366678.602:464): avc:  denied  { write } for  pid=7308 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  216.082227][ T7122] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  216.665979][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4
[  216.674518][ T7122] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  216.750727][ T7122] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  216.783877][ T7122] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  216.955825][ T7122] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  217.014114][ T7319] netlink: 40 bytes leftover after parsing attributes in process `syz.4.431'.
[  217.233685][ T5707] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  217.259280][ T7317] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  217.522845][ T5707] usb 2-1: Using ep0 maxpacket: 32
[  217.583939][ T5707] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  217.680018][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.703634][ T7122] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.714424][ T5707] usb 2-1: Product: syz
[  217.733936][ T5707] usb 2-1: Manufacturer: syz
[  217.760871][ T5707] usb 2-1: SerialNumber: syz
[  217.789466][ T5707] usb 2-1: config 0 descriptor??
[  217.797787][ T7122] 8021q: adding VLAN 0 to HW filter on device team0
[  217.833905][ T5707] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  217.857619][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.864719][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.907756][ T5707] dvb-usb: bulk message failed: -22 (4/0)
[  217.928823][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.935960][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.975484][ T5707] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  218.045878][ T5707] dvb-usb: bulk message failed: -22 (5/0)
[  218.073180][ T5707] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  218.105301][ T7122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  218.127209][ T5707] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  218.206562][ T7339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.134726][ T5707] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  219.676811][ T5707] usb 2-1: media controller created
[  219.772055][ T5707] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  219.880245][ T5707] usb 2-1: selecting invalid altsetting 3
[  219.912017][ T5707] ttusb2: set interface to alts=3 failed
[  220.038930][ T5707] DVB: Unable to find symbol tda10086_attach()
[  220.063943][ T5707] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  220.117817][ T5707] dvb-usb: bulk message failed: -22 (4/0)
[  220.144793][ T5707] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  220.192266][ T5707] dvb-usb: bulk message failed: -22 (5/0)
[  220.223200][ T5707] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  220.260743][ T5707] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  220.302001][ T5707] usb 2-1: USB disconnect, device number 13
[  220.444390][ T5707] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  220.500791][   T30] audit: type=1400 audit(1787366683.092:465): avc:  denied  { create } for  pid=7361 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  220.528774][ T5730] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  220.543421][ T7368] netlink: 'syz.3.439': attribute type 4 has an invalid length.
[  220.615893][ T7122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.723950][ T5730] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  220.747085][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.773184][ T5730] usb 5-1: config 0 descriptor??
[  220.801290][ T5730] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  221.641178][ T7353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.656224][ T5730] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  221.670801][ T5730] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  221.695960][ T7391] jffs2: notice: (7391) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  221.700621][ T7122] veth0_vlan: entered promiscuous mode
[  221.940433][ T7353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.948582][ T7122] veth1_vlan: entered promiscuous mode
[  222.933937][ T5730] usb 5-1: USB disconnect, device number 18
[  223.441858][ T7122] veth0_macvtap: entered promiscuous mode
[  223.455800][ T7122] veth1_macvtap: entered promiscuous mode
[  223.481804][ T7122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.504710][ T7122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.518956][   T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.622327][   T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.643816][ T6337] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.656385][ T6337] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.672775][ T5826] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  224.571872][   T30] audit: type=1400 audit(1787366686.862:466): avc:  denied  { write } for  pid=7404 comm="syz.1.447" name="dlm" dev="configfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  224.652324][   T30] audit: type=1400 audit(1787366686.862:467): avc:  denied  { add_name } for  pid=7404 comm="syz.1.447" name="cluster1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  224.675842][   T30] audit: type=1400 audit(1787366686.862:468): avc:  denied  { create } for  pid=7404 comm="syz.1.447" name="cluster1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  224.702053][   T30] audit: type=1400 audit(1787366686.882:469): avc:  denied  { read write } for  pid=7404 comm="syz.1.447" name="cluster_name" dev="configfs" ino=17458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  224.722727][ T5826] usb 4-1: Using ep0 maxpacket: 16
[  224.729133][   T30] audit: type=1400 audit(1787366686.882:470): avc:  denied  { open } for  pid=7404 comm="syz.1.447" path="/91/my_configfs/dlm/cluster1/cluster_name" dev="configfs" ino=17458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  224.782265][   T30] audit: type=1800 audit(1787366686.892:471): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.447" name="cluster_name" dev="configfs" ino=17458 res=0 errno=0
[  224.806732][   T30] audit: type=1400 audit(1787366686.912:472): avc:  denied  { write } for  pid=7404 comm="syz.1.447" name="comms" dev="configfs" ino=17457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  224.857947][   T30] audit: type=1800 audit(1787366686.922:473): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.447" name="local" dev="configfs" ino=17460 res=0 errno=0
[  225.892634][ T5826] usb 4-1: device descriptor read/all, error -71
[  225.966453][ T3321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.986730][ T3321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.056836][ T3321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.073547][ T3321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.138151][   T30] audit: type=1400 audit(1787366688.732:474): avc:  denied  { mounton } for  pid=7122 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  226.202640][   T30] audit: type=1400 audit(1787366688.732:475): avc:  denied  { mount } for  pid=7122 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  226.253152][ T7421] netlink: 'syz.3.451': attribute type 4 has an invalid length.
[  226.762669][ T7425] netlink: 14 bytes leftover after parsing attributes in process `syz.3.452'.
[  226.804012][ T7425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.825993][ T7425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.839938][ T7425] bond0 (unregistering): Released all slaves
[  227.311501][   T30] audit: type=1400 audit(1787366689.902:476): avc:  denied  { read } for  pid=7429 comm="syz.0.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  229.417395][ T7447] serio: Serial port ttynull
[  229.436845][ T7454] overlay: Unknown parameter 'userxattr:/'
[  229.442789][   T30] audit: type=1400 audit(1787366692.032:477): avc:  denied  { mounton } for  pid=7450 comm="syz.5.458" path="/2/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  229.472643][    T9] usb 4-1: new low-speed USB device number 19 using dummy_hcd
[  229.482459][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'.
[  229.604173][    T9] usb 4-1: device descriptor read/64, error -71
[  229.670017][ T7462] fuse: Unknown parameter 'gid'
[  230.733216][   T30] audit: type=1400 audit(1787366693.322:478): avc:  denied  { write } for  pid=7444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  230.840536][   T30] audit: type=1400 audit(1787366693.432:479): avc:  denied  { write } for  pid=7474 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  230.869273][    T9] usb 4-1: new low-speed USB device number 20 using dummy_hcd
[  230.878454][ T7476] netlink: 4884 bytes leftover after parsing attributes in process `syz.5.461'.
[  230.985157][   T30] audit: type=1400 audit(1787366693.582:480): avc:  denied  { unmount } for  pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  231.035192][    T9] usb 4-1: device descriptor read/64, error -71
[  231.165495][    T9] usb usb4-port1: attempt power cycle
[  231.185218][ T7483] sctp: [Deprecated]: syz.5.463 (pid 7483) Use of int in max_burst socket option.
[  231.185218][ T7483] Use struct sctp_assoc_value instead
[  231.286292][   T30] audit: type=1326 audit(1787366693.882:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.0.465" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fca55997e57 code=0x0
[  231.363107][   T30] audit: type=1400 audit(1787366693.912:482): avc:  denied  { read } for  pid=7488 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  231.530529][ T5598] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  231.805716][ T7519] fuse: Unknown parameter 'gid'
[  231.892731][   T30] audit: type=1400 audit(1787366694.452:483): avc:  denied  { write } for  pid=7481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  233.003256][   T30] audit: type=1400 audit(1787366695.592:484): avc:  denied  { write } for  pid=7522 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  233.087020][ T7525] CIFS: VFS: UNC: path must begin with // or \\
[  233.093395][ T7525] Malformed UNC in devname
[  233.093395][ T7525] 
[  233.100349][ T7525] CIFS: VFS: Malformed UNC in devname
[  233.566212][   T30] audit: type=1400 audit(1787366696.162:485): avc:  denied  { execute } for  pid=7527 comm="syz.5.472" name="cgroup" dev="tmpfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1
[  234.895105][ T7565] netlink: 'syz.0.478': attribute type 4 has an invalid length.
[  234.899238][ T7566] FAULT_INJECTION: forcing a failure.
[  234.899238][ T7566] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  234.939084][   T30] audit: type=1400 audit(1787366697.532:486): avc:  denied  { write } for  pid=7538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  234.967861][ T7566] CPU: 1 UID: 0 PID: 7566 Comm: syz.5.479 Not tainted syzkaller #0 PREEMPT(full) 
[  234.967888][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  234.967899][ T7566] Call Trace:
[  234.967905][ T7566]  <TASK>
[  234.967912][ T7566]  dump_stack_lvl+0x100/0x190
[  234.967943][ T7566]  should_fail_ex.cold+0x5/0xa
[  234.967969][ T7566]  _copy_from_iter+0x1f4/0x1690
[  234.967993][ T7566]  ? __pfx__copy_from_iter+0x10/0x10
[  234.968010][ T7566]  ? trace_kmalloc+0xeb/0x110
[  234.968037][ T7566]  ? __kasan_kmalloc+0xaa/0xb0
[  234.968061][ T7566]  ? __kmalloc_noprof+0x345/0x820
[  234.968086][ T7566]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  234.968115][ T7566]  kernfs_fop_write_iter+0x186/0x5f0
[  234.968141][ T7566]  vfs_write+0x6af/0x1050
[  234.968168][ T7566]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  234.968194][ T7566]  ? __pfx_vfs_write+0x10/0x10
[  234.968214][ T7566]  ? find_held_lock+0x2b/0x80
[  234.968253][ T7566]  ksys_write+0x12a/0x250
[  234.968275][ T7566]  ? __pfx_ksys_write+0x10/0x10
[  234.968305][ T7566]  do_syscall_64+0x123/0x790
[  234.968335][ T7566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.968354][ T7566] RIP: 0033:0x7f7818f9e0d9
[  234.968369][ T7566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.968385][ T7566] RSP: 002b:00007f78171f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  234.968403][ T7566] RAX: ffffffffffffffda RBX: 00007f7819226090 RCX: 00007f7818f9e0d9
[  234.968415][ T7566] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 000000000000000a
[  234.968425][ T7566] RBP: 00007f78171f6090 R08: 0000000000000000 R09: 0000000000000000
[  234.968435][ T7566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.968445][ T7566] R13: 00007f7819226128 R14: 00007f7819226090 R15: 00007ffc5aa1b4a8
[  234.968470][ T7566]  </TASK>
[  235.260371][   T30] audit: type=1400 audit(1787366697.852:487): avc:  denied  { write } for  pid=7571 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  237.402583][   T30] audit: type=1400 audit(1787366699.992:488): avc:  denied  { listen } for  pid=7599 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  238.287583][   T30] audit: type=1400 audit(1787366700.832:489): avc:  denied  { write } for  pid=7599 comm="syz.1.483" name="usb_gadget" dev="configfs" ino=3242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  238.476372][   T30] audit: type=1400 audit(1787366701.012:490): avc:  denied  { write } for  pid=7599 comm="syz.1.483" name="functions" dev="configfs" ino=18007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  238.521376][   T30] audit: type=1400 audit(1787366701.042:491): avc:  denied  { write } for  pid=7599 comm="syz.1.483" name="target" dev="configfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  238.549367][   T30] audit: type=1400 audit(1787366701.042:492): avc:  denied  { write } for  pid=7599 comm="syz.1.483" name="usb_gadget" dev="configfs" ino=18637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  238.585820][   T30] audit: type=1400 audit(1787366701.062:493): avc:  denied  { write } for  pid=7599 comm="syz.1.483" name="core" dev="configfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  238.622353][   T30] audit: type=1400 audit(1787366701.102:494): avc:  denied  { write } for  pid=7599 comm="syz.1.483" name="rd_mcp_0" dev="configfs" ino=18642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  238.736987][   T30] audit: type=1400 audit(1787366701.322:495): avc:  denied  { bind } for  pid=7569 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  238.775762][ T7575] fuse: Unknown parameter '@øÙ½§c�fd'
[  238.851995][   T30] audit: type=1400 audit(1787366701.322:496): avc:  denied  { listen } for  pid=7569 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  238.928313][   T30] audit: type=1400 audit(1787366701.502:497): avc:  denied  { accept } for  pid=7569 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  239.137503][ T7619] netlink: 'syz.0.488': attribute type 1 has an invalid length.
[  239.274179][ T5784] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  239.595761][   T49] Bluetooth: Error in BCSP hdr checksum
[  239.637240][   T49] Bluetooth: Error in BCSP hdr checksum
[  239.673521][ T5784] usb 6-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01
[  239.687927][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.706489][ T5784] usb 6-1: Product: syz
[  239.713886][ T5784] usb 6-1: Manufacturer: syz
[  239.724127][ T5784] usb 6-1: SerialNumber: syz
[  239.735332][ T5784] usb 6-1: config 0 descriptor??
[  239.758067][ T5784] go7007 6-1:0.0: Sensoray 2250 found
[  239.764585][ T5784] go7007 6-1:0.0: probe with driver go7007 failed with error -12
[  239.794876][ T7619] 8021q: adding VLAN 0 to HW filter on device bond1
[  239.820393][ T7632] Cannot find add_set index 0 as target
[  239.895748][ T6337] Bluetooth: Error in BCSP hdr checksum
[  240.590417][   T58] Bluetooth: Error in BCSP hdr checksum
[  240.631012][ T5730] usb 6-1: USB disconnect, device number 2
[  240.783115][   T58] Bluetooth: Error in BCSP hdr checksum
[  241.122709][ T5610] Bluetooth: hci5: command 0x1003 tx timeout
[  241.130402][ T5605] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  241.176906][ T5730] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  241.354650][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'.
[  241.371358][ T5730] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  241.387654][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.398764][ T5730] usb 2-1: Product: �洫�붛ᛶഢ䡿홷㛌鴄탇ᙨ凗�悚ꃴ���턒캱�齩�וּffi�嶃�둽ꞑ븮뵑噘ꃪ��⻊ᇉ熬쌞�鄋⑯��漅䊉얩麨釦椔瀭��஋�頿ᄛ��⣠�꓾�眒�ꩳ䃡찉῕嫅�ｵﲑ뜽躗�뒠௉༆㹗紊ⲻᶧ㗖૳ᢤᯃ㬱�ڈ飈僲懄�ᳶ�⌅࢈蛸鉲ꗧ
[  241.439395][ T5730] usb 2-1: Manufacturer: ဇ
[  241.444405][ T5730] usb 2-1: SerialNumber: syz
[  241.456920][ T7654] netlink: 68 bytes leftover after parsing attributes in process `syz.0.498'.
[  241.512628][ T5784] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  241.717590][ T5784] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  241.746693][ T5784] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  241.862808][ T5784] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  241.906651][ T5730] usb 2-1: USB disconnect, device number 14
[  241.917722][ T5784] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  241.954689][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.993227][ T5784] usb 6-1: Product: syz
[  241.995371][ T7126] udevd[7126]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  242.010684][ T5784] usb 6-1: Manufacturer: syz
[  242.099610][ T5784] usb 6-1: SerialNumber: syz
[  242.229781][ T5784] usb 6-1: config 0 descriptor??
[  242.712162][ T7650] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  242.765379][ T7650] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  242.817645][ T5784] usb 6-1: ucan: probing device on interface #0
[  243.434307][ T5730] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  243.642693][ T5730] usb 2-1: Using ep0 maxpacket: 32
[  243.678034][ T5730] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  243.783246][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.808751][ T5784] ucan 6-1:0.0 can0: registered device
[  243.818238][ T5730] usb 2-1: Product: syz
[  243.843799][ T7650] netlink: 'syz.5.496': attribute type 9 has an invalid length.
[  243.861912][ T5730] usb 2-1: Manufacturer: syz
[  243.867211][ T5730] usb 2-1: SerialNumber: syz
[  243.877834][ T5784] ucan 6-1:0.0 can0: firmware string: unknown
[  243.885270][ T5730] usb 2-1: config 0 descriptor??
[  243.915850][ T5784] usb 6-1: USB disconnect, device number 3
[  243.937327][ T5730] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  243.977990][ T5730] dvb-usb: bulk message failed: -22 (4/0)
[  244.012056][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  244.067818][ T5730] dvb-usb: bulk message failed: -22 (5/0)
[  244.088875][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  244.120243][ T5730] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  244.189635][ T5730] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  244.241348][ T5730] usb 2-1: media controller created
[  244.265835][ T7680] Cannot find add_set index 0 as target
[  244.282148][ T7673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.308095][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  244.396415][ T5730] usb 2-1: selecting invalid altsetting 3
[  244.438636][ T5730] ttusb2: set interface to alts=3 failed
[  245.594693][ T5730] DVB: Unable to find symbol tda10086_attach()
[  245.630018][ T5730] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  245.653843][ T7687] netlink: 'syz.0.507': attribute type 39 has an invalid length.
[  245.663503][ T5730] dvb-usb: bulk message failed: -22 (4/0)
[  245.676225][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  245.719291][ T5730] dvb-usb: bulk message failed: -22 (5/0)
[  245.748324][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  245.794489][ T5730] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  245.846764][ T5730] usb 2-1: USB disconnect, device number 15
[  246.846005][ T5730] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  247.603915][ T7709] netlink: 'syz.4.516': attribute type 13 has an invalid length.
[  247.627949][ T7709] gretap0: refused to change device tx_queue_len
[  247.638783][ T7709] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  247.846587][ T7709] Invalid ELF header type: 3 != 1
[  247.851689][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  247.851699][   T30] audit: type=1400 audit(1787366710.442:504): avc:  denied  { module_load } for  pid=7708 comm="syz.4.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  247.887239][ T7712] binder: 7711:7712 ioctl c00c6211 0 returned -14
[  249.446833][ T7721] syzkaller0: entered promiscuous mode
[  249.462907][ T7721] syzkaller0: entered allmulticast mode
[  249.625849][ T7710] overlay: ./file0 is not a directory
[  249.752618][ T5826] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  249.788456][ T5605] Bluetooth: hci4: link tx timeout
[  249.795525][ T5605] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  249.806300][ T5610] Bluetooth: hci4: link tx timeout
[  249.812628][ T5610] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  249.820407][ T5610] Bluetooth: hci4: link tx timeout
[  249.825619][ T5610] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  249.833334][ T5610] Bluetooth: hci4: link tx timeout
[  249.838485][ T5610] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  250.803866][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  250.810165][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  251.343648][ T5826] usb 5-1: device descriptor read/64, error -71
[  251.469992][ T7749] netlink: 'syz.5.526': attribute type 9 has an invalid length.
[  251.504587][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'.
[  251.569241][ T7750] netlink: 'syz.5.526': attribute type 9 has an invalid length.
[  251.623941][ T5826] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  251.845129][ T5610] Bluetooth: hci4: command 0x0406 tx timeout
[  251.882899][ T5826] usb 5-1: Using ep0 maxpacket: 8
[  251.915612][ T5826] usb 5-1: unable to get BOS descriptor or descriptor too short
[  251.948446][ T5826] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  252.005341][ T5826] usb 5-1: config 4 interface 0 has no altsetting 0
[  252.038323][ T5826] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  252.070127][ T5826] usb 5-1: Manufacturer: syz
[  252.093917][ T5826] usb 5-1: SerialNumber: syz
[  252.143594][ T5730] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  253.172625][ T5730] usb 2-1: Using ep0 maxpacket: 8
[  253.521163][ T5730] usb 2-1: New USB device found, idVendor=2799, idProduct=500a, bcdDevice=e7.b7
[  253.561121][ T5730] usb 2-1: config 0 has no interfaces?
[  253.576948][ T7740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.600560][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.633588][ T5730] usb 2-1: Product: syz
[  253.649115][ T5730] usb 2-1: Manufacturer: syz
[  253.663916][ T5730] usb 2-1: SerialNumber: syz
[  253.688669][ T5730] usb 2-1: config 0 descriptor??
[  253.720404][ T7740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.002887][ T5730] usb 2-1: USB disconnect, device number 17
[  254.784371][ T7773] netlink: 14 bytes leftover after parsing attributes in process `syz.0.533'.
[  256.124020][   T30] audit: type=1400 audit(1787366718.712:505): avc:  denied  { append } for  pid=7776 comm="syz.3.535" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  256.231132][   T30] audit: type=1400 audit(1787366718.722:506): avc:  denied  { ioctl } for  pid=7776 comm="syz.3.535" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  256.292003][ T5826] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  256.354160][ T7773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.391938][ T5826] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  256.442363][ T5826] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  256.471149][ T5826] usb 5-1: media controller created
[  256.507147][ T7773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.522378][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  256.590883][ T7773] bond0 (unregistering): Released all slaves
[  256.613284][ T5826] zl10353_read_register: readreg error (reg=127, ret==0)
[  256.834713][ T5826] usb 5-1: USB disconnect, device number 20
[  257.569421][ T7790] netlink: 4884 bytes leftover after parsing attributes in process `syz.0.538'.
[  258.327480][   T30] audit: type=1400 audit(1787366720.922:507): avc:  denied  { read write } for  pid=7811 comm="syz.0.544" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  258.360029][   T30] audit: type=1400 audit(1787366720.952:508): avc:  denied  { open } for  pid=7811 comm="syz.0.544" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  258.391432][   T30] audit: type=1400 audit(1787366720.952:509): avc:  denied  { create } for  pid=7811 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  258.419303][   T30] audit: type=1400 audit(1787366720.952:510): avc:  denied  { ioctl } for  pid=7811 comm="syz.0.544" path="socket:[19476]" dev="sockfs" ino=19476 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  259.472565][ T5730] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  260.368181][ T5730] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  260.455343][ T5730] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  260.498997][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.550396][ T5730] gspca_main: stv0680-2.14.0 probing 041e:4007
[  260.610162][   T30] audit: type=1400 audit(1787366723.202:511): avc:  denied  { mount } for  pid=7826 comm="syz.0.549" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  260.679135][   T30] audit: type=1400 audit(1787366723.262:512): avc:  denied  { write } for  pid=7825 comm="syz.4.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  260.738252][ T7836] netlink: 44 bytes leftover after parsing attributes in process `syz.4.547'.
[  260.795687][   T30] audit: type=1400 audit(1787366723.392:513): avc:  denied  { unmount } for  pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  261.182633][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  261.727194][ T5730] stv0680 2-1:4.0: STV(e): camera ping failed!!
[  261.744608][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  261.752407][    T9] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6
[  261.767077][ T5730] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  261.785585][ T5730] stv0680 2-1:4.0: last error: 0,  command = 0x0
[  261.785592][    T9] usb 1-1: config 12 has an invalid interface number: 99 but max is 0
[  261.785615][    T9] usb 1-1: config 12 has no interface number 0
[  261.841429][    T9] usb 1-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64
[  261.881331][    T9] usb 1-1: config 12 interface 99 has no altsetting 0
[  261.906907][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.939859][    T9] usb 1-1: Product: syz
[  261.959546][    T9] usb 1-1: Manufacturer: syz
[  261.977516][    T9] usb 1-1: SerialNumber: syz
[  261.981150][ T5730] usb 2-1: USB disconnect, device number 18
[  262.055663][ T7850] bond2: (slave bridge0): Device is not bonding slave
[  262.077435][ T7850] bond2: option active_slave: invalid value (bridge0)
[  262.096301][ T7850] bond2 (unregistering): Released all slaves
[  262.253935][ T7842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.551'.
[  262.312115][    T9] usb 1-1: no audio or video endpoints found
[  262.954518][ T7863] ISOFS: Unable to identify CD-ROM format.
[  263.758079][    T9] usb 1-1: USB disconnect, device number 17
[  263.872021][ T7873] Cannot find add_set index 0 as target
[  263.905829][ T7875] netlink: 68 bytes leftover after parsing attributes in process `syz.1.562'.
[  264.389830][   T30] audit: type=1400 audit(1787366726.982:514): avc:  denied  { ioctl } for  pid=7879 comm="syz.4.564" path="socket:[19690]" dev="sockfs" ino=19690 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  265.421381][ T7891] netlink: 'syz.3.568': attribute type 1 has an invalid length.
[  265.472567][ T5730] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  265.490269][ T7891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.568'.
[  265.740548][ T5730] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  266.237514][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  266.294896][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  266.326607][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  266.355428][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 146, setting to 64
[  266.394329][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.413536][ T5730] usb 2-1: Product: syz
[  266.424454][ T5730] usb 2-1: Manufacturer: syz
[  266.441454][ T5730] usb 2-1: SerialNumber: syz
[  266.469732][ T5730] usb 2-1: config 0 descriptor??
[  266.489491][ T7900] xt_cgroup: invalid path, errno=-2
[  266.496777][ T7889] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  267.485982][   T30] audit: type=1400 audit(1787366730.082:515): avc:  denied  { ioctl } for  pid=7898 comm="syz.5.572" path="socket:[19748]" dev="sockfs" ino=19748 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  267.620517][ T7906] netdevsim netdevsim5: Firmware load for './file0/file0/../file0' refused, path contains '..' component
[  267.702888][ T7906] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  268.345991][ T5730] adutux 2-1:0.0: ADU208  now attached to /dev/usb/adutux0
[  268.405650][ T5730] usb 2-1: USB disconnect, device number 19
[  268.666553][ T7912] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  268.952584][   T30] audit: type=1400 audit(1787366731.542:516): avc:  denied  { mount } for  pid=7916 comm="syz.0.577" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  269.243793][ T5730] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  269.435025][ T5730] usb 1-1: not running at top speed; connect to a high speed hub
[  269.461098][ T5730] usb 1-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[  269.490520][ T5730] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  269.517330][ T5730] usb 1-1: language id specifier not provided by device, defaulting to English
[  269.587685][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.609955][ T5730] usb 1-1: Product: à ‰
[  269.628914][ T5730] usb 1-1: Manufacturer: 曯钎펊᮪첈躂敓ᵔ펠�ꭧ襊횛蟇匜�芌䮄䴱�딼ފⰵ�ᔪ㡥톞䤞꣞��烲팭⳻龭㢥⮿ź엜
[  269.732109][ T5730] usb 1-1: SerialNumber: 핕͎�☔涺㬃稾䲆횒옓↗ᙉ赠ꌖ�护海㜽곿钢銛蜡ອ㙻�잋�뽧縉蜿�ᥖ꧙쎤鸾파ﰡ׭�ⵅ甦꼠�边톴婴໼躺馵�ƴԎ쵦ᬠ勖㬞溵�릊Ѧ�㥩젧�䘣�੥ꕔ㳔濼䦵䔽֔苀鹲䉢䇌镒ᘜ濒醙嫱숬ꊿ⊽綰築釫㹌ᦔ暔챌ԉ�庹뷲뼩린�ᤑרּ�墨㪘출㇃�豑釛⮬欿垪
[  270.002704][ T5784] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  270.193366][ T5784] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  270.207289][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.220919][ T5784] usb 5-1: config 0 descriptor??
[  270.239698][ T5784] cp210x 5-1:0.0: cp210x converter detected
[  270.263907][ T5730] usb 1-1: 1:1 : no UAC_FORMAT_TYPE desc
[  270.495263][ T5730] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  270.589371][ T5730] usb 1-1: USB disconnect, device number 18
[  270.644071][ T5784] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -121
[  270.679333][ T5784] cp210x 5-1:0.0: GPIO initialisation failed: -121
[  270.717694][ T5784] usb 5-1: cp210x converter now attached to ttyUSB0
[  270.801083][ T7931] batadv1: entered promiscuous mode
[  270.932600][  T189] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  271.039278][   T30] audit: type=1400 audit(1787366733.632:517): avc:  denied  { unmount } for  pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  271.104596][  T189] usb 6-1: Using ep0 maxpacket: 32
[  271.116744][  T189] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  271.149475][  T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.172818][  T189] usb 6-1: Product: syz
[  271.185853][  T189] usb 6-1: Manufacturer: syz
[  271.195034][  T189] usb 6-1: SerialNumber: syz
[  271.206529][  T189] usb 6-1: config 0 descriptor??
[  271.218577][  T189] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  271.246488][  T189] dvb-usb: bulk message failed: -22 (4/0)
[  271.262383][  T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  271.282945][  T189] dvb-usb: bulk message failed: -22 (5/0)
[  271.298655][ T7938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=7938 comm=syz.4.579
[  271.299908][  T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  271.359177][  T189] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  271.381198][  T189] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  271.399247][  T189] usb 6-1: media controller created
[  271.402777][ T5730] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  271.435895][  T189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  271.471007][  T189] usb 6-1: selecting invalid altsetting 3
[  271.491402][  T189] ttusb2: set interface to alts=3 failed
[  271.575088][ T5730] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  271.604072][ T5730] usb 1-1: config index 0 descriptor too short (expected 2075, got 27)
[  271.637412][ T5730] usb 1-1: config 0 has an invalid interface number: 200 but max is 0
[  271.652919][ T5730] usb 1-1: config 0 has no interface number 0
[  271.660640][ T5730] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  271.676670][ T5730] usb 1-1: config 0 interface 200 has no altsetting 0
[  271.692165][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.713568][ T5730] usb 1-1: Product: syz
[  271.721502][ T5730] usb 1-1: Manufacturer: syz
[  271.728087][ T5730] usb 1-1: SerialNumber: syz
[  271.740525][ T5730] usb 1-1: config 0 descriptor??
[  271.832404][   T30] audit: type=1400 audit(1787366734.422:518): avc:  denied  { read } for  pid=7952 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  271.862400][   T30] audit: type=1400 audit(1787366734.452:519): avc:  denied  { getopt } for  pid=7952 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  271.948765][   T30] audit: type=1400 audit(1787366734.542:520): avc:  denied  { mount } for  pid=7955 comm="syz.3.587" name="/" dev="ramfs" ino=20079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  271.985977][ T5730] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input21
[  272.012384][   T30] audit: type=1400 audit(1787366734.602:521): avc:  denied  { read } for  pid=4950 comm="acpid" name="event4" dev="devtmpfs" ino=3022 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  272.051455][ T5730] usb 1-1: USB disconnect, device number 19
[  272.104393][   T30] audit: type=1400 audit(1787366734.602:522): avc:  denied  { open } for  pid=4950 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3022 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  272.185801][   T30] audit: type=1400 audit(1787366734.672:523): avc:  denied  { watch_reads } for  pid=7955 comm="syz.3.587" path="/118" dev="tmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  272.300078][  T189] DVB: Unable to find symbol tda10086_attach()
[  272.319471][  T189] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  272.349792][  T189] dvb-usb: bulk message failed: -22 (4/0)
[  272.361012][  T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  272.387476][  T189] dvb-usb: bulk message failed: -22 (5/0)
[  272.402027][  T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  272.433713][  T189] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  272.486189][  T189] usb 6-1: USB disconnect, device number 4
[  272.603638][  T189] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  272.669916][ T5784] usb 5-1: USB disconnect, device number 21
[  272.784705][ T5784] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  272.822869][ T5784] cp210x 5-1:0.0: device disconnected
[  272.882446][ T7967] syzkaller1: entered promiscuous mode
[  272.888007][ T7967] syzkaller1: entered allmulticast mode
[  272.899244][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'.
[  272.908079][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'.
[  272.960591][   T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  273.231248][   T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  273.355875][   T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  274.043209][   T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  274.456004][   T30] audit: type=1400 audit(1787366737.052:524): avc:  denied  { bind } for  pid=7984 comm="syz.5.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  274.484700][ T5784] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  274.531061][   T30] audit: type=1400 audit(1787366737.092:525): avc:  denied  { listen } for  pid=7984 comm="syz.5.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  274.600516][   T30] audit: type=1400 audit(1787366737.152:526): avc:  denied  { accept } for  pid=7984 comm="syz.5.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  274.653313][ T5784] usb 5-1: Using ep0 maxpacket: 8
[  274.671426][ T5784] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  274.719467][ T5784] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  274.754415][ T5784] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  274.798874][ T5784] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  274.850061][ T5784] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024
[  274.892663][ T5730] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  274.904249][ T5784] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  274.941589][ T5784] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  274.986331][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.221907][ T5784] usb 5-1: GET_CAPABILITIES returned 0
[  275.249097][ T5784] usbtmc 5-1:16.0: can't read capabilities
[  275.541759][ T8003] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  275.589836][ T8004] usb 5-1: usbtmc_ioctl_clear_in_halt returned -32
[  275.612874][ T7985] usb 5-1: usbtmc_ioctl_clear_in_halt returned -32
[  275.680031][    T9] usb 5-1: USB disconnect, device number 22
[  276.062539][  T189] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  276.197423][ T8014] batadv1: entered promiscuous mode
[  276.276090][  T189] usb 4-1: Using ep0 maxpacket: 16
[  276.297067][  T189] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  276.344394][  T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.414339][  T189] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  276.455821][  T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.489292][ T8021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.609'.
[  276.510629][  T189] usb 4-1: config 0 descriptor??
[  276.514976][ T8023] FAULT_INJECTION: forcing a failure.
[  276.514976][ T8023] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  276.549491][ T8023] CPU: 1 UID: 0 PID: 8023 Comm: syz.1.610 Not tainted syzkaller #0 PREEMPT(full) 
[  276.549516][ T8023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  276.549531][ T8023] Call Trace:
[  276.549537][ T8023]  <TASK>
[  276.549544][ T8023]  dump_stack_lvl+0x100/0x190
[  276.549572][ T8023]  should_fail_ex.cold+0x5/0xa
[  276.549593][ T8023]  _copy_from_iter+0x43a/0x1690
[  276.549616][ T8023]  ? __pfx__copy_from_iter+0x10/0x10
[  276.549631][ T8023]  ? __pfx___alloc_skb+0x10/0x10
[  276.549665][ T8023]  netlink_sendmsg+0x808/0xda0
[  276.549692][ T8023]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.549716][ T8023]  ? selinux_socket_sendmsg+0x198/0x2f0
[  276.549743][ T8023]  ____sys_sendmsg+0xa4d/0xbe0
[  276.549760][ T8023]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.549785][ T8023]  ? __pfx_____sys_sendmsg+0x10/0x10
[  276.549814][ T8023]  ___sys_sendmsg+0x190/0x1e0
[  276.549836][ T8023]  ? __pfx____sys_sendmsg+0x10/0x10
[  276.549856][ T8023]  ? get_pid_task+0x106/0x250
[  276.549882][ T8023]  ? find_held_lock+0x2b/0x80
[  276.549916][ T8023]  __sys_sendmsg+0x160/0x210
[  276.549942][ T8023]  ? __pfx___sys_sendmsg+0x10/0x10
[  276.549979][ T8023]  do_syscall_64+0x123/0x790
[  276.550008][ T8023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.550025][ T8023] RIP: 0033:0x7fd10779e0d9
[  276.550040][ T8023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  276.550057][ T8023] RSP: 002b:00007fd1086f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.550075][ T8023] RAX: ffffffffffffffda RBX: 00007fd107a25fa0 RCX: 00007fd10779e0d9
[  276.550086][ T8023] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  276.550095][ T8023] RBP: 00007fd1086f7090 R08: 0000000000000000 R09: 0000000000000000
[  276.550105][ T8023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.550115][ T8023] R13: 00007fd107a26038 R14: 00007fd107a25fa0 R15: 00007ffe7848dfb8
[  276.550138][ T8023]  </TASK>
[  276.911259][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  276.911270][   T30] audit: type=1400 audit(1787366739.502:532): avc:  denied  { read } for  pid=8026 comm="syz.4.613" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  276.957209][   T30] audit: type=1400 audit(1787366739.542:533): avc:  denied  { open } for  pid=8026 comm="syz.4.613" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  276.994717][   T30] audit: type=1400 audit(1787366739.552:534): avc:  denied  { ioctl } for  pid=8026 comm="syz.4.613" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x6429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  277.381470][   T30] audit: type=1400 audit(1787366739.972:535): avc:  denied  { watch watch_reads } for  pid=8038 comm="syz.1.617" path="pipe:[21536]" dev="pipefs" ino=21536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  277.770147][  T189] HID 045e:07da: Invalid code 65791 type 1
[  277.793387][  T189] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input22
[  277.881121][  T189] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  277.892569][   T29] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  277.924665][   T30] audit: type=1400 audit(1787366740.512:536): avc:  denied  { ioctl } for  pid=4950 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3033 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  278.038197][ T8053] netlink: 'syz.1.620': attribute type 4 has an invalid length.
[  278.055098][   T29] usb 1-1: Using ep0 maxpacket: 8
[  278.067445][   T29] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  278.167618][   T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15
[  278.182133][   T29] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  278.197293][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 120, changing to 10
[  278.208890][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  278.224910][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.234545][   T29] usb 1-1: Product: syz
[  278.238732][   T29] usb 1-1: Manufacturer: syz
[  278.262609][   T29] usb 1-1: SerialNumber: syz
[  278.288456][   T29] usb 1-1: config 0 descriptor??
[  278.311402][ T8046] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  278.532589][   T30] audit: type=1400 audit(1787366741.122:537): avc:  denied  { name_bind } for  pid=8042 comm="syz.0.619" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  278.695719][   T29] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  278.764697][ T5598] usb 4-1: USB disconnect, device number 22
[  278.984690][   T29] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input23
[  279.048344][    C1] powermate: config urb returned -71
[  279.054141][    C1] powermate: config urb returned -71
[  279.059659][    C1] powermate: config urb returned -71
[  279.065442][    C1] powermate: config urb returned -71
[  279.110289][   T29] usb 1-1: USB disconnect, device number 20
[  279.116278][    C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  279.247029][ T5605] block nbd2: Receive control failed (result -32)
[  279.256936][ T5605] block nbd2: Receive control failed (result -32)
[  279.316046][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.437711][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.495103][ T8074] netlink: 68 bytes leftover after parsing attributes in process `syz.5.625'.
[  279.558279][ T8070] erspan0: entered promiscuous mode
[  279.585190][   T30] audit: type=1400 audit(1787366742.182:538): avc:  denied  { read } for  pid=8076 comm="syz.4.628" dev="sockfs" ino=21637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  279.609911][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'.
[  279.630353][   T30] audit: type=1400 audit(1787366742.222:539): avc:  denied  { create } for  pid=8076 comm="syz.4.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  279.650408][ T8077] 9p: Bad value for 'rfdno'
[  279.742494][ T8079] fuse: Unknown parameter 'gid'
[  282.925845][  T189] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  282.970068][   T30] audit: type=1400 audit(1787366745.562:540): avc:  denied  { unmount } for  pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  283.972572][  T189] usb 5-1: Using ep0 maxpacket: 16
[  284.061298][  T189] usb 5-1: device descriptor read/all, error -71
[  284.241431][ T8105] netlink: 'syz.1.636': attribute type 39 has an invalid length.
[  284.372244][ T8110] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  285.274954][ T8122] fuse: Unknown parameter 'gid'
[  286.154548][ T5598] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  286.263005][   T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  286.323588][ T5598] usb 1-1: Using ep0 maxpacket: 32
[  286.332362][ T5598] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  286.361415][ T5598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.382150][ T5598] usb 1-1: Product: syz
[  286.390002][ T5598] usb 1-1: Manufacturer: syz
[  286.402802][ T5598] usb 1-1: SerialNumber: syz
[  286.424286][ T5598] usb 1-1: config 0 descriptor??
[  286.433903][   T29] usb 6-1: Using ep0 maxpacket: 32
[  286.452664][ T5826] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  286.453506][   T29] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  286.470388][ T5598] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  286.480098][ T5598] dvb-usb: bulk message failed: -22 (4/0)
[  286.487656][ T5598] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  286.499812][   T29] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  286.509650][   T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  286.521423][ T5598] dvb-usb: bulk message failed: -22 (5/0)
[  286.529438][ T5598] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  286.541198][   T29] usb 6-1: config 0 has no interface number 0
[  286.547576][   T29] usb 6-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  286.567674][ T5598] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  286.579048][   T29] usb 6-1: config 0 interface 12 has no altsetting 0
[  286.586324][ T5598] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  286.595002][ T5598] usb 1-1: media controller created
[  286.607063][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.620359][   T29] usb 6-1: Product: syz
[  286.633527][   T29] usb 6-1: Manufacturer: syz
[  286.639137][ T5598] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  286.653865][ T5826] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  286.656200][   T29] usb 6-1: SerialNumber: syz
[  286.681985][ T5598] usb 1-1: selecting invalid altsetting 3
[  286.696568][   T29] usb 6-1: config 0 descriptor??
[  286.704113][ T5598] ttusb2: set interface to alts=3 failed
[  286.715145][   T29] f81534 6-1:0.12: required endpoints missing
[  286.721563][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.758200][   T30] audit: type=1400 audit(1787366749.352:541): avc:  denied  { map } for  pid=8135 comm="syz.1.647" path="/proc/423/cmdline" dev="proc" ino=21849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  286.796128][ T5598] DVB: Unable to find symbol tda10086_attach()
[  286.811996][ T5826] usb 5-1: Product: syz
[  286.819717][ T5598] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  286.831554][   T30] audit: type=1400 audit(1787366749.352:542): avc:  denied  { execute } for  pid=8135 comm="syz.1.647" path="/proc/423/cmdline" dev="proc" ino=21849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  286.855750][ T5826] usb 5-1: Manufacturer: syz
[  286.861384][ T5598] dvb-usb: bulk message failed: -22 (4/0)
[  286.869098][ T5598] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  286.883883][ T5598] dvb-usb: bulk message failed: -22 (5/0)
[  286.896981][ T5598] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  286.898883][ T5826] usb 5-1: SerialNumber: syz
[  286.940646][ T5598] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  286.965329][ T5598] usb 1-1: USB disconnect, device number 21
[  287.062361][ T5598] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  287.243131][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.288581][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.455151][   T30] audit: type=1400 audit(1787366750.052:543): avc:  denied  { remount } for  pid=8127 comm="syz.5.646" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  287.458764][ T5826] rtl8150 5-1:1.0: couldn't reset the device
[  287.494290][ T8144] option changes via remount are deprecated (pid=8127 comm=syz.5.646)
[  287.503711][ T8145] netlink: 'syz.1.648': attribute type 4 has an invalid length.
[  287.540300][ T5826] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5
[  287.587532][ T5826] usb 5-1: USB disconnect, device number 25
[  288.231144][ T8167] fuse: Unknown parameter 'gid'
[  288.331490][ T8169] kAFS: No cell specified
[  289.130689][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'.
[  289.142802][ T8174] Cannot find add_set index 0 as target
[  289.559272][ T5598] usb 6-1: USB disconnect, device number 6
[  289.618296][ T5730] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  289.743890][ T8193] netlink: 4884 bytes leftover after parsing attributes in process `syz.5.659'.
[  289.779641][ T8197] Cannot find add_set index 0 as target
[  289.803173][ T5730] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  289.825592][ T5730] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.851498][ T5730] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.854388][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.663'.
[  289.874623][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.899469][   T30] audit: type=1400 audit(1787366752.492:544): avc:  denied  { kexec_image_load } for  pid=8200 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  290.029104][   T30] audit: type=1400 audit(1787366752.622:545): avc:  denied  { write } for  pid=8205 comm="syz.4.667" name="nullb" dev="configfs" ino=3163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  290.079370][   T30] audit: type=1800 audit(1787366752.672:546): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.667" name="power" dev="configfs" ino=20974 res=0 errno=0
[  290.176750][   T30] audit: type=1400 audit(1787366752.772:547): avc:  denied  { ioctl } for  pid=8205 comm="syz.4.667" path="/130/config/nullb/nullb1/power" dev="configfs" ino=20974 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  290.203237][  T189] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  290.277440][ T8218] Mass Storage Function, version: 2009/09/11
[  290.284207][ T8218] LUN: removable file: (no medium)
[  290.365264][ T8206] null_blk: disk nullb1 created
[  290.470925][  T189] usb 1-1: Using ep0 maxpacket: 32
[  290.859489][ T5730] hid_parser_main: 106 callbacks suppressed
[  290.859608][ T5730] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0
[  291.121914][ T5730] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0
[  291.122051][   T30] audit: type=1400 audit(1787366752.862:548): avc:  denied  { write } for  pid=8205 comm="syz.4.667" name="functions" dev="configfs" ino=18007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  291.152654][  T189] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  291.162693][   T30] audit: type=1800 audit(1787366752.902:549): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.667" name="file" dev="configfs" ino=22110 res=0 errno=0
[  291.178802][ T5730] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0
[  291.183760][   T30] audit: type=1800 audit(1787366753.742:550): pid=8176 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.656" name="file1" dev="overlay" ino=747 res=0 errno=0
[  291.215730][  T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.224655][  T189] usb 1-1: Product: syz
[  291.228844][  T189] usb 1-1: Manufacturer: syz
[  291.234649][  T189] usb 1-1: SerialNumber: syz
[  291.241556][  T189] usb 1-1: config 0 descriptor??
[  291.250612][  T189] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  291.258384][  T189] dvb-usb: bulk message failed: -22 (4/0)
[  291.264331][  T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  291.274567][  T189] dvb-usb: bulk message failed: -22 (5/0)
[  291.280306][  T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  291.315599][ T5730] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0
[  291.332035][ T5730] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0
[  291.340036][ T5730] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0
[  291.342441][  T189] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  291.348535][ T5730] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0
[  291.372239][  T189] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  291.380397][ T5730] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0
[  291.380425][ T5730] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0
[  291.380446][ T5730] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0
[  291.412840][  T189] usb 1-1: media controller created
[  291.418169][ T8225] ip6gre1: entered promiscuous mode
[  291.428706][  T189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  291.428958][ T8225] ip6gre1: entered allmulticast mode
[  291.456707][ T5730] hid-picolcd 0003:04D8:C002.0004: unsupported KEY_STATE report
[  291.457146][  T189] usb 1-1: selecting invalid altsetting 3
[  291.470048][ T5730] hid-picolcd 0003:04D8:C002.0004: probe with driver hid-picolcd failed with error -22
[  291.513924][ T5730] usb 4-1: USB disconnect, device number 23
[  291.518730][  T189] ttusb2: set interface to alts=3 failed
[  291.533694][ T8229] kAFS: bad VL server IP address
[  291.583606][  T189] DVB: Unable to find symbol tda10086_attach()
[  291.589958][  T189] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  291.635990][  T189] dvb-usb: bulk message failed: -22 (4/0)
[  291.647258][  T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  291.662747][  T189] dvb-usb: bulk message failed: -22 (5/0)
[  291.668588][  T189] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  291.678820][  T189] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  291.694551][  T189] usb 1-1: USB disconnect, device number 22
[  291.753863][  T189] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  291.839373][ T8239] netlink: 'syz.4.673': attribute type 4 has an invalid length.
[  291.860381][   T30] audit: type=1400 audit(1787366754.452:551): avc:  denied  { watch watch_reads } for  pid=8227 comm="syz.1.671" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  291.899728][ T8236] process 'syz.1.671' launched '/dev/fd/9' with NULL argv: empty string added
[  291.934597][   T30] audit: type=1400 audit(1787366754.532:552): avc:  denied  { execute_no_trans } for  pid=8227 comm="syz.1.671" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  292.093551][   T30] audit: type=1400 audit(1787366754.692:553): avc:  denied  { create } for  pid=8244 comm="syz.4.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  292.178288][ T8249] netlink: 4884 bytes leftover after parsing attributes in process `syz.4.675'.
[  292.524528][ T5730] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  292.601934][ T8261] batman_adv: batadv0: Adding interface: dummy0
[  292.608348][ T8261] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.635033][ T8261] batman_adv: batadv0: Interface activated: dummy0
[  292.670827][ T8261] batadv0: mtu less than device minimum
[  292.677655][ T8261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  292.690679][ T8261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  292.701942][ T8261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  292.713819][ T8261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  292.725146][ T8261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  292.736392][ T8261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  292.747655][ T8261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  292.758984][ T8261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  292.770196][ T8261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  292.812565][ T5730] usb 1-1: Using ep0 maxpacket: 8
[  292.822154][ T5730] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  292.852634][ T5730] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  292.872068][ T5730] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  292.950772][ T5730] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  293.011702][ T5730] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  293.085805][ T5730] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  293.165678][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.549616][ T8252] 9p: Bad value for 'port'
[  295.966128][ T5598] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  296.121221][ T5730] usb 1-1: usb_control_msg returned -71
[  296.150750][ T5730] usbtmc 1-1:16.0: can't read capabilities
[  296.177628][ T5730] usb 1-1: USB disconnect, device number 23
[  296.237966][ T8280] syzkaller0: entered promiscuous mode
[  296.243562][ T8280] syzkaller0: entered allmulticast mode
[  296.270547][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  296.270575][   T30] audit: type=1400 audit(1787366758.862:555): avc:  denied  { read } for  pid=8291 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  296.303129][ T8290] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  296.752720][ T5730] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  296.833115][ T5598] usb 4-1: device descriptor read/64, error -71
[  296.912656][ T5730] usb 1-1: Using ep0 maxpacket: 32
[  296.925782][ T5730] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  296.955297][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.969166][ T5730] usb 1-1: Product: syz
[  296.989581][ T5730] usb 1-1: Manufacturer: syz
[  297.005485][ T5730] usb 1-1: SerialNumber: syz
[  297.021856][ T5730] usb 1-1: config 0 descriptor??
[  297.048282][ T5730] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  297.064727][ T5730] dvb-usb: bulk message failed: -22 (4/0)
[  297.082342][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  297.094497][ T5598] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  297.102266][ T5730] dvb-usb: bulk message failed: -22 (5/0)
[  297.108951][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  297.129215][ T5730] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  297.139837][ T5730] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  297.147983][ T5730] usb 1-1: media controller created
[  297.190169][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  297.239116][ T5730] usb 1-1: selecting invalid altsetting 3
[  297.247710][ T5730] ttusb2: set interface to alts=3 failed
[  297.266689][ T5598] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  297.298850][ T5598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.319285][ T5598] usb 4-1: Product: syz
[  297.324604][ T5730] DVB: Unable to find symbol tda10086_attach()
[  297.330971][ T5598] usb 4-1: Manufacturer: syz
[  297.335996][ T5730] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  297.349563][ T5598] usb 4-1: SerialNumber: syz
[  297.361074][ T5730] dvb-usb: bulk message failed: -22 (4/0)
[  297.367091][ T5598] usb 4-1: config 0 descriptor??
[  297.382653][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  297.407418][ T5730] dvb-usb: bulk message failed: -22 (5/0)
[  297.413676][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  297.430082][ T5730] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  297.629002][ T8299] netlink: 'syz.3.689': attribute type 1 has an invalid length.
[  297.681336][ T5730] usb 1-1: USB disconnect, device number 24
[  297.784992][ T5730] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  298.311000][ T5598] mos7840 4-1:0.0: required endpoints missing
[  298.335934][ T5598] usb 4-1: USB disconnect, device number 25
[  299.570694][ T5605] block nbd3: Receive control failed (result -32)
[  299.570828][ T5610] block nbd3: Receive control failed (result -32)
[  299.829355][ T8327] net_ratelimit: 10 callbacks suppressed
[  299.829372][ T8327] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  301.184291][   T30] audit: type=1400 audit(1787366763.472:556): avc:  denied  { create } for  pid=8329 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  301.266133][   T30] audit: type=1400 audit(1787366763.482:557): avc:  denied  { write } for  pid=8329 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  301.315183][   T30] audit: type=1400 audit(1787366763.492:558): avc:  denied  { connect } for  pid=8329 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  301.630809][ T8339] CIFS: VFS: UNC: path must begin with // or \\
[  301.637207][ T8339] Malformed UNC in devname
[  301.637207][ T8339] 
[  301.643800][ T8339] CIFS: VFS: Malformed UNC in devname
[  306.152355][ T8373] netlink: 'syz.5.710': attribute type 4 has an invalid length.
[  306.270253][   T30] audit: type=1400 audit(1787366768.862:559): avc:  denied  { ioctl } for  pid=8376 comm="syz.3.705" path="socket:[21382]" dev="sockfs" ino=21382 ioctlcmd=0x5875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  306.345203][ T8381] netlink: 4884 bytes leftover after parsing attributes in process `syz.4.714'.
[  307.394046][   T30] audit: type=1400 audit(1787366769.992:560): avc:  denied  { ioctl } for  pid=8384 comm="syz.3.715" path="socket:[21397]" dev="sockfs" ino=21397 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  307.521726][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.715'.
[  307.709531][ T8384] ALSA: mixer_oss: invalid OSS volume ''
[  308.104530][ T8398] netlink: 14 bytes leftover after parsing attributes in process `syz.1.713'.
[  308.331238][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.388213][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.442218][ T8398] bond0 (unregistering): Released all slaves
[  308.455121][ T8402] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.711' sets config #0
[  308.592556][ T5826] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  308.746885][   T30] audit: type=1400 audit(1787366771.342:561): avc:  denied  { getopt } for  pid=8407 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  308.787265][   T30] audit: type=1400 audit(1787366771.372:562): avc:  denied  { search } for  pid=8406 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  308.810945][   T30] audit: type=1400 audit(1787366771.372:563): avc:  denied  { read write } for  pid=8406 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1
[  308.845118][   T30] audit: type=1400 audit(1787366771.372:564): avc:  denied  { open } for  pid=8406 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1

syzkaller
syzkaller login: [  308.899436][   T30] audit: type=1400 audit(1787366771.372:565): avc:  denied  { lock } for  pid=8406 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1
[  308.950044][   T30] audit: type=1400 audit(1787366771.432:566): avc:  denied  { read } for  pid=8412 comm="syz.1.721" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  309.023099][   T30] audit: type=1400 audit(1787366771.432:567): avc:  denied  { open } for  pid=8412 comm="syz.1.721" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  309.083538][  T189] usb 5-1: new low-speed USB device number 26 using dummy_hcd
[  309.432601][  T189] usb 5-1: Invalid ep0 maxpacket: 16
[  310.582788][  T189] usb 5-1: new low-speed USB device number 27 using dummy_hcd
[  311.524612][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  311.688251][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  311.691931][  T189] usb 5-1: Invalid ep0 maxpacket: 16
[  311.694807][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  311.706818][   T30] audit: type=1400 audit(1787366774.002:568): avc:  denied  { create } for  pid=8429 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  311.712785][  T189] usb usb5-port1: attempt power cycle
[  311.923130][   T30] audit: type=1400 audit(1787366774.512:569): avc:  denied  { connect } for  pid=8436 comm="syz.3.729" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  312.332805][ T8444] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  312.429467][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  312.429482][   T30] audit: type=1400 audit(1787366775.022:571): avc:  denied  { setopt } for  pid=8436 comm="syz.3.729" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  312.462929][ T8444] xt_hashlimit: size too large, truncated to 1048576
[  312.508607][ T8447] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  313.330717][   T30] audit: type=1400 audit(1787366775.922:572): avc:  denied  { read } for  pid=8455 comm="syz.3.733" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  313.368800][ T8456] binder: 8455:8456 ioctl c00c6211 0 returned -14
[  314.433396][   T30] audit: type=1400 audit(1787366775.922:573): avc:  denied  { open } for  pid=8455 comm="syz.3.733" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  314.533894][  T189] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  314.562062][   T30] audit: type=1400 audit(1787366775.962:574): avc:  denied  { ioctl } for  pid=8455 comm="syz.3.733" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  314.631982][ T8466] Unknown vers= option specified: 3.0\
[  314.631982][ T8466] 
[  314.642088][ T8466] CIFS: VFS: Unknown vers= option specified: 3.0\
[  314.714434][  T189] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  314.747756][  T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.357826][   T30] audit: type=1400 audit(1787366777.942:575): avc:  denied  { read write } for  pid=8459 comm="syz.1.726" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  315.453011][   T30] audit: type=1400 audit(1787366777.942:576): avc:  denied  { open } for  pid=8459 comm="syz.1.726" path="/141/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  315.546814][   T30] audit: type=1400 audit(1787366778.012:577): avc:  denied  { ioctl } for  pid=8459 comm="syz.1.726" path="/141/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  315.861522][  T189] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  316.150627][ T8477] CIFS: VFS: UNC: path must begin with // or \\
[  316.156936][ T8477] Malformed UNC in devname
[  316.156936][ T8477] 
[  316.163655][ T8477] CIFS: VFS: Malformed UNC in devname
[  318.059831][    T9] usb 2-1: USB disconnect, device number 20
[  318.232155][   T30] audit: type=1400 audit(1787366780.822:578): avc:  denied  { setopt } for  pid=8492 comm="syz.1.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  318.306614][   T30] audit: type=1400 audit(1787366780.822:579): avc:  denied  { bind } for  pid=8492 comm="syz.1.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  320.031326][   T30] audit: type=1326 audit(1787366782.622:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8503 comm="syz.5.742" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7818f9e0d9 code=0x0
[  320.393645][ T8516] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  320.464176][  T189] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  320.483760][   T30] audit: type=1400 audit(1787366783.042:581): avc:  denied  { mount } for  pid=8512 comm="syz.4.749" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  320.518146][ T8516] Bluetooth: hci1: Opcode 0x0401 failed: -22
[  320.786836][  T189] usb 6-1: unable to get BOS descriptor or descriptor too short
[  320.831222][  T189] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  320.935254][  T189] usb 6-1: config 100 has an invalid interface number: 173 but max is 0
[  321.036768][  T189] usb 6-1: config 100 has no interface number 0
[  321.105701][  T189] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  321.235003][  T189] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  321.401931][  T189] usb 6-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0
[  321.466894][  T189] usb 6-1: config 100 interface 173 has no altsetting 0
[  321.548210][  T189] usb 6-1: string descriptor 0 read error: -22
[  321.598627][  T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.627358][   T30] audit: type=1400 audit(1787366784.212:582): avc:  denied  { unmount } for  pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  321.726059][ T8511] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  321.859165][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'.
[  322.418271][  T189] metro_usb 6-1:100.173: Metrologic USB to Serial converter detected
[  322.438027][  T189] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  322.572152][ T8526] syzkaller0: entered promiscuous mode
[  322.572567][ T5598] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  322.577689][ T8526] syzkaller0: entered allmulticast mode
[  322.622275][   T30] audit: type=1400 audit(1787366785.212:583): avc:  denied  { write } for  pid=8525 comm="syz.1.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  322.727920][ T5693] usb 6-1: USB disconnect, device number 7
[  323.607844][ T5598] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  323.628398][ T5693] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  323.669249][ T5598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  323.681499][ T5693] metro_usb 6-1:100.173: device disconnected
[  323.707238][ T5598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  323.733785][ T5598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  323.758026][ T5598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.617557][ T5598] usb 5-1: Product: syz
[  324.671835][ T5598] usb 5-1: Manufacturer: syz
[  324.687275][ T5598] usb 5-1: SerialNumber: syz
[  324.708211][ T5598] usb 5-1: config 0 descriptor??
[  324.710004][   T30] audit: type=1400 audit(1787366787.302:584): avc:  denied  { ioctl } for  pid=8538 comm="syz.5.757" path="socket:[23835]" dev="sockfs" ino=23835 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  324.971785][ T5598] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  325.179268][ T8524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.191485][ T8524] usb 5-1: Couldn't submit interrupt_out_urb -90
[  325.292900][ T8545] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.583679][ T5826] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  326.734423][   T30] audit: type=1400 audit(1787366789.302:585): avc:  denied  { getopt } for  pid=8554 comm="syz.0.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  327.198694][ T5598] usb 5-1: USB disconnect, device number 29
[  327.235733][ T5826] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  327.263314][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.280646][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.291109][ T5826] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  327.304802][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.336949][ T5826] usb 4-1: config 0 descriptor??
[  327.571621][ T8556] tipc: Started in network mode
[  327.581735][ T8556] tipc: Node identity 7f000001, cluster identity 4711
[  327.599417][ T8556] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  328.569559][ T5826] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  328.586796][ T8569] netlink: 'syz.4.765': attribute type 4 has an invalid length.
[  328.688661][ T8573] capability: warning: `syz.0.766' uses deprecated v2 capabilities in a way that may be insecure
[  328.848474][ T8579] ip6gre1: entered promiscuous mode
[  328.858110][ T8579] ip6gre1: entered allmulticast mode
[  329.403965][ T5826] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  330.033521][ T5826] usb 5-1: Using ep0 maxpacket: 32
[  330.044793][ T5826] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  330.046015][   T30] audit: type=1400 audit(1787366792.642:586): avc:  denied  { ioctl } for  pid=8590 comm="syz.0.772" path="socket:[23115]" dev="sockfs" ino=23115 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  330.059011][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.103412][ T5826] usb 5-1: Product: syz
[  330.123111][ T5826] usb 5-1: Manufacturer: syz
[  330.133361][ T5826] usb 5-1: SerialNumber: syz
[  330.148353][ T5826] usb 5-1: config 0 descriptor??
[  330.167529][ T5826] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  330.177686][ T5826] dvb-usb: bulk message failed: -22 (4/0)
[  330.192532][ T5826] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  330.221630][ T5826] dvb-usb: bulk message failed: -22 (5/0)
[  330.229998][ T5826] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  330.249805][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  330.265337][ T5826] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  330.274977][ T5826] usb 5-1: media controller created
[  330.291128][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  330.325406][ T5826] usb 5-1: selecting invalid altsetting 3
[  330.335328][ T5707] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  330.343536][ T5826] ttusb2: set interface to alts=3 failed
[  330.381751][ T5826] DVB: Unable to find symbol tda10086_attach()
[  331.396710][ T5826] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  331.410241][ T5826] dvb-usb: bulk message failed: -22 (4/0)
[  331.426834][ T5826] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  331.438754][ T5826] dvb-usb: bulk message failed: -22 (5/0)
[  331.444895][ T5826] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  331.461977][ T5826] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  331.474196][ T5707] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  331.489196][  T189] usb 4-1: USB disconnect, device number 27
[  331.502133][ T5707] usb 1-1: config index 0 descriptor too short (asked for 9, got 0)
[  331.521763][ T5707] usb 1-1: can't read configurations, error -22
[  331.590468][ T8604] ==================================================================
[  331.598562][ T8604] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0
[  331.598594][ T8604] Read of size 8 at addr ffff88802cac7e18 by task syz.5.775/8604
[  331.598609][ T8604] 
[  331.598617][ T8604] CPU: 0 UID: 0 PID: 8604 Comm: syz.5.775 Not tainted syzkaller #0 PREEMPT(full) 
[  331.598637][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  331.598647][ T8604] Call Trace:
[  331.598654][ T8604]  <TASK>
[  331.598659][ T8604]  dump_stack_lvl+0x100/0x190
[  331.598684][ T8604]  print_report+0x13d/0x4b0
[  331.598707][ T8604]  ? __virt_addr_valid+0x239/0x430
[  331.598730][ T8604]  ? dvb_device_open+0x33f/0x3b0
[  331.598748][ T8604]  kasan_report+0xdf/0x1c0
[  331.598763][ T8604]  ? dvb_device_open+0x33f/0x3b0
[  331.598782][ T8604]  ? __pfx_dvb_device_open+0x10/0x10
[  331.598801][ T8604]  dvb_device_open+0x33f/0x3b0
[  331.598820][ T8604]  ? __pfx_dvb_device_open+0x10/0x10
[  331.598838][ T8604]  chrdev_open+0x234/0x6a0
[  331.598860][ T8604]  ? __pfx_chrdev_open+0x10/0x10
[  331.598883][ T8604]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  331.598903][ T8604]  do_dentry_open+0x6ab/0x14d0
[  331.598923][ T8604]  ? __pfx_chrdev_open+0x10/0x10
[  331.598947][ T8604]  vfs_open+0x82/0x3f0
[  331.598962][ T8604]  path_openat+0x19fa/0x2440
[  331.598986][ T8604]  ? __pfx_path_openat+0x10/0x10
[  331.599011][ T8604]  do_file_open+0x20e/0x430
[  331.599033][ T8604]  ? __pfx_do_file_open+0x10/0x10
[  331.599061][ T8604]  ? _raw_spin_unlock+0x28/0x50
[  331.599082][ T8604]  ? alloc_fd+0x471/0x7a0
[  331.599107][ T8604]  do_sys_openat2+0x10f/0x1e0
[  331.599122][ T8604]  ? __pfx_do_sys_openat2+0x10/0x10
[  331.599138][ T8604]  ? __pfx_restore_altstack+0x10/0x10
[  331.599159][ T8604]  __x64_sys_openat+0x12d/0x210
[  331.599174][ T8604]  ? __pfx___x64_sys_openat+0x10/0x10
[  331.599189][ T8604]  ? __do_sys_rt_sigreturn+0x1da/0x2c0
[  331.599212][ T8604]  do_syscall_64+0x123/0x790
[  331.599236][ T8604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.599252][ T8604] RIP: 0033:0x7f7818f5e90e
[  331.599265][ T8604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  331.599280][ T8604] RSP: 002b:00007f7819d90b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  331.599297][ T8604] RAX: ffffffffffffffda RBX: 00007f7819d916c0 RCX: 00007f7818f5e90e
[  331.599308][ T8604] RDX: 0000000000040002 RSI: 00007f7819d90c00 RDI: ffffffffffffff9c
[  331.599318][ T8604] RBP: 00007f7819d90c00 R08: 0000000000000000 R09: 0000000000000000
[  331.599328][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  331.599338][ T8604] R13: 00007f7819226038 R14: 00007f7819225fa0 R15: 00007ffc5aa1b4a8
[  331.599353][ T8604]  </TASK>
[  331.599358][ T8604] 
[  331.861634][ T8604] Allocated by task 1:
[  331.865684][ T8604]  kasan_save_stack+0x30/0x50
[  331.870365][ T8604]  kasan_save_track+0x14/0x30
[  331.875035][ T8604]  __kasan_kmalloc+0xaa/0xb0
[  331.879612][ T8604]  __kmalloc_cache_noprof+0x2e7/0x6b0
[  331.884964][ T8604]  dvb_register_device+0x1d6/0x1e20
[  331.890150][ T8604]  dvb_register_frontend+0x552/0x820
[  331.895423][ T8604]  vidtv_bridge_probe+0x44b/0xa30
[  331.900435][ T8604]  platform_probe+0x106/0x1d0
[  331.905094][ T8604]  really_probe+0x241/0xa60
[  331.909587][ T8604]  __driver_probe_device+0x210/0x460
[  331.914867][ T8604]  driver_probe_device+0x4a/0x140
[  331.919898][ T8604]  __driver_attach+0x21f/0x5b0
[  331.924662][ T8604]  bus_for_each_dev+0x13e/0x1d0
[  331.929506][ T8604]  bus_add_driver+0x305/0x5b0
[  331.934174][ T8604]  driver_register+0x1e2/0x360
[  331.938929][ T8604]  vidtv_bridge_init+0x52/0x80
[  331.943696][ T8604]  do_one_initcall+0x11c/0x6f0
[  331.948452][ T8604]  kernel_init_freeable+0x6ea/0x7b0
[  331.953644][ T8604]  kernel_init+0x21/0x1e0
[  331.957970][ T8604]  ret_from_fork+0x730/0xd60
[  331.962555][ T8604]  ret_from_fork_asm+0x1a/0x30
[  331.967316][ T8604] 
[  331.969623][ T8604] Freed by task 8518:
[  331.973594][ T8604]  kasan_save_stack+0x30/0x50
[  331.978262][ T8604]  kasan_save_track+0x14/0x30
[  331.982924][ T8604]  kasan_save_free_info+0x3b/0x70
[  331.987930][ T8604]  __kasan_slab_free+0x5f/0x80
[  331.992690][ T8604]  kfree+0x22b/0x6c0
[  331.996576][ T8604]  dvb_device_put.part.0+0x57/0x90
[  332.001677][ T8604]  dvb_device_open+0x2ba/0x3b0
[  332.006424][ T8604]  chrdev_open+0x234/0x6a0
[  332.010837][ T8604]  do_dentry_open+0x6ab/0x14d0
[  332.015585][ T8604]  vfs_open+0x82/0x3f0
[  332.019633][ T8604]  path_openat+0x19fa/0x2440
[  332.024210][ T8604]  do_file_open+0x20e/0x430
[  332.028712][ T8604]  do_sys_openat2+0x10f/0x1e0
[  332.033372][ T8604]  __x64_sys_openat+0x12d/0x210
[  332.038202][ T8604]  do_syscall_64+0x123/0x790
[  332.042791][ T8604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.048681][ T8604] 
[  332.050993][ T8604] The buggy address belongs to the object at ffff88802cac7e00
[  332.050993][ T8604]  which belongs to the cache kmalloc-256 of size 256
[  332.065036][ T8604] The buggy address is located 24 bytes inside of
[  332.065036][ T8604]  freed 256-byte region [ffff88802cac7e00, ffff88802cac7f00)
[  332.078729][ T8604] 
[  332.081031][ T8604] The buggy address belongs to the physical page:
[  332.087419][ T8604] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cac6
[  332.096158][ T8604] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  332.104654][ T8604] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  332.112200][ T8604] page_type: f5(slab)
[  332.116167][ T8604] raw: 00fff00000000040 ffff88801c027b40 dead000000000100 dead000000000122
[  332.124741][ T8604] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  332.133313][ T8604] head: 00fff00000000040 ffff88801c027b40 dead000000000100 dead000000000122
[  332.141974][ T8604] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  332.150635][ T8604] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[  332.159294][ T8604] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  332.167943][ T8604] page dumped because: kasan: bad access detected
[  332.174337][ T8604] page_owner tracks the page as allocated
[  332.180026][ T8604] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7845830797
[  332.198677][ T8604]  post_alloc_hook+0xfd/0x120
[  332.203361][ T8604]  get_page_from_freelist+0x110d/0x35b0
[  332.208895][ T8604]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  332.214783][ T8604]  new_slab+0xa5/0x640
[  332.218836][ T8604]  refill_objects+0xe3/0x410
[  332.223413][ T8604]  __pcs_replace_empty_main+0x372/0x680
[  332.228952][ T8604]  __kmalloc_cache_noprof+0x47b/0x6b0
[  332.234306][ T8604]  bus_add_driver+0x92/0x5b0
[  332.238885][ T8604]  driver_register+0x1e2/0x360
[  332.243637][ T8604]  usb_register_driver+0x21c/0x3e0
[  332.248743][ T8604]  do_one_initcall+0x11c/0x6f0
[  332.253497][ T8604]  kernel_init_freeable+0x6ea/0x7b0
[  332.258680][ T8604]  kernel_init+0x21/0x1e0
[  332.262999][ T8604]  ret_from_fork+0x730/0xd60
[  332.267577][ T8604]  ret_from_fork_asm+0x1a/0x30
[  332.272505][ T8604] page_owner free stack trace missing
[  332.277845][ T8604] 
[  332.280146][ T8604] Memory state around the buggy address:
[  332.285754][ T8604]  ffff88802cac7d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  332.293804][ T8604]  ffff88802cac7d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  332.301868][ T8604] >ffff88802cac7e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  332.309916][ T8604]                             ^
[  332.314749][ T8604]  ffff88802cac7e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  332.322800][ T8604]  ffff88802cac7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  332.330858][ T8604] ==================================================================
[  332.922826][ T8608] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  333.201256][   T30] audit: type=1400 audit(1787366795.792:587): avc:  denied  { read } for  pid=4947 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  333.268457][ T5693] usb 5-1: USB disconnect, device number 30
[  333.306570][   T30] audit: type=1400 audit(1787366795.792:588): avc:  denied  { search } for  pid=4947 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  333.338640][ T5707] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  333.376338][ T8604] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  333.383553][ T8604] CPU: 1 UID: 0 PID: 8604 Comm: syz.5.775 Not tainted syzkaller #0 PREEMPT(full) 
[  333.392728][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  333.402773][ T8604] Call Trace:
[  333.406029][ T8604]  <TASK>
[  333.408937][ T8604]  dump_stack_lvl+0x100/0x190
[  333.413594][ T8604]  vpanic+0x553/0x970
[  333.417550][ T8604]  ? __pfx_vpanic+0x10/0x10
[  333.422024][ T8604]  ? dvb_device_open+0x33f/0x3b0
[  333.426946][ T8604]  panic+0xd1/0xe0
[  333.430639][ T8604]  ? __pfx_panic+0x10/0x10
[  333.435026][ T8604]  ? dvb_device_open+0x33f/0x3b0
[  333.439943][ T8604]  ? preempt_schedule_common+0x3c/0xb0
[  333.445391][ T8604]  check_panic_on_warn.cold+0x19/0x34
[  333.450749][ T8604]  end_report.part.0+0x3a/0x90
[  333.455491][ T8604]  kasan_report.cold+0xe/0x18
[  333.460150][ T8604]  ? dvb_device_open+0x33f/0x3b0
[  333.465063][ T8604]  ? __pfx_dvb_device_open+0x10/0x10
[  333.470326][ T8604]  dvb_device_open+0x33f/0x3b0
[  333.475078][ T8604]  ? __pfx_dvb_device_open+0x10/0x10
[  333.480358][ T8604]  chrdev_open+0x234/0x6a0
[  333.484758][ T8604]  ? __pfx_chrdev_open+0x10/0x10
[  333.489675][ T8604]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  333.495993][ T8604]  do_dentry_open+0x6ab/0x14d0
[  333.500744][ T8604]  ? __pfx_chrdev_open+0x10/0x10
[  333.505662][ T8604]  vfs_open+0x82/0x3f0
[  333.509705][ T8604]  path_openat+0x19fa/0x2440
[  333.514376][ T8604]  ? __pfx_path_openat+0x10/0x10
[  333.519302][ T8604]  do_file_open+0x20e/0x430
[  333.523785][ T8604]  ? __pfx_do_file_open+0x10/0x10
[  333.528802][ T8604]  ? _raw_spin_unlock+0x28/0x50
[  333.533629][ T8604]  ? alloc_fd+0x471/0x7a0
[  333.537942][ T8604]  do_sys_openat2+0x10f/0x1e0
[  333.542605][ T8604]  ? __pfx_do_sys_openat2+0x10/0x10
[  333.547777][ T8604]  ? __pfx_restore_altstack+0x10/0x10
[  333.553130][ T8604]  __x64_sys_openat+0x12d/0x210
[  333.557954][ T8604]  ? __pfx___x64_sys_openat+0x10/0x10
[  333.563297][ T8604]  ? __do_sys_rt_sigreturn+0x1da/0x2c0
[  333.568741][ T8604]  do_syscall_64+0x123/0x790
[  333.573311][ T8604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.579184][ T8604] RIP: 0033:0x7f7818f5e90e
[  333.583571][ T8604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  333.603161][ T8604] RSP: 002b:00007f7819d90b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  333.611554][ T8604] RAX: ffffffffffffffda RBX: 00007f7819d916c0 RCX: 00007f7818f5e90e
[  333.619498][ T8604] RDX: 0000000000040002 RSI: 00007f7819d90c00 RDI: ffffffffffffff9c
[  333.627439][ T8604] RBP: 00007f7819d90c00 R08: 0000000000000000 R09: 0000000000000000
[  333.635380][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  333.643322][ T8604] R13: 00007f7819226038 R14: 00007f7819225fa0 R15: 00007ffc5aa1b4a8
[  333.651269][ T8604]  </TASK>
[  333.654372][ T8604] Kernel Offset: disabled
[  333.658670][ T8604] Rebooting in 86400 seconds..