last executing test programs: 27m34.619454695s ago: executing program 3 (id=713): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100000000000000000006"], 0x114}], 0x1, 0x0, 0x0, 0x64000800}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0x6}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x80000000}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x44}}, 0x400c000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x0, 0x0, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback, 0x23}, 0x1c) r6 = dup(r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) sendto$inet(r6, &(0x7f0000000240)="911b403f8625e4aed2460090f709b508dc3d27c650e4f0f582f148cf010000006d3fb5fbaeb7ad91ca4046072bcea15fa271c4f8e05b910053b3af1a069ea35115a1af5b9b1498", 0x47, 0x4000084, 0x0, 0x0) r7 = socket(0xa, 0x3, 0xff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000100c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r8, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0xffffffff, @loopback, 0x7}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000140)=0x3, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) ioctl$HIDIOCAPPLICATION(r8, 0x4802, 0xd) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="cfb14e407d33ffffffffffff86dd697a262d00383afefe800000000000000000762446882c7891c2000000000000000000000000000102009078ecb56537524613bd00008001620813310009ff000000000000000000000000000000000001"], 0x0) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 27m32.770516253s ago: executing program 3 (id=722): socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x55056226, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) write$nci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="4200fcaeb9"], 0x5) syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086ddb17fa405eda417fd3b63ed12a48360fca33f00306700fe800000000000000000000000000000fe8000000000000000000000001200aa21000000000000000003000000000000001758090e541b64f22a8982d3f5aaacd21a0ca186608b74f100000000000000"], 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400400bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x3aba, &(0x7f0000000480)={0x0, 0x2155, 0x40, 0x8001002, 0x200003da}) r4 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001337f305142106728616240008000300"/31], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040084) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r6, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) r7 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) 27m31.934965265s ago: executing program 3 (id=725): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mremap(&(0x7f000004c000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) madvise(&(0x7f00000d7000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f000036a000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x1800017, &(0x7f0000000280)=ANY=[]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x3786c120, 0x401, 0x401, 0x1003, 0xfffffffc, 0x0, 0x0, 0x0, 0xa4801f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) dup3(r2, r0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x8) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0x80, 0x0}, 0x2000c005) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000001010200000000141a0000020000102000018014000180080001070020000108000200e00000010600034000000000180002801400018008000100ac1414aa080002009beddcac"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r10 = syz_io_uring_setup(0x1205, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x803, 0xffefffff}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) writev(r9, &(0x7f0000001800)=[{&(0x7f00000001c0)='*', 0x1}], 0x1) io_uring_enter(r10, 0x567, 0x0, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 27m30.108180864s ago: executing program 3 (id=730): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_off}]}) creat(&(0x7f0000000ac0)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet(r3, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001500)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x2, 0x200448c0) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100000400000000000000100002e756dccd8407964f404a9ecbff"], 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 27m27.516331173s ago: executing program 3 (id=736): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}}, 0x64000) 27m26.548184602s ago: executing program 3 (id=741): r0 = syz_open_dev$video4linux(&(0x7f0000010740), 0x6, 0x40) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000020880)={0x1, 0x0, {0x4, 0x1, 0x300a, 0x6, 0x5, 0x1, 0x1, 0x2}}) 27m26.091739211s ago: executing program 32 (id=741): r0 = syz_open_dev$video4linux(&(0x7f0000010740), 0x6, 0x40) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000020880)={0x1, 0x0, {0x4, 0x1, 0x300a, 0x6, 0x5, 0x1, 0x1, 0x2}}) 19m33.925601367s ago: executing program 4 (id=2379): syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000305ba34021040e01168b0000000109021b0001000000000904e5fd010202ff00090507031000814406bf193f47f421ba5ed2b1fbded414dda22b567cdad7aa1663b0ccee4ebb32bcaa30fe62f3f9f1c8a4596f3ffb503a95ae2a6543e5882d9ba0f3b7eb0567840ecbf044044ee09082e1dfe1bd7f2de5cc6ce84cb98eaeb8540f9de4440c83389c908953f06bee3979861aeb4064312b26780ed8d97b413de3d78d5a37cca1c35b4db867ea645c39d4fec947a28037a66f78c48dc101812e68150bbb677e2768d3895c234a7fa74960d6e8b5e77f7762d7b6e88f2f04fd7e5eff84370a8994ede4"], 0x0) 19m31.860364113s ago: executing program 4 (id=2388): r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) 19m31.423042503s ago: executing program 4 (id=2389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020400) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x100000000000000) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000e35e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 19m29.054049074s ago: executing program 4 (id=2400): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00', r3}, 0x18) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) write$FUSE_BMAP(r1, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x5}}, 0x18) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0x7}}}, 0x24}}, 0x0) 19m28.231964567s ago: executing program 4 (id=2404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1b) r3 = socket$packet(0x11, 0x3, 0x300) symlink(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x9, 0x9, 0x6, 0xa, 0x2, 0x5, 0xffffffffffffffff, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0x1, 0x1, 0x7, 0x6, 0x1ff, 0x80, 0x7, 0x7, 0x7, 0xc, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3, 0x8fffffffe, 0x403, 0x1, 0x4, 0x9, 0x3, 0x3, 0x1, 0x0, 0x6, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba58, 0x6, 0xa, 0x88b, 0x6, 0xe000000000000000, 0xfffffffffffffffd, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x800000000000, 0x9, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0x0, 0x4, 0xfffffffffffffffa, 0x5, 0x10000000000000a, 0x10, 0x2f, 0x9, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x7, 0x201, 0x77a, 0xb3, 0x5, 0xad, 0x623b, 0x6, 0x0, 0x7, 0x4, 0x200, 0x6, 0x8, 0x0, 0x9, 0x93, 0x5, 0x401, 0x2, 0x2775e12e, 0x680000000000, 0x5, 0x7, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x5, 0x8, 0x1000, 0x0, 0x5, 0x7, 0x5, 0x8, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x100000001, 0x5b, 0x80000000005, 0x6, 0x20000000004, 0x0, 0x7f, 0x3]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a0001"], 0x565c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x700, 0x7, 0x401, 0x3, {{0x15, 0x4, 0x0, 0x27, 0x54, 0x66, 0x0, 0x3b, 0x4, 0x0, @private=0xa010101, @private=0xa010100, {[@cipso={0x86, 0x40, 0x3, [{0x0, 0xb, "937ae025731666a902"}, {0x0, 0x5, "0d4ce8"}, {0x2, 0x7, "9b93c6cba5"}, {0x2, 0x9, "52878174c0c45e"}, {0x79770bc17f1cca86, 0xa, "4055b9e7e122402b"}, {0x4, 0x3, "d1"}, {0x6, 0xd, "31c00735b60cca3502ded2"}]}]}}}}}) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) 19m27.61598478s ago: executing program 4 (id=2407): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440), 0x8300, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$inet6(0xa, 0x80001, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r4}, 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000380)={{&(0x7f0000000140)={'Accelerator1\x00', {&(0x7f00000002c0)=@adf_str={@bank={'Bank', '2', 'InterruptCoalescingEnabled\x00'}, {"ee59628728a5c092f665901215f2a1af37befa8c28e6d4ef80753bf67569029d82b3321fa57b1ecc8612d222d993dc57d7d0452c08ddc19747a050552c37eab9"}, {&(0x7f0000000200)=@adf_hex={@normal='NumberCyInstances\x00', {0x40}}}}}}}, 0x9f}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r5, r6, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0), 0x8) 19m27.503930118s ago: executing program 33 (id=2407): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440), 0x8300, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$inet6(0xa, 0x80001, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r4}, 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000380)={{&(0x7f0000000140)={'Accelerator1\x00', {&(0x7f00000002c0)=@adf_str={@bank={'Bank', '2', 'InterruptCoalescingEnabled\x00'}, {"ee59628728a5c092f665901215f2a1af37befa8c28e6d4ef80753bf67569029d82b3321fa57b1ecc8612d222d993dc57d7d0452c08ddc19747a050552c37eab9"}, {&(0x7f0000000200)=@adf_hex={@normal='NumberCyInstances\x00', {0x40}}}}}}}, 0x9f}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r5, r6, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0), 0x8) 18m51.014531972s ago: executing program 0 (id=2528): io_setup(0x2, 0x0) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0xb9, 0x0, 0x1}, &(0x7f0000000380)) io_submit(0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_io_uring_setup(0x99d, &(0x7f0000000140)={0x0, 0x90c4, 0x5ff18230771f2f5e, 0xfffffffe, 0x8c}, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x933, 0x7) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000003c0)) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) pwritev(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0xfffffffa, 0x1f8) socket(0x10, 0x803, 0x0) ustat(0x801, &(0x7f0000000300)) get_mempolicy(0x0, 0x0, 0x20000200, &(0x7f0000ffd000/0x2000)=nil, 0x3) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x300000, 0x800, 0x0, 0x3}, 0x1c) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x2}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x3, @pix_mp={0x4, 0x973, 0x56555959, 0x9, 0x3, [{0x2, 0x9}, {0x7e, 0xffffffc0}, {0x6, 0x2}, {0x3, 0x10}, {0x6, 0x9}, {0x1, 0x9}, {0x5, 0x2}, {0x394, 0x8}], 0x5, 0xb, 0x2, 0x0, 0x5}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x4000, 0x0, {}, {0x0, 0x0, 0x0, 0xfe, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 18m49.40712127s ago: executing program 0 (id=2536): syz_usb_connect(0x2, 0x3f, &(0x7f0000000880)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d0001000000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file1\x00') open(&(0x7f0000000380)='./bus\x00', 0x3612c2, 0x0) 18m47.399233224s ago: executing program 0 (id=2549): userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x100008b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x3a}, 0x11) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRES16=r1, @ANYBLOB="010000001900fcdbdf25120000001800018014000200766574fbf30724683000000000000000080000000800090000000000080007f2a6f1614706cd24a60ed5534dd4923c6da5a60b66f2212f0ad7b3f04b0c2ba165822a5bbee1bce83f0200000000000000010093580b9546e75461c248a6bac24c9115998ad8ab7304c2c0f2f70977a20cb90609beffbd5cc9623b2ba918a5aa89f36b13d783a04c99e97cf24c5637e289030501c51768bd44de878a31946516acd00d1b61583755a0b8608fd9ed78d8b1c3820c7da29672b8b141784b3043a1ae6668577751328ff9f1d82c4b2df7b3a1dea9d07f789fc02236b181d3fbb2d14cba1d1c64d47962af0e4179428c59fe3152180125b160ebbb533b5707a9909292d15a0ab0bd411412deaa81c2e68aea61a272e42e63ac4617e065c3ca09177c4416e0ada70449e42fc0ca2df3c27e4468caab12b1657482d79733bc91edb7bd9c11668d92559dcd4164e648ed8322b49617dd9d48aa337669d3b9d294a51ff3aefaaaa89f7b9eb6a03c4894597ef5a946d7db43452a7bd7f39ba46d41033d7d73b4d28314e2530aad"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0)=0xd, 0x4) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000000800054000000017080006400000120008000240000000020900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ptrace(0x10, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\b\x00\x00', @ANYRES16=r7, @ANYBLOB="00042dbd7000fcdbdf250100000014000700ff010000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040040) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r6, 0x3b8c, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x100, 0x0}) 18m46.284223245s ago: executing program 0 (id=2555): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) 18m45.719197364s ago: executing program 0 (id=2557): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000280)={{0x2, 0x4e21, @multicast2}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x8, {0x2, 0x4e24, @remote}}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r3, 0x0, 0xf8, 0x8, 0x7ff, 0x6, {0x8, 0x8, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0x7c0, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) 18m45.123384938s ago: executing program 0 (id=2560): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000080)=0x8) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) fsync(r6) 18m44.662384973s ago: executing program 34 (id=2560): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000080)=0x8) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) fsync(r6) 15.880822015s ago: executing program 7 (id=6293): sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket(0xa, 0x3, 0x3a) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x400000000010, 0x3, 0x7) r0 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) read$msr(r1, &(0x7f000001b240)=""/102400, 0x19000) r2 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r2, 0x0, 0x0, 0x1, 0x3000) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x10000014}) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r3, &(0x7f0000000100)={0xffffffffffffffff, r3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) msgsnd(r2, &(0x7f0000000000)=ANY=[], 0x8, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700080000008e9363c4c553ed462c985832579f4dacc9eb9273954201a3272706dafa5114ce0875ac03d836"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 14.273656466s ago: executing program 7 (id=6296): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r10}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r11, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x57, 0x8, 0x0, {0x0, 0x107}, {0x1}, @const={0x4, {0x5, 0x6, 0x0, 0x35}}}) r13 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x453, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x202, 0x22) write$cgroup_subtree(r14, &(0x7f0000000100)={[{0x2d, 'perf_event'}]}, 0xc) 12.941463783s ago: executing program 2 (id=6301): mmap$IORING_OFF_SQ_RING(&(0x7f0000b49000/0x1000)=nil, 0x1000, 0x6, 0x30, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) fcntl$setstatus(r0, 0x4, 0x400) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000280)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000200), 0x2, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x450841, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x10000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e547400000005000500050000000500010006000000"], 0x50}, 0x1, 0x0, 0x0, 0x44084}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0xc) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800}) 12.886215767s ago: executing program 7 (id=6302): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="201170"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff4e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0}}, 0x10) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) ioctl$KIOCSOUND(r2, 0x4b2f, 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0x0, 0xb, "88bd91aa28528000000000007500000400"}) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b"], 0xec) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48880}, 0xe6009e20529ca4e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xff32, &(0x7f00000001c0)) 10.13914887s ago: executing program 6 (id=6307): r0 = inotify_init1(0x81000) read(r0, &(0x7f0000000100)=""/246, 0xf6) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e61b3a40fd08020904cc000096c872000000000000000000000000000000000062cd8848535eb289348394cfecde2f5d36766b60c5fd1031c9d43229338fa308135152bf42007e1629b97e85f74fda19a699702294210a70cb52deadf515aa210f03f276c5c74d2aea9213a3fa4847385519e5821285be3bc5de6e7c06277381653bc2da3894fce2c25d559fd04a7873e8f218f81acc8003eb8620ca9b070bedffdd086828f14bbb"], 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) inotify_init1(0x81000) (async) read(r0, &(0x7f0000000100)=""/246, 0xf6) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e61b3a40fd08020904cc000096c872000000000000000000000000000000000062cd8848535eb289348394cfecde2f5d36766b60c5fd1031c9d43229338fa308135152bf42007e1629b97e85f74fda19a699702294210a70cb52deadf515aa210f03f276c5c74d2aea9213a3fa4847385519e5821285be3bc5de6e7c06277381653bc2da3894fce2c25d559fd04a7873e8f218f81acc8003eb8620ca9b070bedffdd086828f14bbb"], 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) (async) 9.92878066s ago: executing program 1 (id=6308): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xfef5, 0x3c00, 0x2, 0xbfdffffa}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x2000}, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) 8.337939547s ago: executing program 2 (id=6309): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x42400, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x80) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000810001000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b74000c00e63b9ba2ea4f115a67245b00000000000000000000000000584cbf2649a50f2dbc0000a8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d9cfd56d3c86e55010000000000000000000000004137dfff2f8f00009a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10080) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="89000000000100000000008221009e815930404fe3e2353c3ebf00"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 7.224159234s ago: executing program 5 (id=6310): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000b40)=ANY=[@ANYBLOB="428dc4177c324b87573c06fcf7ca7185ed107ce1c3c3b76b539a15462de2f8bc77f0dda1d5cc0d94a0f4adf78f5fa9f1581963f922fec74436a995ed33c5330961d168d990c9e33ae80e6f291a308a6842426cafa118966af1a62199310780ff92156838699dcce90aa6e378516486bbc27f08572d1a75d8dc9c99434153cda2cc157302e6803bfcaa20782f304fd0a551791192fcddc1d9476b62a3203d19"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x40, 0x0, 0x0, 0x80000001}, {0x6}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_open_dev$usbfs(0x0, 0x76, 0x101301) 6.588765406s ago: executing program 2 (id=6311): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xd9, 0x2, &(0x7f0000000040)={0x8, "810556c721393f4084cc9efc7ddbe76f2fb91f7abe359f7ed2401f27a7f77d040b"}}) 6.588068002s ago: executing program 6 (id=6312): syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x430c80) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0x6b, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x1000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)=""/100, 0x64}, {&(0x7f0000004e40)=""/4112, 0x1010}, {&(0x7f0000008340)=""/145, 0x91}, {&(0x7f0000008240)=""/234, 0xea}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000a00)=""/206, 0xce}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f00000002c0)=""/33, 0x21}], 0xa}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000b00)=""/202, 0xca}, {&(0x7f0000001a00)=""/4097, 0x1001}, {0x0}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010022, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}}, 0x0) 6.535045464s ago: executing program 2 (id=6313): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x7) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x7fff, 0x5}, &(0x7f00000002c0)=0x10) kcmp(r4, r4, 0x6, r5, r6) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) fcntl$addseals(r7, 0x409, 0x9) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r8, 0x84, 0x1c, &(0x7f0000000340), &(0x7f0000000380)=0x4) r9 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc2}, &(0x7f0000000440)={0x0, "1ef3dbe19046b1545e0a00f27dc1108ff2d8a698ea216fcc6d935f0d3dab8a804e499a92690233729a40cf1fb2f154bebee7062909d5923b1d03587123afe5b8", 0x34}, 0x48, r9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) read$fb(r7, &(0x7f0000000540)=""/47, 0x2f) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f00000009c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000600)={0x34c, r11, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5b, 0x3, "db4943d345a8bd4993d80e257764a6a1da3355a9014495f5f13a0e269a1f8d697db22c86b10e6289e5475b35c6f10b6bdbeaa9edf293f1886642997c0e245726cbb9555ae0f77f331e79a43b1055cc3b46da261263375b"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfa0}]}, @TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x89, 0x3, "3c9879f5c650a855e0c51fb7b8e04b8cbd11208aee5353a9c340057e91ae3806bcd4bfabc1047225f59250e5c5a751857219411bd4e1c0e932ffc823109f89ba952b2d1d3f5a6fb25e4855c78f43d868451483e0ca28de0195e040146dc88b59417f1d0065111e29da39b016beb6546fed0b3d14f1d34a74a4f3d949ce93aac05a80e05b29"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "cbf312e4c2d888327c9712e03fdb9f95225ba41817"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "a6884efd737e75fc492db4e21977e621f2eb9a3492b9660b10abd1f7d1a6d4"}}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba41}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "697cda099d55c561aef9730e94caf0621bcc18a328f66f47f4"}}]}, @TIPC_NLA_SOCK={0xd4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xddb9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7c11}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x775}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) pipe2$watch_queue(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r12, 0xd0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000000a80)={&(0x7f0000000a40)=""/41, 0x29}) r13 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x0, 0x10, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x3f4}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xda, 0xd, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0x7, 0x8}}]}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x250, 0x0, 0xca, 0xc, 0x20, 0x8}, 0x2d, &(0x7f0000000b40)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x6, 0x4, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x7, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x2c, 0x8, 0x0, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0xba, 0xf00, 0xe, [0x3f0f]}]}, 0x5, [{0x100, &(0x7f0000000b80)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x240a}}, {0xad, &(0x7f0000000d00)=@string={0xad, 0x3, "98dbb60014cdde83be02b2f453a2be540b5b0ebca27aeb031db74185fd580df221d3ecb0a99fbaca8326ab78000e2d74125403fc2b7b0ea3906c8ec4b18469cd0050376f11f53f206637f3ef3b421405423a8785dad6b94f482cea1bec653d5a0808919d8a90995594586f8ba26c6c54554186dae3f407b57fbd34014029e38767c9c99305623205425ad57d732a81c58fa3e050f48bd8bd5ca6fa5a655a327f4d8303e803593ae4b39993"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x447}}]}) syz_usb_control_io$hid(r13, &(0x7f0000001000)={0x24, &(0x7f0000000e80)={0x0, 0x10, 0x7f, {0x7f, 0x21, "0c077afdc7e24dbea134704b82710067575793b0e234a56e901b46eb9cffe36bda054163e74239f349398b809ca4c2faba9aac31ceea9f027fe36bd3d42b880cc85f61452d5270a0ab5564506814c73b6d9f9e5a404529f0ad6cdd369029288a59244e6ec03e9b9abb2df2892f221c928a6366c7303f3c0b134a20a1ca"}}, &(0x7f0000000f40)={0x0, 0x3, 0x34, @string={0x34, 0x3, "eb106c09c07be56decc73f15495b92a07bb871fa343ec04b6bb13fbaf250534cd1754d8ebb715225c6dd464928252358b273"}}, &(0x7f0000000f80)={0x0, 0x22, 0x13, {[@global=@item_012={0x2, 0x1, 0xe, "b491"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x8, "9a46dcf9"}, @main=@item_4={0x3, 0x0, 0xb, "467c85ea"}, @global=@item_012={0x2, 0x1, 0x4, 'jG'}, @local=@item_012={0x1, 0x2, 0x0, "bd"}]}}, &(0x7f0000000fc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x6bf}}}}, &(0x7f00000012c0)={0x2c, &(0x7f0000001040)={0x0, 0x12, 0xf5, "73c967336ddbe10b605c69f247215738a1d83f2405a8d3dd712e57bcecc7804371a75af588fb5bf7c8649bfd16ed007ad0f07bce60ac2f65fb60d2a2295a46b34cfc303ee95ed28d916f50c1f4f652c06eaba802640e39f49dec01147346ad3c02fd80c6908d1a7ef17d38ffa3fdbf1fcba84464dd0c3c0ad8f1005ba66d593b2ffce73213ee2a064b16000df5c7bd786a45fdf74f7dd3d0681c15d5ccf86c3ec069adc9df1e474de101908326a732871da79f166616e6f5803da73e8ecfe076f30283bd1642a634dd81647edc40eb9da0f7c22547abb9dff2f343fbc9b316ee45e8c6e8d2d6b4d4c65eb3f08ba24a303c7d730379"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0xe4}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000011c0)={0x20, 0x1, 0xa8, "2f167e76382cd03d19c4c198c80d6158e35f51f5a05c3ceb3a6c069711fdc432a66ace84aa9de52a0f8454fd5a48dcde6971a27814b4e2c78e91af3fac2ea16563b72936d93d7b58bb8c4c84d4fbd170fc49550357dd94fa61f4e28de4abdeb798a79bc1a51498dc057c643263614506fd469761e82b128f6c539ac82e7550d1135fa0f901ae9e6520aa540f4a7e532ed56f245c6487fb1404012aead9acf5ecfaa7783c9428ac7a"}, &(0x7f0000001280)={0x20, 0x3, 0x1, 0x6}}) socket$igmp(0x2, 0x3, 0x2) ioctl$TUNSETVNETBE(r12, 0x400454de, &(0x7f0000001300)=0x1) 5.981795286s ago: executing program 5 (id=6314): r0 = syz_open_dev$video4linux(&(0x7f0000010740), 0x6, 0x11d240) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) syz_open_procfs(0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) 5.900131786s ago: executing program 1 (id=6315): io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0xb9, 0x0, 0x1}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_io_uring_setup(0x99d, &(0x7f0000000140)={0x0, 0x90c4, 0x5ff18230771f2f5e, 0xfffffffe, 0x8c}, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x933, 0x7) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="70000000200001002cbd7000fddbdf250a8020440000000c12000000050016003a00000014000200fe80000000000000000000000000200008000a0000000000140001"], 0x70}}, 0x0) get_mempolicy(0x0, 0x0, 0x20000200, &(0x7f0000ffd000/0x2000)=nil, 0x3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x300000, 0x800, 0x0, 0x3}, 0x1c) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x2}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x3, @pix_mp={0x4, 0x973, 0x56555959, 0x9, 0x3, [{0x2, 0x9}, {0x7e, 0xffffffc0}, {0x6, 0x2}, {0x3, 0x10}, {0x6, 0x9}, {0x1, 0x9}, {0x5, 0x2}, {0x394, 0x8}], 0x5, 0xb, 0x2, 0x0, 0x5}}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) 5.503352252s ago: executing program 6 (id=6316): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x200) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x9735646a3e1ba35, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000300)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)="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", 0x114, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) userfaultfd(0x1) close_range(r5, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.494184846s ago: executing program 7 (id=6317): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xa8902, 0x96) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0x3, 0x3, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) userfaultfd(0x801) r2 = socket$unix(0x1, 0x1, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x7ff, 0x200240) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) close(r2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x50}) 5.425128636s ago: executing program 5 (id=6318): syz_io_uring_setup(0x6870, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x47ffffa, 0x1a6c42) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) accept(r0, &(0x7f0000000080)=@can, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000000)='(', 0xfef4, 0x8000, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x2000000}, 0x2}, 0x1c) 4.613055969s ago: executing program 6 (id=6319): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xffffffffffffff91, 0x24, 0xf, 0x1, 0x0, 0x3, 0xfffe, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x4}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000200)='mm_page_free\x00', r2}, 0x18) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000040)) socket$l2tp6(0xa, 0x2, 0x73) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r3], 0x4}}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) 4.220097964s ago: executing program 5 (id=6320): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = eventfd(0x5) mincore(&(0x7f0000715000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/92) read$eventfd(r1, &(0x7f0000000200), 0x8) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r2, 0x100000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000300)=0xb0000) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x309880, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x30, r3, 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)=0x3cde, 0x4) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="af3b48f7f8e11e7b66d52a5bbbce5743b54fcc9e1722ea38128200000000a8b5d4944a649c940d6c037ee1910601e0ef5dadb1c334ad24f8b1ab0001000000000000c9806ca5992b1258373f5f80edb4a672638d7a544e03c9db8822dd8e8b3f7018892cf8810173b4a2750005ab038cd67082b973710511d1f977cff2bc4db5f6f7976e7629bcd67f0833ce7a441b8cb5de6fea225d2300000000"], 0x34}, 0x1, 0x0, 0x0, 0x40008080}, 0x5821748b7109dd73) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x6}, @any, 0x0, 0xf7, 0x5e, 0x7, 0x100000000000006}) 3.868567164s ago: executing program 5 (id=6321): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x4, 0x9, 0x12, 0x0, "9422dc1692b3b3fd1534f7fde81da7e2a9222497036a57f4c08386b588eabcb7db4c067e38b162193caf9e8eac8f52f3265f705fc21cf4fa58c01a1defbba1bf", "90171f576880ef1ff7f39abb638f94de2f0f706d1e93cda1e7568d25d93f7bb9", [0x4, 0x40]}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1b, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0xb, 0x0, 0x1}, {0xae5, 0x0, 0x1}, {0x9}, {0x1}, {0x6}, {0x8, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6}, {0x7ff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x75a}, {0xfff, 0x0, 0x1}, {0x4}, {0xf0001, 0x0, 0x1}, {0x9}, {0xffff}, {}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x9}, {0x2}, {0x3ff}, {0x800, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5}, {0xd24a2, 0x0, 0x1}, {0x572a, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x200}, {0x1a}]}]}, 0xa0}}, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012920000905", @ANYRESHEX=r0], 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180100180000000000000010000000030005000000000002000000e000000200000000000000000800120000000000000000000000000006200000000000000100000000000000ff010000000000000000000000000001ff020000000000000000000000000001030006000000000002000000ffffffff000000000000000008001900000000000a"], 0xc0}}, 0x20000000) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xff2e) (fail_nth: 4) r7 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r7, &(0x7f00000008c0)='/', 0x1, 0x0) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x0) fchdir(r9) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x8) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 3.865813102s ago: executing program 1 (id=6322): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x4, 0x0, 0x79ce, 0xc, 0x3b, 0x8000, &(0x7f0000000140)="f0efaf3b8c4eb6cae9dcffb375df7275c26f72c73508e5967f338ae63dfaccba67ba0b87523a9d3918a79737e03db5a69635f47213cbf058b2a288"}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x1bb6, r0, 0x0, {0x10000, 0x2efb}, 0x7}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_getnetconf={0x14, 0x52, 0x19ded1b34d630bf9, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004015}, 0x4000800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, &(0x7f00000013c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setgid(0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000044) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000080)) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f00000000c0)={0x401, 0x9}) 3.654778742s ago: executing program 1 (id=6323): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) (async) close(0x3) setxattr$security_selinux(&(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:memory_device_t:s0\x00', 0x25, 0x2) (async, rerun: 32) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) (rerun: 32) 3.180067377s ago: executing program 2 (id=6324): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000140)='./file1\x00', 0x1bb) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000000)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000801, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcl816\x00', [0x9, 0x80008000, 0x1, 0xe, 0x0, 0x0, 0x5, 0xf, 0x0, 0x1, 0x7, 0x5, 0x6, 0x4, 0x10000, 0x6, 0x1, 0x8, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x7fd, 0xe2df, 0x3, 0x4e, 0x1004, 0x6b, 0x7, 0x5, 0x9]}) 3.112330091s ago: executing program 2 (id=6325): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b21000000"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x44800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) 2.941353454s ago: executing program 1 (id=6326): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = syz_io_uring_setup(0xac9, &(0x7f0000000500)={0x0, 0x8a16, 0x100, 0x0, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x141000, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaedf, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000100)={0x1, 0x20, 0x40, 0x6e1, 0x4, 0x0, 0x2, 0xb05, 0x20, 0x3, 0x40, 0xe, &(0x7f0000000000)=[0x4], 0x1, 0x0}) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r8, 0x110, 0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r9, 0x7a9, &(0x7f00000001c0)={{@any, 0x6}, 0x2, 0x7, 0x7, 0x5, 0x4, 0xb, 0x8, 0x8000000000000001}) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) r10 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r10, 0xc1086201, &(0x7f0000000380)={'binder0\x00'}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r2, 0x6efc, 0x3900, 0xb, 0x0, 0x0) 2.902514703s ago: executing program 7 (id=6327): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, 0x0, &(0x7f0000000180)='%pK \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) eventfd2(0x3, 0x80000) rt_tgsigqueueinfo(r3, r3, 0x1e, &(0x7f00000003c0)={0x1c, 0x0, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x2}}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r7, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) close(r0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) 1.960263118s ago: executing program 7 (id=6328): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000240)={0x2, 'ip_vti0\x00', {0xffff}, 0x81}) lsm_list_modules(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}}, 0x8004) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) r3 = socket(0xa, 0x3, 0xff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x40000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0xc048aec8, &(0x7f0000000000)={0x40004}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000122000/0x2000)=nil, 0x2000}, 0x1000000}) recvmmsg(r3, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0xeb82}], 0x1, 0x102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) r6 = syz_open_dev$media(&(0x7f0000000080), 0x34, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000100)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.723000793s ago: executing program 1 (id=6329): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x10, r3, 0xcf032000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1c63643ecd702802, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) getdents64(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0xffff, 0x1, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) 1.120148009s ago: executing program 6 (id=6330): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) unlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x200) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x9735646a3e1ba35, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000300)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)="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", 0x114, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) userfaultfd(0x1) close_range(r5, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 139.024476ms ago: executing program 6 (id=6331): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10139, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x3e, 0x0, 0x2, 0xfffffffe}, 0x28) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000001c0)={0x2, @pix={0x0, 0x0, 0x34565559, 0x0, 0x2000000, 0x0, 0x25, 0xfffffffd}}) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001200050100000000fedb0300000000000000000028001a00ffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) read(r8, 0x0, 0x0) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 0s ago: executing program 5 (id=6332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = eventfd(0x5) write$eventfd(r1, &(0x7f0000000240)=0xfffffffffffffffa, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x202406, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) read$eventfd(r1, &(0x7f0000000200), 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x1d5, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRES8=r2], 0x28}, 0x1, 0x0, 0x0, 0x2000054}, 0x40800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=@newqdisc={0x154, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xffff}, {0x4, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x10, 0x1, {0xff, 0x75, 0x3, 0x1, 0x16, 0xe, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xfffffffa}, @TCA_CHOKE_STAB={0x104, 0x2, "8202c8de497910e14278d998bde4b334c640510d86ad7d9a77510f531a1dcd4b63533e7d63a00ca56547a58898fbc541e01e0c5aca60d571d09135277238568119538fb036f7d296e2342b0540075d308fbd1846682a156e8a3f8e73d39e1b4f4d9c15e7f5695f2a029865d4a7773eba97d6074457cb4d6bf6c2bfe943ac32c7fdd61ca3e8c4824c1441fe2ec44d785b19fb693841aecca94fdf4bd053654ff4422b9077036a38c5fb55841af1a4b4aaa8e31adcd023dbddd61bff8d94d587a4b95bbce84cb27ca74400882377ddf65b59427913359bf68287674625c17f4a07327c99885c1a721b0164e59ee5818afc3071e2849396ebf6b8c142fe2a95a45e"}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x80000001, 0x181, 0x1, 0xe, 0x8, 0x2, 0xfffffffc, 0x2, 0xffffffff, 0x7ffe, 0x7, 0x723, 0x400, 0x2, 0x5, 0x104, 0xffffffa6, 0x9, 0x0, 0x1, 0x3fd, 0x7, 0x201, 0x5, 0xab, 0x1, 0x4, 0x40000, 0x8, 0x225fd71d, 0x3]}) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000400)={0x6000004, 0xfffffd52, 0x0, 0x1, 0x81e}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800faaf0e3087a0090d00001800000002000000000000000000008400000000ffffffff00000006030000000000"], 0x0, 0x32}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000480)=ANY=[@ANYRES32=r6], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): : config 0 has no interface number 2 [ 1833.526855][ T2722] usb 6-1: config 0 interface 37 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1833.537837][ T2722] usb 6-1: config 0 interface 37 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1833.558896][ T2722] usb 6-1: config 0 interface 37 altsetting 7 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1833.579933][ T2722] usb 6-1: config 0 interface 37 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1833.616079][ T2722] usb 6-1: config 0 interface 37 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1833.625008][ T4493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5842'. [ 1833.627361][ T2722] usb 6-1: config 0 interface 37 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 1833.646989][ T2722] usb 6-1: config 0 interface 37 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 1833.649970][ T30] audit: type=1400 audit(5001882.940:1770): avc: denied { watch watch_reads } for pid=4490 comm="syz.1.5842" path="pipe:[107224]" dev="pipefs" ino=107224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1833.658006][ T2722] usb 6-1: config 0 interface 37 altsetting 7 has a duplicate endpoint with address 0x8E, skipping [ 1833.695229][ T2722] usb 6-1: config 0 interface 95 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 1833.706211][ T2722] usb 6-1: config 0 interface 95 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1833.719217][ T2722] usb 6-1: config 0 interface 95 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1833.731258][ T2722] usb 6-1: config 0 interface 37 has no altsetting 0 [ 1833.739091][ T2722] usb 6-1: config 0 interface 95 has no altsetting 0 [ 1833.754524][ T2722] usb 6-1: config 0 interface 142 has no altsetting 0 [ 1833.764973][ T2722] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=51.15 [ 1833.774440][ T2722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.782513][ T2722] usb 6-1: Product: syz [ 1833.790085][ T2722] usb 6-1: Manufacturer: syz [ 1833.856612][ T2722] usb 6-1: SerialNumber: syz [ 1834.099112][ T2722] usb 6-1: config 0 descriptor?? [ 1834.325344][ T4518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5847'. [ 1834.787608][ T4520] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1834.796071][ T4520] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1834.909671][ T2722] flexcop_usb: set interface failed. [ 1835.056720][ T2722] b2c2_flexcop_usb 6-1:0.37: probe with driver b2c2_flexcop_usb failed with error -22 [ 1835.780397][ T2722] flexcop_usb: set interface failed. [ 1835.792875][ T2722] b2c2_flexcop_usb 6-1:0.95: probe with driver b2c2_flexcop_usb failed with error -22 [ 1835.807714][ T2722] flexcop_usb: set interface failed. [ 1835.813257][ T2722] b2c2_flexcop_usb 6-1:0.142: probe with driver b2c2_flexcop_usb failed with error -22 [ 1835.834265][ T2722] usb 6-1: USB disconnect, device number 97 [ 1836.787943][ T4558] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5854'. [ 1837.440706][ T4556] can: request_module (can-proto-3) failed. [ 1837.645797][ T2722] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1838.065024][ T4564] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5856'. [ 1838.075721][ T2722] usb 6-1: Using ep0 maxpacket: 32 [ 1838.224369][ T30] audit: type=1400 audit(5001887.510:1771): avc: denied { create } for pid=4566 comm="syz.7.5857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1838.258157][ T2722] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1838.263395][ T30] audit: type=1400 audit(5001887.550:1772): avc: denied { sys_admin } for pid=4566 comm="syz.7.5857" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1838.288952][ C0] vkms_vblank_simulate: vblank timer overrun [ 1838.779616][ T2722] usb 6-1: config 0 has no interfaces? [ 1838.785384][ T2722] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1838.794593][ T2722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.819913][ T4576] 9pnet_virtio: no channels available for device syz [ 1839.331189][ T2722] usb 6-1: config 0 descriptor?? [ 1839.339759][ T2722] usb 6-1: can't set config #0, error -71 [ 1839.357258][ T2722] usb 6-1: USB disconnect, device number 98 [ 1839.408138][ T30] audit: type=1400 audit(5001888.680:1773): avc: denied { checkpoint_restore } for pid=4566 comm="syz.7.5857" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1839.442398][ T4589] FAULT_INJECTION: forcing a failure. [ 1839.442398][ T4589] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.470731][ T30] audit: type=1400 audit(5001888.730:1774): avc: denied { create } for pid=4587 comm="syz.1.5859" name="#91" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1839.496654][ T4589] CPU: 0 UID: 0 PID: 4589 Comm: syz.1.5859 Not tainted syzkaller #0 PREEMPT(full) [ 1839.496681][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1839.496691][ T4589] Call Trace: [ 1839.496696][ T4589] [ 1839.496703][ T4589] dump_stack_lvl+0x16c/0x1f0 [ 1839.496730][ T4589] should_fail_ex+0x512/0x640 [ 1839.496752][ T4589] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1839.496776][ T4589] should_failslab+0xc2/0x120 [ 1839.496794][ T4589] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1839.496814][ T4589] ? getname_flags.part.0+0x4c/0x550 [ 1839.496838][ T4589] ? getname_flags.part.0+0x4c/0x550 [ 1839.496856][ T4589] getname_flags.part.0+0x4c/0x550 [ 1839.496878][ T4589] getname_flags+0x93/0xf0 [ 1839.496892][ T4589] do_sys_openat2+0xb8/0x1d0 [ 1839.496910][ T4589] ? __pfx_do_sys_openat2+0x10/0x10 [ 1839.496931][ T4589] ? __fget_files+0x20e/0x3c0 [ 1839.496950][ T4589] __x64_sys_open+0x153/0x1e0 [ 1839.496968][ T4589] ? __pfx___x64_sys_open+0x10/0x10 [ 1839.496991][ T4589] ? rcu_is_watching+0x12/0xc0 [ 1839.497012][ T4589] do_syscall_64+0xcd/0xfa0 [ 1839.497035][ T4589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.497050][ T4589] RIP: 0033:0x7fe7dd98eec9 [ 1839.497062][ T4589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1839.497076][ T4589] RSP: 002b:00007fe7de7f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1839.497091][ T4589] RAX: ffffffffffffffda RBX: 00007fe7ddbe5fa0 RCX: 00007fe7dd98eec9 [ 1839.497101][ T4589] RDX: 0000000000000000 RSI: 00000000003612c2 RDI: 0000200000000380 [ 1839.497110][ T4589] RBP: 00007fe7de7f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.497119][ T4589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1839.497132][ T4589] R13: 00007fe7ddbe6038 R14: 00007fe7ddbe5fa0 R15: 00007fff015469e8 [ 1839.497153][ T4589] [ 1839.498927][ T30] audit: type=1400 audit(5001888.730:1775): avc: denied { link } for pid=4587 comm="syz.1.5859" name="#91" dev="tmpfs" ino=2637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1840.104506][ T4588] overlayfs: conflicting options: nfs_export=on,index=off [ 1840.115924][ T30] audit: type=1400 audit(5001888.730:1776): avc: denied { rename } for pid=4587 comm="syz.1.5859" name="#92" dev="tmpfs" ino=2637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1840.225030][ T30] audit: type=1400 audit(5001889.010:1777): avc: denied { write } for pid=4586 comm="syz.6.5860" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1840.706136][ T1204] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1841.198545][ T4628] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5870'. [ 1841.215826][ T1204] usb 2-1: Using ep0 maxpacket: 32 [ 1841.230018][ T1204] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.241999][ T1204] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1841.251340][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.271397][ T4628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5870'. [ 1841.275723][ T1204] usb 2-1: Product: syz [ 1841.288881][ T1204] usb 2-1: Manufacturer: syz [ 1841.299215][ T1204] usb 2-1: SerialNumber: syz [ 1841.311594][ T1204] usb 2-1: config 0 descriptor?? [ 1841.322075][ T1204] usb 2-1: bad CDC descriptors [ 1841.332162][ T1204] usb 2-1: unsupported MDLM descriptors [ 1841.494071][ T4628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=4628 comm=syz.6.5870 [ 1841.507189][ T4640] netlink: 144 bytes leftover after parsing attributes in process `syz.7.5871'. [ 1841.538378][ T4605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5864'. [ 1841.576608][ T4605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5864'. [ 1841.699112][ T1204] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1841.838837][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5864'. [ 1841.937107][ T1204] usb 6-1: Using ep0 maxpacket: 32 [ 1841.946058][ T1204] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.956239][ T1204] usb 6-1: config 0 has no interfaces? [ 1841.961868][ T1204] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1841.971213][ T1204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.980410][ T1204] usb 6-1: config 0 descriptor?? [ 1842.080924][ T2722] usb 2-1: USB disconnect, device number 18 [ 1842.315312][ T30] audit: type=1400 audit(5001891.600:1778): avc: denied { create } for pid=4650 comm="syz.2.5874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1843.351141][ T4674] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5878'. [ 1843.540677][ T4676] 9pnet_virtio: no channels available for device syz [ 1844.700390][ T1204] usb 6-1: USB disconnect, device number 99 [ 1844.771027][ T30] audit: type=1400 audit(5001894.060:1779): avc: denied { append } for pid=4688 comm="syz.5.5881" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1844.794075][ C1] vkms_vblank_simulate: vblank timer overrun [ 1844.958290][ T4696] FAULT_INJECTION: forcing a failure. [ 1844.958290][ T4696] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.002274][ T4696] CPU: 1 UID: 0 PID: 4696 Comm: syz.2.5883 Not tainted syzkaller #0 PREEMPT(full) [ 1845.002292][ T4696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1845.002299][ T4696] Call Trace: [ 1845.002303][ T4696] [ 1845.002307][ T4696] dump_stack_lvl+0x16c/0x1f0 [ 1845.002329][ T4696] should_fail_ex+0x512/0x640 [ 1845.002347][ T4696] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1845.002365][ T4696] should_failslab+0xc2/0x120 [ 1845.002378][ T4696] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1845.002394][ T4696] ? skb_clone+0x190/0x3f0 [ 1845.002413][ T4696] ? skb_clone+0x190/0x3f0 [ 1845.002428][ T4696] skb_clone+0x190/0x3f0 [ 1845.002445][ T4696] nfnetlink_rcv_batch+0x1cf/0x2350 [ 1845.002464][ T4696] ? __lock_acquire+0x62e/0x1ce0 [ 1845.002483][ T4696] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1845.002505][ T4696] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1845.002522][ T4696] ? __asan_memset+0x23/0x50 [ 1845.002538][ T4696] ? __nla_validate_parse+0x600/0x2880 [ 1845.002557][ T4696] ? __pfx___nla_validate_parse+0x10/0x10 [ 1845.002571][ T4696] ? cap_capable+0xb3/0x250 [ 1845.002590][ T4696] ? __nla_parse+0x40/0x60 [ 1845.002604][ T4696] nfnetlink_rcv+0x3c1/0x430 [ 1845.002618][ T4696] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1845.002635][ T4696] netlink_unicast+0x5a7/0x870 [ 1845.002649][ T4696] ? __pfx_netlink_unicast+0x10/0x10 [ 1845.002664][ T4696] netlink_sendmsg+0x8c8/0xdd0 [ 1845.002677][ T4696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1845.002693][ T4696] ____sys_sendmsg+0xa98/0xc70 [ 1845.002707][ T4696] ? copy_msghdr_from_user+0x10a/0x160 [ 1845.002723][ T4696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1845.002744][ T4696] ___sys_sendmsg+0x134/0x1d0 [ 1845.002761][ T4696] ? __pfx____sys_sendmsg+0x10/0x10 [ 1845.002795][ T4696] __sys_sendmsg+0x16d/0x220 [ 1845.002811][ T4696] ? __pfx___sys_sendmsg+0x10/0x10 [ 1845.002836][ T4696] do_syscall_64+0xcd/0xfa0 [ 1845.002854][ T4696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.002865][ T4696] RIP: 0033:0x7fc16618eec9 [ 1845.002875][ T4696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1845.002886][ T4696] RSP: 002b:00007fc166fcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1845.002897][ T4696] RAX: ffffffffffffffda RBX: 00007fc1663e5fa0 RCX: 00007fc16618eec9 [ 1845.002904][ T4696] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1845.002911][ T4696] RBP: 00007fc166fcd090 R08: 0000000000000000 R09: 0000000000000000 [ 1845.002917][ T4696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1845.002924][ T4696] R13: 00007fc1663e6038 R14: 00007fc1663e5fa0 R15: 00007fffe8197ec8 [ 1845.002938][ T4696] [ 1845.264055][ C1] vkms_vblank_simulate: vblank timer overrun [ 1845.825851][ T4707] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5884'. [ 1846.639260][ T9] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1846.795768][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1846.803025][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.844463][ T30] audit: type=1400 audit(5001896.130:1780): avc: denied { execute } for pid=4725 comm="syz.1.5891" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=108072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1846.966915][ T9] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1846.976167][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.984163][ T9] usb 7-1: Product: syz [ 1847.009291][ T9] usb 7-1: Manufacturer: syz [ 1847.013938][ T9] usb 7-1: SerialNumber: syz [ 1847.047028][ T9] usb 7-1: config 0 descriptor?? [ 1847.057395][ T9] usb 7-1: bad CDC descriptors [ 1847.063658][ T9] usb 7-1: unsupported MDLM descriptors [ 1847.323249][ T4709] vlan2: entered promiscuous mode [ 1847.333188][ T4709] vlan2: entered allmulticast mode [ 1847.340980][ T4709] hsr_slave_1: entered allmulticast mode [ 1847.376875][ T4746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5890'. [ 1847.465791][ T4746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5890'. [ 1847.529202][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5890'. [ 1848.830896][ T4751] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5895'. [ 1849.846036][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5896'. [ 1849.982717][ T4751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1850.014921][ T9] usb 7-1: USB disconnect, device number 57 [ 1850.083785][ T30] audit: type=1400 audit(5001899.330:1781): avc: denied { setopt } for pid=4759 comm="syz.5.5897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1850.169913][ T4757] 8021q: adding VLAN 0 to HW filter on device team0 [ 1850.205035][ T4757] bond1: (slave team0): Enslaving as an active interface with an up link [ 1850.274013][ T4815] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5898'. [ 1850.589802][ T4817] 9pnet_virtio: no channels available for device syz [ 1850.826886][ T4765] bond1 (unregistering): (slave team0): Releasing backup interface [ 1850.920213][ T4765] bond1 (unregistering): Released all slaves [ 1851.306741][ T4864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5900'. [ 1851.486586][ T4873] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5903'. [ 1852.048632][ T4879] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5905'. [ 1853.016026][ T4891] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5909'. [ 1853.565164][ T4891] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5909'. [ 1854.254130][ T4916] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5914'. [ 1854.306963][ T1204] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 1854.518405][ T1204] usb 6-1: not running at top speed; connect to a high speed hub [ 1854.527980][ T1204] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1854.539322][ T1204] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1854.550509][ T1204] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1855.656821][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5918'. [ 1856.511575][ T4936] netlink: 'syz.2.5919': attribute type 1 has an invalid length. [ 1856.547903][ T30] audit: type=1400 audit(5001905.800:1782): avc: denied { create } for pid=4935 comm="syz.2.5919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1856.605951][ T30] audit: type=1400 audit(5001905.800:1783): avc: denied { write } for pid=4935 comm="syz.2.5919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1856.632947][ T4938] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1856.646200][ T4938] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1856.656673][ T4938] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1856.730146][ T30] audit: type=1400 audit(5001906.020:1784): avc: denied { write } for pid=4927 comm="syz.6.5917" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1856.817041][ T4982] delete_channel: no stack [ 1856.823761][ T30] audit: type=1400 audit(5001906.110:1785): avc: denied { setopt } for pid=4981 comm="syz.2.5921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1856.875886][ T7409] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1857.047249][ T1204] usb 6-1: string descriptor 0 read error: -71 [ 1857.053639][ T1204] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1857.055733][ T7409] usb 8-1: Using ep0 maxpacket: 16 [ 1857.063000][ T1204] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.079514][ T1204] usb 6-1: can't set config #1, error -71 [ 1857.087800][ T7409] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.093430][ T1204] usb 6-1: USB disconnect, device number 100 [ 1857.098329][ T7409] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1857.179250][ T7409] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1857.195854][ T7409] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.204036][ T7409] usb 8-1: Product: syz [ 1857.211230][ T7409] usb 8-1: Manufacturer: syz [ 1857.216198][ T7409] usb 8-1: SerialNumber: syz [ 1857.223172][ T7409] usb 8-1: config 0 descriptor?? [ 1857.636344][ T30] audit: type=1400 audit(5001906.910:1786): avc: denied { recv } for pid=4939 comm="syz.7.5920" saddr=10.128.0.169 src=34000 daddr=10.128.0.164 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1858.456141][T17175] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1858.478769][ T30] audit: type=1400 audit(5001907.770:1787): avc: denied { read append } for pid=5014 comm="syz.6.5926" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1858.505044][ T30] audit: type=1400 audit(5001907.790:1788): avc: denied { open } for pid=5014 comm="syz.6.5926" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1858.542169][ T30] audit: type=1400 audit(5001907.820:1789): avc: denied { ioctl } for pid=5014 comm="syz.6.5926" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1858.644624][T17175] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1858.658207][T17175] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1858.668449][T17175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.949691][T17175] usb 3-1: config 0 descriptor?? [ 1859.155031][ T5028] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5928'. [ 1859.731214][ T2722] usb 8-1: USB disconnect, device number 16 [ 1860.095552][T17175] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 1861.902402][ T2722] usb 3-1: USB disconnect, device number 9 [ 1862.927761][ T30] audit: type=1400 audit(5001912.220:1790): avc: denied { unmount } for pid=18234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1863.182482][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5936'. [ 1863.514052][ T30] audit: type=1400 audit(5001912.800:1791): avc: denied { ioctl } for pid=5081 comm="syz.6.5938" path="socket:[109348]" dev="sockfs" ino=109348 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1863.857069][ T5092] program syz.7.5939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1863.986426][ T5098] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5941'. [ 1864.054756][ T5099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5941'. [ 1864.055693][ T5102] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5943'. [ 1868.246411][ T5136] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5949'. [ 1868.264341][ T5136] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5949'. [ 1868.521298][ T30] audit: type=1400 audit(5001917.810:1792): avc: denied { accept } for pid=5137 comm="syz.6.5952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1868.540675][ C0] vkms_vblank_simulate: vblank timer overrun [ 1868.827413][ T5156] block nbd1: NBD_DISCONNECT [ 1868.832985][ T5156] block nbd1: Disconnected due to user request. [ 1868.840890][ T5156] block nbd1: shutting down sockets [ 1869.628926][ T5174] netlink: 'syz.2.5957': attribute type 1 has an invalid length. [ 1869.817261][ T5177] tipc: Started in network mode [ 1869.822168][ T30] audit: type=1400 audit(5001919.070:1793): avc: denied { map } for pid=5173 comm="syz.2.5957" path="socket:[108478]" dev="sockfs" ino=108478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1869.822249][ T5177] tipc: Node identity d63c56715e6f, cluster identity 4711 [ 1869.898621][ T5177] tipc: Enabled bearer , priority 0 [ 1869.911852][ T5179] syzkaller0: entered promiscuous mode [ 1869.917726][ T5179] syzkaller0: entered allmulticast mode [ 1870.308522][ T5177] ip6tnl0: mtu greater than device maximum [ 1870.318961][ T5176] tipc: Resetting bearer [ 1870.753233][ T5176] tipc: Disabling bearer [ 1871.438209][ T1204] usb 6-1: new low-speed USB device number 101 using dummy_hcd [ 1871.650333][ T5232] FAULT_INJECTION: forcing a failure. [ 1871.650333][ T5232] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.663256][ T5232] CPU: 1 UID: 0 PID: 5232 Comm: syz.1.5971 Not tainted syzkaller #0 PREEMPT(full) [ 1871.663280][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1871.663290][ T5232] Call Trace: [ 1871.663297][ T5232] [ 1871.663304][ T5232] dump_stack_lvl+0x16c/0x1f0 [ 1871.663335][ T5232] should_fail_ex+0x512/0x640 [ 1871.663359][ T5232] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1871.663386][ T5232] should_failslab+0xc2/0x120 [ 1871.663406][ T5232] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1871.663437][ T5232] ? create_new_namespaces+0x30/0xa90 [ 1871.663465][ T5232] ? create_new_namespaces+0x30/0xa90 [ 1871.663486][ T5232] create_new_namespaces+0x30/0xa90 [ 1871.663506][ T5232] __do_sys_setns+0x210/0x1920 [ 1871.663521][ T5232] ? __might_fault+0xe3/0x190 [ 1871.663547][ T5232] ? __pfx___do_sys_setns+0x10/0x10 [ 1871.663574][ T5232] ? rcu_is_watching+0x12/0xc0 [ 1871.663599][ T5232] do_syscall_64+0xcd/0xfa0 [ 1871.663627][ T5232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.663644][ T5232] RIP: 0033:0x7fe7dd9906f7 [ 1871.663659][ T5232] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1871.663674][ T5232] RSP: 002b:00007fe7de7f3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1871.663692][ T5232] RAX: ffffffffffffffda RBX: 00007fe7ddbe5fa0 RCX: 00007fe7dd9906f7 [ 1871.663704][ T5232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 1871.663713][ T5232] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 1871.663722][ T5232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1871.663729][ T5232] R13: 00007fe7ddbe6038 R14: 00007fe7ddbe5fa0 R15: 00007fff015469e8 [ 1871.663744][ T5232] [ 1871.678091][ T1204] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1871.864308][ T5233] CIFS mount error: No usable UNC path provided in device string! [ 1871.864308][ T5233] [ 1871.874424][ T5233] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1871.904252][ T30] audit: type=1400 audit(5001921.140:1794): avc: denied { create } for pid=5226 comm="syz.2.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1871.924624][ C0] vkms_vblank_simulate: vblank timer overrun [ 1871.932391][ T30] audit: type=1400 audit(5001921.140:1795): avc: denied { bind } for pid=5226 comm="syz.2.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1871.962416][ T1204] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.972724][ T1204] usb 6-1: config 1 interface 0 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1871.985997][ T1204] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1872.010099][ T1204] usb 6-1: string descriptor 0 read error: -22 [ 1872.016422][ T1204] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1872.025485][ T1204] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.039544][ T1204] usb 6-1: bad CDC descriptors [ 1872.133119][ T5242] kvm: kvm [5241]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1872.142760][ T5242] kvm: kvm [5241]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1872.168870][ T5242] loop7: detected capacity change from 0 to 16384 [ 1872.261576][ T1204] usb 6-1: USB disconnect, device number 101 [ 1872.488225][ T5242] loop7: detected capacity change from 16384 to 0 [ 1873.802146][ T5275] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1873.815248][ T30] audit: type=1400 audit(5001923.090:1796): avc: denied { mounton } for pid=5270 comm="syz.7.5976" path="/99/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1874.035578][ T30] audit: type=1400 audit(5001923.090:1797): avc: denied { getattr } for pid=5270 comm="syz.7.5976" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1874.046744][ T5280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5979'. [ 1876.008329][T17175] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1876.034727][ T5297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5980'. [ 1876.079752][ T5296] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1876.086697][ T30] audit: type=1400 audit(5001925.380:1798): avc: denied { mounton } for pid=5295 comm="syz.2.5981" path="/583/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1876.210772][ T5296] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1876.440558][T17175] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1876.649193][T17175] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1876.959967][T17175] usb 8-1: string descriptor 0 read error: -71 [ 1876.986598][T17175] usb 8-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1877.034586][T17175] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.092513][T17175] usb 8-1: can't set config #3, error -71 [ 1877.101080][T17175] usb 8-1: USB disconnect, device number 17 [ 1877.690913][ T5323] tipc: Enabled bearer , priority 10 [ 1877.984815][ T5335] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5987'. [ 1878.885907][ T30] audit: type=1400 audit(5001927.270:1799): avc: denied { read } for pid=5324 comm="syz.2.5987" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1878.885953][ T30] audit: type=1400 audit(5001927.270:1800): avc: denied { open } for pid=5324 comm="syz.2.5987" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1878.885976][ T30] audit: type=1400 audit(5001927.270:1801): avc: denied { ioctl } for pid=5324 comm="syz.2.5987" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1878.954890][ T10] tipc: Node number set to 2287162993 [ 1879.009431][ C0] vkms_vblank_simulate: vblank timer overrun [ 1879.022553][ T5328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5986'. [ 1879.138755][ T5347] overlayfs: missing 'lowerdir' [ 1879.396475][ T5361] netlink: 'syz.2.5993': attribute type 4 has an invalid length. [ 1879.405814][T17175] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1879.555739][T17175] usb 7-1: Using ep0 maxpacket: 32 [ 1879.564669][T17175] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1879.573210][T17175] usb 7-1: config 0 has no interface number 0 [ 1879.581622][T17175] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1879.593513][T17175] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.601742][T17175] usb 7-1: Product: syz [ 1879.606794][T17175] usb 7-1: Manufacturer: syz [ 1879.611452][T17175] usb 7-1: SerialNumber: syz [ 1879.627290][T17175] usb 7-1: config 0 descriptor?? [ 1879.644514][T17175] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1879.873581][ T5870] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1879.938764][ T30] audit: type=1400 audit(5001929.210:1802): avc: denied { ioctl } for pid=5348 comm="syz.6.5992" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1879.973613][ C0] vkms_vblank_simulate: vblank timer overrun [ 1880.219804][ T30] audit: type=1400 audit(5001929.220:1803): avc: denied { connect } for pid=5348 comm="syz.6.5992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1880.235738][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 1880.307393][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1880.326586][ T5870] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1880.335917][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.355274][ T5870] usb 2-1: Product: syz [ 1880.363361][ T5870] usb 2-1: Manufacturer: syz [ 1880.373542][ T5870] usb 2-1: SerialNumber: syz [ 1880.382191][ T5870] usb 2-1: config 0 descriptor?? [ 1880.395333][ T5870] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1880.408555][ T5870] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1880.474979][ T5377] FAULT_INJECTION: forcing a failure. [ 1880.474979][ T5377] name failslab, interval 1, probability 0, space 0, times 0 [ 1880.488265][ T5377] CPU: 0 UID: 0 PID: 5377 Comm: syz.7.5995 Not tainted syzkaller #0 PREEMPT(full) [ 1880.488291][ T5377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1880.488302][ T5377] Call Trace: [ 1880.488309][ T5377] [ 1880.488315][ T5377] dump_stack_lvl+0x16c/0x1f0 [ 1880.488349][ T5377] should_fail_ex+0x512/0x640 [ 1880.488375][ T5377] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1880.488405][ T5377] should_failslab+0xc2/0x120 [ 1880.488426][ T5377] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1880.488451][ T5377] ? __alloc_skb+0x2b2/0x380 [ 1880.488481][ T5377] ? __alloc_skb+0x2b2/0x380 [ 1880.488502][ T5377] __alloc_skb+0x2b2/0x380 [ 1880.488525][ T5377] ? __pfx___alloc_skb+0x10/0x10 [ 1880.488553][ T5377] ? if_nlmsg_size+0x475/0xaf0 [ 1880.488588][ T5377] rtmsg_ifinfo_build_skb+0x81/0x280 [ 1880.488612][ T5377] rtmsg_ifinfo+0x9f/0x1a0 [ 1880.488636][ T5377] netif_state_change+0x17f/0x3b0 [ 1880.488654][ T5377] ? __pfx_netif_state_change+0x10/0x10 [ 1880.488678][ T5377] ? dev_change_xdp_fd+0x1c7/0x330 [ 1880.488708][ T5377] do_setlink.constprop.0+0x387d/0x4380 [ 1880.488744][ T5377] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 1880.488778][ T5377] ? __lock_acquire+0xb97/0x1ce0 [ 1880.488815][ T5377] ? __mutex_trylock_common+0xe9/0x250 [ 1880.488840][ T5377] ? rcu_is_watching+0x12/0xc0 [ 1880.488862][ T5377] ? trace_contention_end+0xdd/0x130 [ 1880.488880][ T5377] ? __mutex_lock+0x1c5/0x1060 [ 1880.488905][ T5377] ? __pfx___mutex_lock+0x10/0x10 [ 1880.488921][ T5377] ? cap_capable+0xb3/0x250 [ 1880.488963][ T5377] rtnl_newlink+0x18e0/0x2000 [ 1880.488998][ T5377] ? __pfx_rtnl_newlink+0x10/0x10 [ 1880.489022][ T5377] ? find_held_lock+0x2b/0x80 [ 1880.489044][ T5377] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1880.489071][ T5377] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1880.489102][ T5377] ? __lock_acquire+0x62e/0x1ce0 [ 1880.489144][ T5377] ? find_held_lock+0x2b/0x80 [ 1880.489164][ T5377] ? __pfx_rtnl_newlink+0x10/0x10 [ 1880.489189][ T5377] ? __pfx_rtnl_newlink+0x10/0x10 [ 1880.489213][ T5377] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1880.489240][ T5377] ? __pfx_rtnl_newlink+0x10/0x10 [ 1880.489268][ T5377] rtnetlink_rcv_msg+0x95b/0xe90 [ 1880.489297][ T5377] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1880.489331][ T5377] ? ref_tracker_free+0x37c/0x830 [ 1880.489352][ T5377] netlink_rcv_skb+0x158/0x420 [ 1880.489370][ T5377] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1880.489398][ T5377] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1880.489424][ T5377] ? netlink_deliver_tap+0x1ae/0xd30 [ 1880.489457][ T5377] netlink_unicast+0x5a7/0x870 [ 1880.489477][ T5377] ? __pfx_netlink_unicast+0x10/0x10 [ 1880.489505][ T5377] netlink_sendmsg+0x8c8/0xdd0 [ 1880.489526][ T5377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1880.489554][ T5377] ____sys_sendmsg+0xa98/0xc70 [ 1880.489579][ T5377] ? copy_msghdr_from_user+0x10a/0x160 [ 1880.489604][ T5377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1880.489636][ T5377] ___sys_sendmsg+0x134/0x1d0 [ 1880.489664][ T5377] ? __pfx____sys_sendmsg+0x10/0x10 [ 1880.489721][ T5377] __sys_sendmsg+0x16d/0x220 [ 1880.489745][ T5377] ? __pfx___sys_sendmsg+0x10/0x10 [ 1880.489787][ T5377] do_syscall_64+0xcd/0xfa0 [ 1880.489814][ T5377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.489831][ T5377] RIP: 0033:0x7fc2e8b8eec9 [ 1880.489847][ T5377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1880.489864][ T5377] RSP: 002b:00007fc2e9a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1880.489882][ T5377] RAX: ffffffffffffffda RBX: 00007fc2e8de5fa0 RCX: 00007fc2e8b8eec9 [ 1880.489894][ T5377] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 1880.489904][ T5377] RBP: 00007fc2e9a47090 R08: 0000000000000000 R09: 0000000000000000 [ 1880.489915][ T5377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1880.489925][ T5377] R13: 00007fc2e8de6038 R14: 00007fc2e8de5fa0 R15: 00007ffd76d59c68 [ 1880.489950][ T5377] [ 1880.492948][ T5377] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1880.822410][ C0] vkms_vblank_simulate: vblank timer overrun [ 1881.097466][ T5365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.106331][ T5365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.316273][ T5870] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1881.400387][ T5383] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1881.862921][ T30] audit: type=1400 audit(5001931.150:1804): avc: denied { map } for pid=5396 comm="syz.7.6000" path="socket:[110917]" dev="sockfs" ino=110917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1881.887565][ T30] audit: type=1400 audit(5001931.150:1805): avc: denied { read accept } for pid=5396 comm="syz.7.6000" path="socket:[110917]" dev="sockfs" ino=110917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1881.929417][ T5870] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1881.937631][ T5870] em28xx 2-1:0.0: board has no eeprom [ 1881.995969][ T5870] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1882.004018][ T5870] em28xx 2-1:0.0: dvb set to bulk mode. [ 1882.010978][ T9] em28xx 2-1:0.0: Binding DVB extension [ 1882.022653][ T5870] usb 2-1: USB disconnect, device number 19 [ 1882.031540][ T5870] em28xx 2-1:0.0: Disconnecting em28xx [ 1882.057305][ T9] em28xx 2-1:0.0: Registering input extension [ 1882.063767][ T5870] em28xx 2-1:0.0: Closing input extension [ 1882.075293][ T5870] em28xx 2-1:0.0: Freeing device [ 1882.161434][T17175] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1882.168558][T17175] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 1882.182681][T17175] usb 7-1: USB disconnect, device number 58 [ 1882.838287][ T30] audit: type=1400 audit(5001932.130:1806): avc: denied { read } for pid=5439 comm="syz.6.6005" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1882.842003][ T5443] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6002'. [ 1883.366077][ T30] audit: type=1400 audit(5001932.130:1807): avc: denied { open } for pid=5439 comm="syz.6.6005" path="/179/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1883.389260][ T30] audit: type=1400 audit(5001932.130:1808): avc: denied { ioctl } for pid=5439 comm="syz.6.6005" path="/179/file0/file0" dev="fuse" ino=3 ioctlcmd=0x2282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1884.349902][ T5464] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1884.371135][ T5464] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1884.396066][T17175] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1884.480174][ T30] audit: type=1400 audit(5001933.770:1809): avc: denied { read } for pid=5471 comm="syz.6.6013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1884.536665][ T30] audit: type=1400 audit(5001933.830:1810): avc: denied { connect } for pid=5471 comm="syz.6.6013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1884.595935][ T30] audit: type=1400 audit(5001933.890:1811): avc: denied { read } for pid=5471 comm="syz.6.6013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1884.638713][ T30] audit: type=1400 audit(5001933.930:1812): avc: denied { write } for pid=5471 comm="syz.6.6013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1884.674872][T17175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1884.696851][T17175] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1884.759302][T17175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1884.789379][T17175] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1884.800770][T17175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.809143][T17175] usb 2-1: Product: syz [ 1884.814089][T17175] usb 2-1: Manufacturer: syz [ 1884.819390][T17175] usb 2-1: SerialNumber: syz [ 1884.856872][T17175] usb 2-1: config 0 descriptor?? [ 1884.868016][ T5457] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1884.889008][ T5457] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1884.911877][T17175] usb 2-1: ucan: probing device on interface #0 [ 1885.248669][ T5486] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6014'. [ 1885.391411][ T5457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1885.405564][ T5457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1885.444204][T17175] usb 2-1: ucan: failed to retrieve device info [ 1885.459006][T17175] usb 2-1: ucan: probe failed; try to update the device firmware [ 1885.541863][ T5496] 9pnet_virtio: no channels available for device syz [ 1886.019633][T17175] usb 2-1: USB disconnect, device number 20 [ 1886.370156][ T30] audit: type=1400 audit(5001935.660:1813): avc: denied { read write } for pid=5506 comm="syz.2.6017" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1886.373465][ T9] hid_parser_main: 74 callbacks suppressed [ 1886.373481][ T9] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1886.743645][ T30] audit: type=1400 audit(5001935.660:1814): avc: denied { open } for pid=5506 comm="syz.2.6017" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1886.766777][ C1] vkms_vblank_simulate: vblank timer overrun [ 1886.777493][ T9] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1886.991740][ T5521] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6019'. [ 1888.521255][ T5552] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6027'. [ 1888.798357][ T5556] 9pnet_virtio: no channels available for device syz [ 1890.356049][ T30] audit: type=1400 audit(5001939.640:1815): avc: denied { read write } for pid=5578 comm="syz.1.6033" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1890.726645][ T30] audit: type=1400 audit(5001939.640:1816): avc: denied { open } for pid=5578 comm="syz.1.6033" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1890.848508][ T5587] FAULT_INJECTION: forcing a failure. [ 1890.848508][ T5587] name failslab, interval 1, probability 0, space 0, times 0 [ 1890.900251][ T5587] CPU: 1 UID: 0 PID: 5587 Comm: syz.7.6034 Not tainted syzkaller #0 PREEMPT(full) [ 1890.900277][ T5587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1890.900288][ T5587] Call Trace: [ 1890.900294][ T5587] [ 1890.900303][ T5587] dump_stack_lvl+0x16c/0x1f0 [ 1890.900328][ T5587] should_fail_ex+0x512/0x640 [ 1890.900346][ T5587] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1890.900364][ T5587] should_failslab+0xc2/0x120 [ 1890.900377][ T5587] __kmalloc_cache_noprof+0x72/0x780 [ 1890.900393][ T5587] ? raw_ioctl_init+0x1be/0x860 [ 1890.900410][ T5587] ? raw_ioctl_init+0x1be/0x860 [ 1890.900433][ T5587] raw_ioctl_init+0x1be/0x860 [ 1890.900449][ T5587] ? __pfx_raw_ioctl_init+0x10/0x10 [ 1890.900462][ T5587] ? tomoyo_path_number_perm+0x18d/0x580 [ 1890.900490][ T5587] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1890.900506][ T5587] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1890.900525][ T5587] raw_ioctl+0xa3c/0x2c30 [ 1890.900543][ T5587] ? __pfx_raw_ioctl+0x10/0x10 [ 1890.900556][ T5587] ? selinux_file_ioctl+0x180/0x270 [ 1890.900566][ T5587] ? selinux_file_ioctl+0xb4/0x270 [ 1890.900578][ T5587] ? __pfx_raw_ioctl+0x10/0x10 [ 1890.900592][ T5587] __x64_sys_ioctl+0x18e/0x210 [ 1890.900608][ T5587] do_syscall_64+0xcd/0xfa0 [ 1890.900626][ T5587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.900638][ T5587] RIP: 0033:0x7fc2e8b8eacb [ 1890.900648][ T5587] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1890.900659][ T5587] RSP: 002b:00007fc2e9a44f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1890.900670][ T5587] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fc2e8b8eacb [ 1890.900678][ T5587] RDX: 00007fc2e9a45fe0 RSI: 0000000041015500 RDI: 0000000000000004 [ 1890.900684][ T5587] RBP: 00007fc2e9a45fe0 R08: 0000000000000000 R09: 00372e6364755f79 [ 1890.900691][ T5587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1890.900697][ T5587] R13: 00007fc2e9a44fb0 R14: 0000200000000200 R15: 00007fc2e8f10320 [ 1890.900712][ T5587] [ 1891.107041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1892.732038][ T30] audit: type=1400 audit(5001942.020:1817): avc: denied { write } for pid=5607 comm="syz.2.6037" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1893.461951][ T5627] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6041'. [ 1893.740143][ T5628] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6040'. [ 1893.814640][ T5633] 9pnet_virtio: no channels available for device syz [ 1894.895851][ T30] audit: type=1400 audit(5001944.110:1818): avc: denied { kexec_image_load } for pid=5642 comm="syz.5.6045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1894.937009][ T5648] program syz.5.6045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1895.112693][ T30] audit: type=1400 audit(5001944.220:1819): avc: denied { append } for pid=5642 comm="syz.5.6045" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1895.840012][ T30] audit: type=1326 audit(5001945.130:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16618eec9 code=0x7ffc0000 [ 1895.959981][ T30] audit: type=1326 audit(5001945.160:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc16618eec9 code=0x7ffc0000 [ 1896.036637][ T30] audit: type=1326 audit(5001945.160:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16618eec9 code=0x7ffc0000 [ 1896.060162][ T30] audit: type=1326 audit(5001945.160:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc16618eec9 code=0x7ffc0000 [ 1896.083673][ T30] audit: type=1326 audit(5001945.160:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16618eec9 code=0x7ffc0000 [ 1896.113202][ T30] audit: type=1326 audit(5001945.160:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fc16618eec9 code=0x7ffc0000 [ 1896.272725][ T30] audit: type=1326 audit(5001945.160:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16618eec9 code=0x7ffc0000 [ 1896.333950][ T5680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6052'. [ 1896.366174][ T5681] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6051'. [ 1896.446427][ T30] audit: type=1326 audit(5001945.160:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc16618eec9 code=0x7ffc0000 [ 1896.555820][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1896.617161][ T30] audit: type=1326 audit(5001945.160:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16618eec9 code=0x7ffc0000 [ 1896.715704][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1896.722301][ T9] usb 2-1: config 0 has no interfaces? [ 1896.727968][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1896.737285][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.799300][ T30] audit: type=1326 audit(5001945.160:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.2.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc16618eec9 code=0x7ffc0000 [ 1896.799962][ T9] usb 2-1: config 0 descriptor?? [ 1897.324079][T18234] syz_tun (unregistering): left allmulticast mode [ 1897.330730][T18234] syz_tun (unregistering): left promiscuous mode [ 1897.369095][T18234] bridge0: port 3(syz_tun) entered disabled state [ 1897.424225][T17175] usb 2-1: USB disconnect, device number 21 [ 1897.431406][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1897.444050][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1897.453321][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1897.461544][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1897.469160][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1898.128312][ T5691] chnl_net:caif_netlink_parms(): no params data found [ 1898.802299][ T5691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1898.809677][ T5691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.823335][ T5691] bridge_slave_0: entered allmulticast mode [ 1898.840088][ T5691] bridge_slave_0: entered promiscuous mode [ 1898.848566][ T5691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1898.855986][ T5691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1898.864242][ T5691] bridge_slave_1: entered allmulticast mode [ 1898.876051][ T5691] bridge_slave_1: entered promiscuous mode [ 1898.948818][ T5691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1898.988933][ T5691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1899.188610][ T5939] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6061'. [ 1899.267107][ T5691] team0: Port device team_slave_0 added [ 1899.376341][ T5691] team0: Port device team_slave_1 added [ 1899.455589][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1899.613486][ T5814] Bluetooth: hci4: command tx timeout [ 1899.613879][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1899.732922][ T5691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1899.753431][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1899.761610][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1899.793619][ T5691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1899.965793][ T2791] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1900.117216][ T5691] hsr_slave_0: entered promiscuous mode [ 1900.133299][ T2791] usb 2-1: Using ep0 maxpacket: 32 [ 1900.156100][ T5691] hsr_slave_1: entered promiscuous mode [ 1900.157291][ T2791] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1900.169329][ T5691] debugfs: 'hsr0' already exists in 'hsr' [ 1900.205787][ T2791] usb 2-1: config 0 has no interfaces? [ 1900.205793][ T5691] Cannot create hsr debugfs directory [ 1900.205825][ T2791] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1900.292542][ T2791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.334008][ T2791] usb 2-1: config 0 descriptor?? [ 1900.610545][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6067'. [ 1900.882880][ T5691] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1900.893158][ T5691] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1900.902450][ T5691] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1900.911900][ T5691] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1900.936359][ T2791] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1900.989045][ T5691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1901.010244][ T5691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1901.100917][T12670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.108088][T12670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1901.125306][ T2791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1901.177387][ T2791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1901.240897][T12670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.248097][T12670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1901.256186][ T2791] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1901.786851][ T5814] Bluetooth: hci4: command tx timeout [ 1902.623888][ T2791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.647191][ T2791] usb 6-1: config 0 descriptor?? [ 1902.814049][ T5691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1902.893351][ T5691] veth0_vlan: entered promiscuous mode [ 1902.905496][ T5691] veth1_vlan: entered promiscuous mode [ 1903.320631][ T2791] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0 [ 1903.343741][ T2791] cp2112 0003:10C4:EA90.003C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1903.459410][ T5691] veth0_macvtap: entered promiscuous mode [ 1903.470463][ T5691] veth1_macvtap: entered promiscuous mode [ 1903.480279][ T5870] usb 2-1: USB disconnect, device number 22 [ 1903.490888][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1903.746344][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1903.803701][ T2791] cp2112 0003:10C4:EA90.003C: Part Number: 0x82 Device Version: 0xFE [ 1903.815857][ T5814] Bluetooth: hci4: command tx timeout [ 1903.832971][ T3534] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.861227][ T3534] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.885737][ T3534] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.904703][ T3534] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.024565][ T6153] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6076'. [ 1904.109856][T12652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1904.125563][T12652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1904.173343][T12652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1904.183022][T12652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1904.614599][ T6194] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6054'. [ 1904.724155][ T2791] cp2112 0003:10C4:EA90.003C: error reading lock byte: -71 [ 1904.947413][ T6204] 9pnet_virtio: no channels available for device syz [ 1905.321889][ T2791] usb 6-1: USB disconnect, device number 102 [ 1905.825721][ T5870] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1905.885896][ T5814] Bluetooth: hci4: command tx timeout [ 1906.238834][ T5870] usb 3-1: config 255 has an invalid interface number: 1 but max is 0 [ 1906.275673][ T5870] usb 3-1: config 255 has no interface number 0 [ 1906.382118][ T5870] usb 3-1: New USB device found, idVendor=0960, idProduct=0066, bcdDevice=48.71 [ 1906.406631][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.416316][ T5870] usb 3-1: Product: syz [ 1906.420575][ T5870] usb 3-1: Manufacturer: syz [ 1906.455570][ T5870] usb 3-1: SerialNumber: syz [ 1906.903022][ T5870] usb 3-1: USB disconnect, device number 10 [ 1907.265819][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6086'. [ 1908.615803][ T5870] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1908.706578][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1908.706596][ T30] audit: type=1400 audit(5001957.990:1846): avc: denied { read write } for pid=6273 comm="syz.6.6088" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1908.766984][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 1908.774100][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1908.785451][ T5870] usb 3-1: config 0 has no interfaces? [ 1908.797997][ T5870] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1908.802843][ T30] audit: type=1400 audit(5001957.990:1847): avc: denied { open } for pid=6273 comm="syz.6.6088" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1909.020795][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.136557][T17175] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1909.187368][ T5870] usb 3-1: config 0 descriptor?? [ 1909.295789][T17175] usb 6-1: Using ep0 maxpacket: 16 [ 1909.362796][T17175] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1909.375547][T17175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1909.396062][T17175] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1909.412395][T17175] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.421756][T17175] usb 6-1: Product: syz [ 1909.429972][T17175] usb 6-1: Manufacturer: syz [ 1909.435193][T17175] usb 6-1: SerialNumber: syz [ 1909.447926][T17175] usb 6-1: config 0 descriptor?? [ 1909.631151][T17175] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1911.480403][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6092'. [ 1911.777541][ T6312] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1911.784177][ T6312] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1912.010314][ T6316] new mount options do not match the existing superblock, will be ignored [ 1912.306804][ T5870] usb 6-1: USB disconnect, device number 103 [ 1912.324160][ T30] audit: type=1326 audit(5001961.210:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7dd98eec9 code=0x7ffc0000 [ 1912.519768][ T2791] usb 3-1: USB disconnect, device number 11 [ 1912.854903][ T30] audit: type=1326 audit(5001961.210:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7dd98eec9 code=0x7ffc0000 [ 1912.878526][ T6312] vhci_hcd vhci_hcd.0: Device attached [ 1912.878768][ T6313] vhci_hcd: connection closed [ 1912.885759][ T30] audit: type=1326 audit(5001961.220:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe7dd98eec9 code=0x7ffc0000 [ 1912.918940][ T30] audit: type=1400 audit(5001961.320:1851): avc: denied { mount } for pid=6308 comm="syz.1.6095" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1912.951427][ T3534] vhci_hcd: stop threads [ 1912.961402][ T3534] vhci_hcd: release socket [ 1912.978400][ T3534] vhci_hcd: disconnect device [ 1913.047809][ T30] audit: type=1400 audit(5001961.510:1852): avc: denied { create } for pid=6306 comm="syz.7.6094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1913.078385][ T30] audit: type=1326 audit(5002218.138:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7dd98eec9 code=0x7ffc0000 [ 1913.138494][ T30] audit: type=1326 audit(5002218.138:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.1.6095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7dd98eec9 code=0x7ffc0000 [ 1913.163940][ T30] audit: type=1400 audit(5002218.338:1855): avc: denied { unmount } for pid=20232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1913.336030][ T6358] fuse: blksize only supported for fuseblk [ 1913.375854][ T2722] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1913.538160][ T2722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1913.549569][ T2722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1913.573585][ T2722] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1913.606776][ T2722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.634126][ T2722] usb 2-1: config 0 descriptor?? [ 1913.665629][ T7409] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1913.675873][ T2791] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1913.840200][ T7409] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1913.855602][ T2791] usb 6-1: Using ep0 maxpacket: 32 [ 1913.864244][ T7409] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1913.907981][ T7409] usb 3-1: Product: syz [ 1913.915679][ T7409] usb 3-1: Manufacturer: syz [ 1913.920338][ T7409] usb 3-1: SerialNumber: syz [ 1913.921276][ T2791] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1913.926106][ T2791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.926130][ T2791] usb 6-1: Product: syz [ 1913.926145][ T2791] usb 6-1: Manufacturer: syz [ 1913.926159][ T2791] usb 6-1: SerialNumber: syz [ 1913.928137][ T2791] usb 6-1: config 0 descriptor?? [ 1913.974248][ T7409] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1914.337270][ T2722] cp2112 0003:10C4:EA90.003D: unknown main item tag 0x0 [ 1914.379581][T17175] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1914.390739][ T2722] cp2112 0003:10C4:EA90.003D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1914.412642][ T2791] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1914.532972][ T2722] cp2112 0003:10C4:EA90.003D: Part Number: 0x82 Device Version: 0xFE [ 1914.542691][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1914.542726][ T30] audit: type=1400 audit(5002219.828:1857): avc: denied { execute } for pid=6356 comm="syz.2.6100" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1914.575158][T17175] usb 8-1: Using ep0 maxpacket: 8 [ 1914.581360][ T30] audit: type=1400 audit(5002219.828:1858): avc: denied { write } for pid=6347 comm="syz.1.6097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1914.602569][T17175] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1914.611963][T17175] usb 8-1: config 152 has an invalid interface number: 136 but max is 0 [ 1914.620548][T17175] usb 8-1: config 152 has an invalid interface association descriptor of length 2, skipping [ 1914.631382][T17175] usb 8-1: config 152 has no interface number 0 [ 1914.648925][T17175] usb 8-1: config 152 interface 136 altsetting 29 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1914.689991][T17175] usb 8-1: config 152 interface 136 has no altsetting 0 [ 1914.702398][T17175] usb 8-1: New USB device found, idVendor=067b, idProduct=0000, bcdDevice=44.42 [ 1914.711998][T17175] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.717599][ T2791] gspca_topro: reg_w err -71 [ 1914.720178][T17175] usb 8-1: Product: syz [ 1914.729449][T17175] usb 8-1: Manufacturer: syz [ 1914.734100][T17175] usb 8-1: SerialNumber: syz [ 1914.755575][ T2791] gspca_topro: Sensor soi763a [ 1914.764399][ T2791] usb 6-1: USB disconnect, device number 104 [ 1914.944203][ T2722] cp2112 0003:10C4:EA90.003D: error setting SMBus config [ 1914.963479][ T2722] cp2112 0003:10C4:EA90.003D: probe with driver cp2112 failed with error -71 [ 1914.974897][T17175] plusb 8-1:152.136: probe with driver plusb failed with error -22 [ 1914.986503][ T2722] usb 2-1: USB disconnect, device number 23 [ 1914.996675][T17175] usb 8-1: USB disconnect, device number 18 [ 1915.299700][ T30] audit: type=1400 audit(5002220.588:1859): avc: denied { mount } for pid=6422 comm="syz.5.6104" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1915.324513][ T30] audit: type=1400 audit(5002220.588:1860): avc: denied { bind } for pid=6422 comm="syz.5.6104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1915.349618][ T30] audit: type=1400 audit(5002220.588:1861): avc: denied { listen } for pid=6422 comm="syz.5.6104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1915.369575][ T30] audit: type=1400 audit(5002220.588:1862): avc: denied { remount } for pid=6422 comm="syz.5.6104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1915.389632][ T30] audit: type=1400 audit(5002220.608:1863): avc: denied { unmount } for pid=1310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1915.473456][ T30] audit: type=1400 audit(5002220.758:1864): avc: denied { map } for pid=6430 comm="syz.6.6107" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1915.496296][ C0] vkms_vblank_simulate: vblank timer overrun [ 1915.513271][ T30] audit: type=1400 audit(5002220.758:1865): avc: denied { execute } for pid=6430 comm="syz.6.6107" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1916.097623][ T2791] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1916.382667][ T7409] vp7045: USB control message 'in' went wrong. [ 1916.388934][ T7409] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1916.563531][ T7409] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1916.605358][ T2791] usb 2-1: Using ep0 maxpacket: 32 [ 1916.617854][ T2791] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1916.628332][ T2791] usb 2-1: config 0 has no interfaces? [ 1916.633840][ T2791] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1916.643069][ T2791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.722087][ T7409] usb 3-1: USB disconnect, device number 12 [ 1916.756500][ T2791] usb 2-1: config 0 descriptor?? [ 1917.076305][ T6464] ceph: No mds server is up or the cluster is laggy [ 1917.087912][ T6030] libceph: connect (1)[c::]:6789 error -22 [ 1917.099985][ T6030] libceph: mon0 (1)[c::]:6789 connect error [ 1917.505695][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6115'. [ 1918.419269][ T6479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6113'. [ 1918.495074][ T30] audit: type=1400 audit(5002223.769:1866): avc: denied { lock } for pid=6483 comm="syz.5.6116" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1918.899952][ T6493] overlayfs: failed to resolve './file1': -2 [ 1919.559304][ T1204] usb 2-1: USB disconnect, device number 24 [ 1922.882041][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6130'. [ 1923.134496][ T2791] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1923.371599][ T2791] usb 3-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 1923.501735][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6136'. [ 1924.139873][ T2791] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1924.149330][ T2791] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1924.167027][ T2791] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1924.176186][ T2791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.184178][ T2791] usb 3-1: Product: syz [ 1924.188434][ T2791] usb 3-1: Manufacturer: syz [ 1924.193043][ T2791] usb 3-1: SerialNumber: syz [ 1924.202251][ T2791] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1924.209467][ T2791] cdc_ncm 3-1:1.0: bind() failure [ 1925.369411][ T6605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1925.688954][ T2722] usb 3-1: USB disconnect, device number 13 [ 1925.754378][ T7409] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1925.874112][ T1204] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1925.904268][ T7409] usb 6-1: Using ep0 maxpacket: 16 [ 1925.916060][ T7409] usb 6-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 1925.929033][ T7409] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1925.937990][ T7409] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1925.952383][ T7409] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1925.961476][ T7409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.964139][ T2791] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1925.972116][ T7409] usb 6-1: Product: syz [ 1926.093539][ T7409] usb 6-1: Manufacturer: syz [ 1926.100443][ T7409] usb 6-1: SerialNumber: syz [ 1926.105473][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1926.118458][ T1204] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1926.130765][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1926.131854][ T7409] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1926.141071][ T1204] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1926.620737][ T7409] cdc_ncm 6-1:1.0: bind() failure [ 1926.640668][ T1204] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1926.649945][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.700160][ T1204] usb 2-1: config 0 descriptor?? [ 1926.710484][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6150'. [ 1926.721255][ T2791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1927.220304][ T2791] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1927.291919][ T2791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1927.554072][ T2791] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1927.668487][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1927.668503][ T30] audit: type=1400 audit(5002232.950:1869): avc: denied { bind } for pid=6635 comm="syz.1.6146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1927.706629][ T2791] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1927.750655][ T2791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.787481][ T2791] usb 7-1: config 0 descriptor?? [ 1927.795724][ T1204] hdpvr 2-1:0.0: firmware version 0x51 dated [ 1927.801994][ T1204] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 1928.322264][ T6649] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6147'. [ 1928.344945][ T1204] hdpvr 2-1:0.0: Could not setup controls [ 1928.351561][ T1204] hdpvr 2-1:0.0: registering videodev failed [ 1928.361996][ T2791] hdpvr 7-1:0.0: unexpected answer of status request, len 0 [ 1928.377597][ T1204] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 1928.385535][ T2791] hdpvr 7-1:0.0: device init failed [ 1928.390957][ T2791] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 1928.404479][ T1204] usb 2-1: USB disconnect, device number 25 [ 1928.419636][ T2791] usb 7-1: USB disconnect, device number 59 [ 1929.023932][ T2722] usb 6-1: USB disconnect, device number 105 [ 1929.155710][ T30] audit: type=1400 audit(5002234.440:1870): avc: denied { setopt } for pid=6711 comm="syz.1.6155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1929.240751][ T6684] Process accounting resumed [ 1929.564581][ T6730] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 1930.469398][ T30] audit: type=1400 audit(5002235.300:1871): avc: denied { read } for pid=6735 comm="syz.2.6161" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1930.566072][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6162'. [ 1930.669436][ T30] audit: type=1400 audit(5002235.300:1872): avc: denied { open } for pid=6735 comm="syz.2.6161" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1932.155185][ T6764] ceph: No mds server is up or the cluster is laggy [ 1932.187684][ T6030] libceph: connect (1)[c::]:6789 error -22 [ 1932.257557][ T6030] libceph: mon0 (1)[c::]:6789 connect error [ 1933.533432][ T2791] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1933.743734][ T2791] usb 2-1: Using ep0 maxpacket: 16 [ 1933.754916][ T2791] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 1933.763755][ T2791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1934.353954][ T2791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1934.356207][ T6811] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6174'. [ 1934.373973][ T2791] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1934.387473][ T2791] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1934.396681][ T2791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.539382][ T2791] usb 2-1: config 0 descriptor?? [ 1934.752307][ T2791] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input120 [ 1934.953361][ T5166] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1935.083230][ T5166] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1935.444256][ T6831] ceph: No mds server is up or the cluster is laggy [ 1935.453746][ T6030] libceph: connect (1)[c::]:6789 error -22 [ 1935.472915][ T6030] libceph: mon0 (1)[c::]:6789 connect error [ 1935.617922][ T5166] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1935.619794][ T2791] usb 2-1: USB disconnect, device number 26 [ 1936.052883][ T6030] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 1936.193686][ T30] audit: type=1400 audit(5002241.491:1873): avc: denied { read write } for pid=6867 comm="syz.6.6182" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1936.223139][ T6030] usb 6-1: device descriptor read/64, error -71 [ 1936.267661][ T30] audit: type=1400 audit(5002241.491:1874): avc: denied { open } for pid=6867 comm="syz.6.6182" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1936.459969][T17175] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1936.533389][ T6030] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 1936.552833][ T30] audit: type=1326 audit(5002241.841:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.6.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb6f8eec9 code=0x7ffc0000 [ 1936.590280][ T30] audit: type=1326 audit(5002241.841:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.6.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb6f8eec9 code=0x7ffc0000 [ 1936.672952][T17175] usb 2-1: Using ep0 maxpacket: 8 [ 1936.684522][T17175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1936.694930][ T6030] usb 6-1: device descriptor read/64, error -71 [ 1936.710898][T17175] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1936.759488][T17175] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1936.810038][ T6030] usb usb6-port1: attempt power cycle [ 1936.835663][T17175] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1936.848093][T17175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.299911][ T30] audit: type=1326 audit(5002241.841:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.6.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7bb6f8eec9 code=0x7ffc0000 [ 1937.821019][T17175] usb 2-1: Product: syz [ 1937.825356][T17175] usb 2-1: Manufacturer: syz [ 1937.830174][T17175] usb 2-1: SerialNumber: syz [ 1937.837713][ T30] audit: type=1326 audit(5002241.841:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.6.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb6f8eec9 code=0x7ffc0000 [ 1937.928353][ T6855] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1937.961236][ T30] audit: type=1326 audit(5002241.841:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.6.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb6f8eec9 code=0x7ffc0000 [ 1937.987255][T17175] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1938.008935][T17175] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1938.018456][T17175] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1938.182848][ T6030] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 1938.321372][ T30] audit: type=1326 audit(5002241.841:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.6.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bb6f8eec9 code=0x7ffc0000 [ 1938.373082][ T2791] usb 2-1: USB disconnect, device number 27 [ 1938.424209][ T6030] usb 6-1: device descriptor read/8, error -71 [ 1938.440897][ T30] audit: type=1326 audit(5002241.841:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.6.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb6f8eec9 code=0x7ffc0000 [ 1938.634797][ T6912] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1938.830726][ T30] audit: type=1326 audit(5002241.841:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.6.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7bb6f8eec9 code=0x7ffc0000 [ 1940.942662][ T6030] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1941.174437][ T6030] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1941.263957][ T6945] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6196'. [ 1941.368994][ T6030] usb 2-1: config 0 has no interface number 0 [ 1941.391628][ T6030] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1941.431201][ T6030] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1941.509294][ T1204] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1941.551131][ T6030] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1941.561709][ T6030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.592366][ T6030] usb 2-1: Product: syz [ 1941.596649][ T6030] usb 2-1: Manufacturer: syz [ 1941.605873][ T6030] usb 2-1: SerialNumber: syz [ 1941.620529][ T6030] usb 2-1: config 0 descriptor?? [ 1941.627354][ T6931] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1941.653641][ T6030] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1941.666986][ T6030] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1941.681616][ T1204] usb 8-1: config 0 has an invalid interface number: 18 but max is 0 [ 1941.690060][ T1204] usb 8-1: config 0 has no interface number 0 [ 1941.696773][ T1204] usb 8-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1941.736089][ T1204] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.751808][ T1204] usb 8-1: config 0 descriptor?? [ 1941.759524][ T1204] usb 8-1: bad CDC descriptors [ 1941.792315][T17175] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1941.942177][T17175] usb 3-1: Using ep0 maxpacket: 16 [ 1941.954573][T17175] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1941.967156][T17175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1941.979977][T17175] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1941.992740][T17175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.993527][ T1204] usb 8-1: USB disconnect, device number 19 [ 1942.001053][T17175] usb 3-1: Product: syz [ 1942.013474][T17175] usb 3-1: Manufacturer: syz [ 1942.018694][T17175] usb 3-1: SerialNumber: syz [ 1942.027908][T17175] usb 3-1: config 0 descriptor?? [ 1942.037373][T17175] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1942.311030][ T6987] bond0: option mode: unable to set because the bond device has slaves [ 1943.442517][ T7000] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1943.449951][ T7000] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1943.792511][T17175] usb 2-1: USB disconnect, device number 28 [ 1943.809454][T17175] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1943.821049][T17175] cyberjack 2-1:0.69: device disconnected [ 1944.082538][ T7017] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6207'. [ 1944.364230][ T7025] 9pnet_virtio: no channels available for device syz [ 1945.198738][ T7026] block device autoloading is deprecated and will be removed. [ 1945.653523][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6210'. [ 1945.662546][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6210'. [ 1946.417056][ T2791] usb 3-1: USB disconnect, device number 14 [ 1947.462826][ T7092] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967293 (274877906752 ns) > initial count (2319616 ns). Using initial count to start timer. [ 1947.866386][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1947.866402][ T30] audit: type=1400 audit(5002253.162:1914): avc: denied { mounton } for pid=7114 comm="syz.7.6217" path="/156/file0" dev="tmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1948.185840][ T7128] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1948.367305][ T7128] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1948.514851][ T7136] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6223'. [ 1948.870476][ T7141] 9pnet_virtio: no channels available for device syz [ 1949.357827][ T7152] netlink: 'syz.5.6224': attribute type 1 has an invalid length. [ 1949.460303][ T30] audit: type=1400 audit(5002254.693:1915): avc: denied { bind } for pid=7154 comm="syz.1.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1949.479667][ T30] audit: type=1400 audit(5002254.693:1916): avc: denied { listen } for pid=7154 comm="syz.1.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1949.648343][ T7165] gretap1: entered promiscuous mode [ 1949.657908][ T7165] bond2: (slave gretap1): making interface the new active one [ 1949.666466][ T7165] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1949.683181][ T6030] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1949.851257][ T6030] usb 2-1: Using ep0 maxpacket: 32 [ 1950.082427][ T6030] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1950.097292][ T6030] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1950.119796][ T6030] usb 2-1: config 1 has no interface number 1 [ 1950.132495][ T6030] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1950.161378][ T6030] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1950.170707][ T6030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.178784][ T6030] usb 2-1: Product: syz [ 1950.183698][ T6030] usb 2-1: Manufacturer: syz [ 1950.189091][ T6030] usb 2-1: SerialNumber: syz [ 1950.206179][ T30] audit: type=1400 audit(5002255.503:1917): avc: denied { name_connect } for pid=7201 comm="syz.6.6228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1950.258734][ T30] audit: type=1400 audit(5002255.553:1918): avc: denied { listen } for pid=7201 comm="syz.6.6228" lport=60573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1950.289010][ T30] audit: type=1400 audit(5002255.553:1919): avc: denied { accept } for pid=7201 comm="syz.6.6228" lport=60573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1950.310723][ T30] audit: type=1400 audit(5002255.583:1920): avc: denied { getopt } for pid=7201 comm="syz.6.6228" lport=60573 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1950.490569][ T7212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1950.499221][ T7212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1951.885416][ T7155] can0: slcan on ttyS3. [ 1951.910177][ T6030] usb 2-1: USB disconnect, device number 29 [ 1951.954048][ T7234] netlink: 'syz.2.6231': attribute type 1 has an invalid length. [ 1951.982201][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6228'. [ 1951.992591][ T7208] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6228'. [ 1952.005666][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6231'. [ 1952.046521][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6228'. [ 1952.071910][ T7154] can0 (unregistered): slcan off ttyS3. [ 1952.115822][ T7234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1952.179841][ T30] audit: type=1400 audit(5002257.463:1921): avc: denied { mount } for pid=7216 comm="syz.2.6231" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1952.290539][ T30] audit: type=1400 audit(5002257.583:1922): avc: denied { ioctl } for pid=7216 comm="syz.2.6231" path="socket:[115720]" dev="sockfs" ino=115720 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1952.667557][ T30] audit: type=1400 audit(5002257.943:1923): avc: denied { create } for pid=7293 comm="syz.7.6235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1952.715801][ T7235] bond1 (unregistering): Released all slaves [ 1952.760851][ T2722] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1953.071739][ T2722] usb 7-1: Using ep0 maxpacket: 32 [ 1953.085314][ T2722] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1953.093751][ T2722] usb 7-1: config 0 has no interface number 0 [ 1953.111485][ T2722] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1953.165087][ T2722] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1953.200378][ T2722] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1953.247094][ T2722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.270777][T17175] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1953.309977][ T2722] usb 7-1: Product: syz [ 1953.318139][ T2722] usb 7-1: Manufacturer: syz [ 1953.334611][ T2722] usb 7-1: SerialNumber: syz [ 1953.350966][ T2722] usb 7-1: config 0 descriptor?? [ 1953.455058][T17175] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 1953.464613][T17175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.500284][T17175] usb 3-1: config 0 descriptor?? [ 1953.510760][T17175] gspca_main: mars-2.14.0 probing 093a:050f [ 1953.644805][ T7354] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6240'. [ 1953.709892][ T7336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1953.793189][ T7336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1953.816152][ T2791] usb 3-1: USB disconnect, device number 15 [ 1954.065885][ T7355] fuse: Unknown parameter 'U—(¿]*ÛÛÖI' [ 1956.108516][ T2722] appletouch 7-1:0.85: Failed to request geyser raw mode [ 1956.116008][ T2722] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 1956.129157][ T2722] usb 7-1: USB disconnect, device number 60 [ 1956.270003][ T7419] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1956.326778][ T7416] kvm: user requested TSC rate below hardware speed [ 1956.337836][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1956.337851][ T30] audit: type=1400 audit(5002261.633:1925): avc: denied { unmount } for pid=1985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1956.584614][ T7433] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6256'. [ 1956.863160][ T7441] 9pnet_virtio: no channels available for device syz [ 1956.902171][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6257'. [ 1956.991659][ T30] audit: type=1400 audit(5002262.253:1926): avc: denied { setopt } for pid=7434 comm="syz.7.6258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1957.018945][ T30] audit: type=1400 audit(5002262.253:1927): avc: denied { setattr } for pid=7434 comm="syz.7.6258" name="file0" dev="tmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1957.853748][ T30] audit: type=1400 audit(5002262.633:1928): avc: denied { bind } for pid=7445 comm="syz.6.6259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1957.872740][ C0] vkms_vblank_simulate: vblank timer overrun [ 1957.920261][ T30] audit: type=1400 audit(5002262.633:1929): avc: denied { getopt } for pid=7445 comm="syz.6.6259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1957.939463][ C0] vkms_vblank_simulate: vblank timer overrun [ 1958.329633][ T30] audit: type=1400 audit(5002263.624:1930): avc: denied { mounton } for pid=7451 comm="syz.6.6261" path="/239/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1959.499988][ T2722] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 1959.670034][ T2791] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1959.671588][ T2722] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1959.704696][ T2722] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1959.730041][ T2722] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1959.762102][ T2722] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1959.772233][ T7491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6264'. [ 1959.783323][ T2722] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.807475][ T2722] usb 8-1: Product: syz [ 1959.821003][ T2722] usb 8-1: Manufacturer: syz [ 1959.825809][ T2722] usb 8-1: SerialNumber: syz [ 1959.839006][ T2722] usb 8-1: config 0 descriptor?? [ 1959.855423][ T7466] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1959.864478][ T7466] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1959.877873][ T2722] usb 8-1: ucan: probing device on interface #0 [ 1959.880683][ T2791] usb 7-1: Using ep0 maxpacket: 8 [ 1959.909776][ T2791] usb 7-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1959.949961][ T2791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.974153][ T2791] usb 7-1: Product: syz [ 1959.981826][ T2791] usb 7-1: Manufacturer: syz [ 1959.993791][ T2791] usb 7-1: SerialNumber: syz [ 1960.075435][ T2722] usb 8-1: ucan: device protocol version 0 is not supported [ 1960.083058][ T2722] usb 8-1: ucan: probe failed; try to update the device firmware [ 1960.259944][ T1204] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1960.383298][ T5870] usb 8-1: USB disconnect, device number 20 [ 1960.441074][ T1204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1960.459988][ T1204] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1960.470784][ T1204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1960.572348][ T7530] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1960.579487][ T7530] overlayfs: failed to set xattr on upper [ 1960.585293][ T7530] overlayfs: ...falling back to redirect_dir=nofollow. [ 1960.592243][ T7530] overlayfs: ...falling back to index=off. [ 1960.598128][ T7530] overlayfs: ...falling back to uuid=null. [ 1960.604065][ T7530] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1960.751060][ T30] audit: type=1400 audit(5002265.864:1931): avc: denied { mounton } for pid=7515 comm="syz.1.6270" path="/file0" dev="ramfs" ino=117051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1960.941280][ T1204] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1960.951146][ T1204] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1960.960258][ T1204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.971307][ T1204] usb 6-1: config 0 descriptor?? [ 1961.298210][ T1204] hdpvr 6-1:0.0: firmware version 0x51 dated [ 1961.323109][ T7550] netlink: 'syz.7.6271': attribute type 8 has an invalid length. [ 1961.339928][ T2791] mxuport 7-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1961.367773][ T1204] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 1961.372360][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6271'. [ 1961.387861][ T2791] mxuport 7-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1961.407115][ T2791] mxuport 7-1:254.0: probe with driver mxuport failed with error -71 [ 1961.423414][ T2791] usb 7-1: USB disconnect, device number 61 [ 1961.501069][ T1204] hdpvr 6-1:0.0: device init failed [ 1961.506871][ T1204] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 1961.534783][ T1204] usb 6-1: USB disconnect, device number 110 [ 1961.893911][ T7580] input: syz1 as /devices/virtual/input/input124 [ 1962.032664][ T7578] ceph: No mds server is up or the cluster is laggy [ 1962.052816][ T6030] libceph: connect (1)[c::]:6789 error -22 [ 1962.253213][ T6030] libceph: mon0 (1)[c::]:6789 connect error [ 1962.665260][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6276'. [ 1962.704523][ T30] audit: type=1400 audit(5002268.004:1932): avc: denied { lock } for pid=7596 comm="syz.7.6279" path="socket:[116269]" dev="sockfs" ino=116269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1963.227836][ T7598] bond1: entered promiscuous mode [ 1963.389294][ T7598] bond1: entered allmulticast mode [ 1963.394849][ T7598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1966.750432][ T7669] FAULT_INJECTION: forcing a failure. [ 1966.750432][ T7669] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.774205][ T7669] CPU: 0 UID: 0 PID: 7669 Comm: syz.5.6280 Not tainted syzkaller #0 PREEMPT(full) [ 1966.774231][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1966.774241][ T7669] Call Trace: [ 1966.774247][ T7669] [ 1966.774253][ T7669] dump_stack_lvl+0x16c/0x1f0 [ 1966.774292][ T7669] should_fail_ex+0x512/0x640 [ 1966.774316][ T7669] ? __kmalloc_noprof+0xca/0x880 [ 1966.774342][ T7669] should_failslab+0xc2/0x120 [ 1966.774363][ T7669] __kmalloc_noprof+0xdd/0x880 [ 1966.774386][ T7669] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1966.774414][ T7669] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1966.774435][ T7669] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1966.774460][ T7669] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1966.774480][ T7669] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1966.774506][ T7669] ? bpf_lsm_capable+0x9/0x10 [ 1966.774524][ T7669] ? security_capable+0x7e/0x260 [ 1966.774548][ T7669] ? ns_capable+0xd7/0x110 [ 1966.774569][ T7669] genl_rcv_msg+0x55c/0x800 [ 1966.774591][ T7669] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1966.774609][ T7669] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1966.774630][ T7669] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 1966.774651][ T7669] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1966.774677][ T7669] netlink_rcv_skb+0x158/0x420 [ 1966.774693][ T7669] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1966.774712][ T7669] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1966.774738][ T7669] ? netlink_deliver_tap+0x1ae/0xd30 [ 1966.774766][ T7669] genl_rcv+0x28/0x40 [ 1966.774781][ T7669] netlink_unicast+0x5a7/0x870 [ 1966.774800][ T7669] ? __pfx_netlink_unicast+0x10/0x10 [ 1966.774825][ T7669] netlink_sendmsg+0x8c8/0xdd0 [ 1966.774844][ T7669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1966.774869][ T7669] ____sys_sendmsg+0xa98/0xc70 [ 1966.774889][ T7669] ? copy_msghdr_from_user+0x10a/0x160 [ 1966.774912][ T7669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1966.774944][ T7669] ___sys_sendmsg+0x134/0x1d0 [ 1966.774971][ T7669] ? __pfx____sys_sendmsg+0x10/0x10 [ 1966.775028][ T7669] __sys_sendmsg+0x16d/0x220 [ 1966.775054][ T7669] ? __pfx___sys_sendmsg+0x10/0x10 [ 1966.775096][ T7669] do_syscall_64+0xcd/0xfa0 [ 1966.775124][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1966.775142][ T7669] RIP: 0033:0x7f4e53f8eec9 [ 1966.775156][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1966.775172][ T7669] RSP: 002b:00007f4e54f11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1966.775190][ T7669] RAX: ffffffffffffffda RBX: 00007f4e541e5fa0 RCX: 00007f4e53f8eec9 [ 1966.775202][ T7669] RDX: 0000000024000040 RSI: 0000200000000200 RDI: 0000000000000004 [ 1966.775212][ T7669] RBP: 00007f4e54f11090 R08: 0000000000000000 R09: 0000000000000000 [ 1966.775223][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1966.775234][ T7669] R13: 00007f4e541e6038 R14: 00007f4e541e5fa0 R15: 00007ffdd08617d8 [ 1966.775262][ T7669] [ 1967.065944][ C0] vkms_vblank_simulate: vblank timer overrun [ 1967.329643][ T30] audit: type=1400 audit(5002272.625:1933): avc: denied { ioctl } for pid=7681 comm="syz.5.6289" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1967.353941][ C0] vkms_vblank_simulate: vblank timer overrun [ 1967.368628][ T30] audit: type=1400 audit(5002272.665:1934): avc: denied { mount } for pid=7681 comm="syz.5.6289" name="/" dev="autofs" ino=117167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1967.390910][ C0] vkms_vblank_simulate: vblank timer overrun [ 1967.420133][ T6030] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1967.573376][ T7692] input: syz1 as /devices/virtual/input/input125 [ 1967.599124][ T6030] usb 2-1: Using ep0 maxpacket: 32 [ 1967.627065][ T6030] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1967.682409][ T6030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.836891][ T7689] ceph: No mds server is up or the cluster is laggy [ 1967.844153][ T5919] libceph: connect (1)[c::]:6789 error -22 [ 1967.851596][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 1967.860418][ T6030] usb 2-1: config 0 descriptor?? [ 1967.942895][ T30] audit: type=1400 audit(5002273.245:1935): avc: denied { unmount } for pid=1310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1968.107689][ T6030] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1968.107870][ T1204] IPVS: starting estimator thread 0... [ 1968.116992][ T6030] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1968.134997][ T6030] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1968.142920][ T6030] usb 2-1: media controller created [ 1968.169421][ T6030] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1968.354302][ T2791] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1968.481299][ T7716] IPVS: using max 44 ests per chain, 105600 per kthread [ 1968.742084][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6286'. [ 1969.087353][ T2791] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1969.119114][ T2791] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1969.142844][ T2791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.157173][ T2791] usb 3-1: Product: syz [ 1969.173900][ T2791] usb 3-1: Manufacturer: syz [ 1969.187486][ T2791] usb 3-1: SerialNumber: syz [ 1969.204355][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6294'. [ 1969.237674][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6294'. [ 1969.241226][ T2791] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1969.840664][ T30] audit: type=1400 audit(5002275.135:1936): avc: denied { audit_write } for pid=7740 comm="syz.7.6296" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1969.870650][ T30] audit: type=1400 audit(5002275.175:1937): avc: denied { relabelfrom } for pid=7708 comm="syz.2.6292" name="NETLINK" dev="sockfs" ino=116510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1969.898454][ T30] audit: type=1400 audit(5002275.175:1938): avc: denied { relabelto } for pid=7708 comm="syz.2.6292" name="NETLINK" dev="sockfs" ino=116510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 1969.925735][ T7747] netlink: 1932 bytes leftover after parsing attributes in process `syz.7.6296'. [ 1969.936651][ T7747] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6296'. [ 1969.947437][ T2791] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1970.000774][ T10] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1970.033110][ T6030] az6027: usb out operation failed. (-71) [ 1970.079917][ T6030] az6027: usb out operation failed. (-71) [ 1970.086572][ T6030] stb0899_attach: Driver disabled by Kconfig [ 1970.093347][ T6030] az6027: no front-end attached [ 1970.093347][ T6030] [ 1970.102220][ T6030] az6027: usb out operation failed. (-71) [ 1970.108252][ T6030] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1970.208060][ T6030] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input126 [ 1970.220814][ T6030] dvb-usb: schedule remote query interval to 400 msecs. [ 1970.236805][ T6030] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1970.248417][ T6030] usb 2-1: USB disconnect, device number 30 [ 1970.260693][ T10] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1970.796371][ T10] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1970.807390][ T10] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1970.818660][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1970.827798][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.841414][ T7741] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1970.851162][ T5870] usb 3-1: USB disconnect, device number 16 [ 1970.852931][ T6030] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1970.898387][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6299'. [ 1971.478463][ T7794] input: syz1 as /devices/virtual/input/input128 [ 1971.574805][ T7791] ceph: No mds server is up or the cluster is laggy [ 1971.583740][ T5919] libceph: connect (1)[c::]:6789 error -22 [ 1971.631040][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 1972.069065][ T2791] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1972.139500][ T10] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 1972.158141][ T10] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input127 [ 1972.326671][ T7825] input: syz1 as /devices/virtual/input/input129 [ 1972.438098][ T7822] ceph: No mds server is up or the cluster is laggy [ 1972.615078][ T5919] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1972.626199][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1972.635380][ T10] usb 6-1: USB disconnect, device number 111 [ 1972.644981][ T2722] libceph: connect (1)[c::]:6789 error -22 [ 1972.654004][ T2722] libceph: mon0 (1)[c::]:6789 connect error [ 1972.693566][ T2791] usb 3-1: Using ep0 maxpacket: 32 [ 1972.703773][ T2791] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1972.714473][ T2791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.725727][ T2791] usb 3-1: config 0 descriptor?? [ 1972.829070][ T5919] usb 8-1: Using ep0 maxpacket: 16 [ 1972.835163][ T7850] netlink: 'syz.6.6305': attribute type 2 has an invalid length. [ 1972.836452][ T5919] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1972.861109][ T5919] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1972.939156][ T5919] usb 8-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1972.948569][ T5919] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.995616][ T5919] usb 8-1: config 0 descriptor?? [ 1973.038644][ T30] audit: type=1400 audit(5002278.325:1939): avc: denied { write } for pid=7849 comm="syz.6.6305" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1973.416070][ T2791] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1973.715598][ T5919] zydacron 0003:13EC:0006.003E: unknown main item tag 0x0 [ 1973.727927][ T2791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1973.728872][ T5919] zydacron 0003:13EC:0006.003E: unknown main item tag 0x0 [ 1973.751287][ T2791] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1973.768276][ T2791] usb 3-1: media controller created [ 1973.775953][ T10] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1973.796829][ T2791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1973.799986][ T5919] zydacron 0003:13EC:0006.003E: unknown main item tag 0x0 [ 1973.832396][ T2791] az6027: usb out operation failed. (-71) [ 1973.833178][ T5919] zydacron 0003:13EC:0006.003E: unknown main item tag 0x0 [ 1973.841131][ T2791] az6027: usb out operation failed. (-71) [ 1973.857506][ T2791] stb0899_attach: Driver disabled by Kconfig [ 1973.861737][ T5919] zydacron 0003:13EC:0006.003E: unknown main item tag 0x0 [ 1973.863863][ T2791] az6027: no front-end attached [ 1973.863863][ T2791] [ 1973.874504][ T5919] zydacron 0003:13EC:0006.003E: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.7-1/input0 [ 1973.878494][ T2791] az6027: usb out operation failed. (-71) [ 1973.895017][ T2791] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1973.903053][ T2791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input130 [ 1973.916468][ T2791] dvb-usb: schedule remote query interval to 400 msecs. [ 1973.923565][ T2791] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1973.931956][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1973.942176][ T2791] usb 3-1: USB disconnect, device number 17 [ 1973.949900][ T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1973.959572][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.985873][ T10] usb 6-1: config 0 descriptor?? [ 1974.004138][ T2791] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1974.141270][ T6030] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1974.607468][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1974.640809][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1974.670828][ T6030] usb 7-1: too many configurations: 200, using maximum allowed: 8 [ 1974.980063][ T6030] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1974.987687][ T6030] usb 7-1: can't read configurations, error -61 [ 1975.646669][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1975.799332][ T10] usb 6-1: media controller created [ 1975.841922][ T7910] netlink: 'syz.2.6309': attribute type 1 has an invalid length. [ 1975.849049][ T6030] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1975.857329][ T7910] netlink: 'syz.2.6309': attribute type 2 has an invalid length. [ 1976.708161][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1976.861640][ T10] az6027: usb out operation failed. (-71) [ 1976.869753][ T10] az6027: usb out operation failed. (-71) [ 1976.875489][ T10] stb0899_attach: Driver disabled by Kconfig [ 1976.882056][ T10] az6027: no front-end attached [ 1976.882056][ T10] [ 1976.889471][ T10] az6027: usb out operation failed. (-71) [ 1976.895270][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1977.302307][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input131 [ 1977.315230][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1977.322328][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1977.354255][ T10] usb 6-1: USB disconnect, device number 112 [ 1977.383323][ T6030] usb 7-1: device descriptor read/all, error -71 [ 1977.396698][ T6030] usb usb7-port1: attempt power cycle [ 1977.488792][ T30] audit: type=1400 audit(5002282.785:1940): avc: denied { getopt } for pid=7932 comm="syz.2.6313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1977.523563][ T30] audit: type=1400 audit(5002282.815:1941): avc: denied { ioctl } for pid=7932 comm="syz.2.6313" path="socket:[117347]" dev="sockfs" ino=117347 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1977.588468][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1977.825054][ T5920] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 1978.060748][ T2791] usb 8-1: USB disconnect, device number 21 [ 1978.164201][ T5920] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1978.523071][ T5920] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 1979.379030][ T5920] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1979.403197][ T5920] usb 3-1: string descriptor 0 read error: -22 [ 1979.446590][ T7970] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 1979.460400][ T5920] usb 3-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.40 [ 1979.476099][ T30] audit: type=1400 audit(5002284.745:1942): avc: denied { mounton } for pid=7960 comm="syz.7.6317" path=2F3137372FE91F7189591E9233614B dev="tmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1979.504172][ T7975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6315'. [ 1979.511570][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.603395][ T7933] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1979.635808][ T7933] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1979.789457][ T2791] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1979.975493][ T30] audit: type=1400 audit(5002285.275:1943): avc: denied { map } for pid=7982 comm="syz.5.6320" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1979.999057][ T2791] usb 7-1: Using ep0 maxpacket: 16 [ 1980.002088][ T2791] usb 7-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 1980.021722][ T2791] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1980.073063][ T30] audit: type=1400 audit(5002285.275:1944): avc: denied { execute } for pid=7982 comm="syz.5.6320" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1980.081813][ T2791] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1980.135911][ T5920] usbhid 3-1:1.0: can't add hid device: -71 [ 1980.140941][ T2791] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1980.151093][ T2791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.159701][ T2791] usb 7-1: Product: syz [ 1980.163031][ T5920] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1980.170085][ T2791] usb 7-1: Manufacturer: syz [ 1980.176111][ T5920] usb 3-1: USB disconnect, device number 18 [ 1980.182221][ T2791] usb 7-1: SerialNumber: syz [ 1980.201926][ T2791] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 1980.211325][ T2791] cdc_ncm 7-1:1.0: bind() failure [ 1980.258056][ T30] audit: type=1326 audit(5002285.555:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.1.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7dd98eec9 code=0x7ffc0000 [ 1980.299886][ T30] audit: type=1326 audit(5002285.555:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.1.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7dd98eec9 code=0x7ffc0000 [ 1980.323216][ C1] vkms_vblank_simulate: vblank timer overrun [ 1980.330371][ T30] audit: type=1326 audit(5002285.555:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.1.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fe7dd98eec9 code=0x7ffc0000 [ 1980.339778][ T8002] SELinux: Context system_u:object_r:memory_device_t:s0 is not valid (left unmapped). [ 1980.353556][ C1] vkms_vblank_simulate: vblank timer overrun [ 1980.365150][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.379261][ T10] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1980.404458][ T30] audit: type=1326 audit(5002285.555:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.1.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7dd98eec9 code=0x7ffc0000 [ 1980.410280][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.428917][ T30] audit: type=1326 audit(5002285.555:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.1.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7dd98eec9 code=0x7ffc0000 [ 1980.468057][ T30] audit: type=1326 audit(5002285.555:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.1.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7dd98eec9 code=0x7ffc0000 [ 1980.469360][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.501486][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.512227][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.524023][ T30] audit: type=1326 audit(5002285.555:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7993 comm="syz.1.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7dd98eec9 code=0x7ffc0000 [ 1980.525662][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.558361][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1980.563360][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.571926][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1980.579360][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.588492][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.597658][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.605159][ T10] usb 6-1: Product: syz [ 1980.615295][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.619815][ T10] usb 6-1: Manufacturer: syz [ 1980.628734][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.650299][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.663232][ T10] usb 6-1: SerialNumber: syz [ 1980.663881][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.671498][ T10] usb 6-1: config 0 descriptor?? [ 1980.678741][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.701600][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.709172][ T10] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1980.711878][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.744806][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.760864][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.777640][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.793992][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.811511][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.815982][ T8014] comedi comedi0: pcl816: I/O port conflict (0x9,16) [ 1980.822197][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.843364][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.859882][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.871266][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.881932][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.917069][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.930626][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.944871][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.955150][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.967706][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.968373][ T8021] overlayfs: failed to resolve './file0': -2 [ 1980.979012][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1980.994018][ T8003] 9pnet_fd: p9_fd_create_unix (8003): problem connecting socket: éq‰Y’3aK: -111 [ 1981.179165][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1981.790434][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1981.808614][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1981.825260][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1981.849875][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1981.865518][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.880595][ T10] usb 3-1: config 0 descriptor?? [ 1982.418315][ T10] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1982.428008][ T10] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1982.435579][ T10] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1982.443689][ T10] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1982.452173][ T10] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1982.597404][ T10] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1982.668679][ T10] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1982.697580][ T10] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1982.752057][ T10] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1982.840666][ T5920] usb 7-1: USB disconnect, device number 65 [ 1982.994667][ T10] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1983.862258][ T10] usb 3-1: USB disconnect, device number 19 [ 1983.932423][ T6030] usb 6-1: USB disconnect, device number 113 [ 1984.083668][ T8086] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6331'. [ 1984.266071][ T8088] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1984.274314][ T8088] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1984.317435][ T8083] comedi comedi3: c6xdigio: I/O port conflict (0xffffffff80000001,3) [ 1984.327379][ T8083] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000031: 0000 [#1] SMP KASAN NOPTI [ 1984.339445][ T8083] KASAN: null-ptr-deref in range [0x0000000000000188-0x000000000000018f] [ 1984.347842][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.5.6332 Not tainted syzkaller #0 PREEMPT(full) [ 1984.357193][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1984.367239][ T8083] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 1984.373146][ T8083] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 1984.392836][ T8083] RSP: 0018:ffffc9000db7f808 EFLAGS: 00010282 [ 1984.398899][ T8083] RAX: dffffc0000000000 RBX: 0000000000000188 RCX: 0000000000000000 [ 1984.406856][ T8083] RDX: 0000000000000000 RSI: ffffffff8b671362 RDI: dffffc0000000031 [ 1984.414902][ T8083] RBP: 0000000000000188 R08: 0000000000000001 R09: 0000000000000000 [ 1984.422962][ T8083] R10: ffffffff90832cd7 R11: 1ffffffff1c79e71 R12: ffffffff8b671362 [ 1984.430929][ T8083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1984.438879][ T8083] FS: 00007f4e54f116c0(0000) GS:ffff8881249dc000(0000) knlGS:0000000000000000 [ 1984.447794][ T8083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1984.454363][ T8083] CR2: 000000110c44ae4a CR3: 000000006462c000 CR4: 00000000003526f0 [ 1984.462321][ T8083] Call Trace: [ 1984.465581][ T8083] [ 1984.468507][ T8083] __kasan_check_byte+0x13/0x50 [ 1984.473342][ T8083] lock_acquire+0xfc/0x350 [ 1984.477758][ T8083] ? __pfx___might_resched+0x10/0x10 [ 1984.483032][ T8083] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1984.488829][ T8083] down_write+0x92/0x200 [ 1984.493074][ T8083] ? kernfs_remove_by_name_ns+0x3d/0x110 [ 1984.498697][ T8083] ? __pfx_down_write+0x10/0x10 [ 1984.503528][ T8083] ? __rcu_read_unlock+0x2bc/0x550 [ 1984.508640][ T8083] kernfs_remove_by_name_ns+0x3d/0x110 [ 1984.514097][ T8083] driver_remove_file+0x4a/0x60 [ 1984.518934][ T8083] bus_remove_driver+0x224/0x2c0 [ 1984.523863][ T8083] driver_unregister+0x76/0xb0 [ 1984.528618][ T8083] comedi_device_detach_locked+0x12c/0xa50 [ 1984.534415][ T8083] comedi_device_detach+0x67/0xb0 [ 1984.539430][ T8083] comedi_device_attach+0x43d/0x900 [ 1984.544611][ T8083] do_devconfig_ioctl+0x1b1/0x710 [ 1984.549610][ T8083] ? __mutex_lock+0x1c5/0x1060 [ 1984.554364][ T8083] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1984.559988][ T8083] ? find_held_lock+0x2b/0x80 [ 1984.564652][ T8083] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1984.570102][ T8083] ? __schedule+0x11a3/0x5de0 [ 1984.574771][ T8083] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1984.580588][ T8083] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1984.586457][ T8083] ? do_vfs_ioctl+0x128/0x14f0 [ 1984.591208][ T8083] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1984.596212][ T8083] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1984.603057][ T8083] ? hook_file_ioctl_common+0x145/0x410 [ 1984.608580][ T8083] ? selinux_file_ioctl+0x180/0x270 [ 1984.613749][ T8083] ? selinux_file_ioctl+0xb4/0x270 [ 1984.618835][ T8083] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1984.624620][ T8083] __x64_sys_ioctl+0x18e/0x210 [ 1984.629363][ T8083] do_syscall_64+0xcd/0xfa0 [ 1984.633857][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1984.639729][ T8083] RIP: 0033:0x7f4e53f8eec9 [ 1984.644132][ T8083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1984.663811][ T8083] RSP: 002b:00007f4e54f11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1984.672219][ T8083] RAX: ffffffffffffffda RBX: 00007f4e541e5fa0 RCX: 00007f4e53f8eec9 [ 1984.680184][ T8083] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000008 [ 1984.688152][ T8083] RBP: 00007f4e54011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1984.696118][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1984.704084][ T8083] R13: 00007f4e541e6038 R14: 00007f4e541e5fa0 R15: 00007ffdd08617d8 [ 1984.712042][ T8083] [ 1984.715048][ T8083] Modules linked in: [ 1984.720333][ T8083] ---[ end trace 0000000000000000 ]--- [ 1984.726043][ T8083] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 1984.732025][ T8083] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 1984.751840][ T8083] RSP: 0018:ffffc9000db7f808 EFLAGS: 00010282 [ 1984.757970][ T8083] RAX: dffffc0000000000 RBX: 0000000000000188 RCX: 0000000000000000 [ 1984.766843][ T8083] RDX: 0000000000000000 RSI: ffffffff8b671362 RDI: dffffc0000000031 [ 1984.775020][ T8083] RBP: 0000000000000188 R08: 0000000000000001 R09: 0000000000000000 [ 1984.783074][ T8083] R10: ffffffff90832cd7 R11: 1ffffffff1c79e71 R12: ffffffff8b671362 [ 1984.791118][ T8083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1984.799218][ T8083] FS: 00007f4e54f116c0(0000) GS:ffff8881249dc000(0000) knlGS:0000000000000000 [ 1984.808179][ T8083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1984.814892][ T8083] CR2: 000000110c44ae4a CR3: 000000006462c000 CR4: 00000000003526f0 [ 1984.822965][ T8083] Kernel panic - not syncing: Fatal exception [ 1984.829206][ T8083] Kernel Offset: disabled [ 1984.833504][ T8083] Rebooting in 86400 seconds..