last executing test programs: 10m56.855009697s ago: executing program 0 (id=671): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$MSR(0x0, 0x5, 0x0) read$msr(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x15, 0x4, 0x400004, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001480), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)}}], 0x1, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) close(r7) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000080), 0x0) r9 = openat$cgroup_ro(r5, &(0x7f0000000380)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0xf, 0x12) close(r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m55.980374083s ago: executing program 0 (id=676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x50, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10m55.929638398s ago: executing program 0 (id=677): socket$inet6(0xa, 0x5, 0x0) io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x6f}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, 0x0, 0x1) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) unshare(0x8000400) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') set_mempolicy(0x3, 0x0, 0x8) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xfff2, 0xffff}, {0x0, 0x12}}}, 0x24}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) sendmsg$sock(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) accept4(r5, 0x0, &(0x7f0000000000), 0x80000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) 10m55.831621638s ago: executing program 0 (id=679): unshare(0x6a040000) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000640)={0x0, 0x0, 0x71, 0x0, 0x101}, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1b1482, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'gretap0\x00', 0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000140)}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000702000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000440)=0x2, 0x10000005a6d, 0x2) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000540)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x12fb01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1, 0x8e, 0x80) ioctl$TUNSETLINK(r0, 0x400454cd, 0x102) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = getpgid(0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xff07, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f00000005c0)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)}}], 0x1, 0x8040025) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x10, 0xffffffffffffffff, 0x688e8000) socket$inet6(0xa, 0xa, 0xbf7ffffb) r7 = open(&(0x7f0000000300)='.\x00', 0x1c1d00, 0x6) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x48) 10m54.034600067s ago: executing program 0 (id=687): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x8) openat$cgroup(r9, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004000)={0x2020}, 0x2020) 10m53.762949167s ago: executing program 0 (id=690): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r5, 0x2d) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000002300)={0x2, &(0x7f0000000140)=[{0x30, 0x80, 0x10, 0xfffff004}, {0x6, 0xaa, 0x4}]}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x4, r9}) ioctl$DMA_BUF_SET_NAME_A(r11, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r11, 0x40086200, &(0x7f0000000540)=0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r11, 0x2, &(0x7f0000000140)=[r10, r7, r10, r7, r9, r0, r10], 0x7) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000180)=0x8) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendto$inet6(r0, &(0x7f00000001c0)="87", 0x1, 0x24000000, 0x0, 0x0) 10m53.475181022s ago: executing program 32 (id=690): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r5, 0x2d) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000002300)={0x2, &(0x7f0000000140)=[{0x30, 0x80, 0x10, 0xfffff004}, {0x6, 0xaa, 0x4}]}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x4, r9}) ioctl$DMA_BUF_SET_NAME_A(r11, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r11, 0x40086200, &(0x7f0000000540)=0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r11, 0x2, &(0x7f0000000140)=[r10, r7, r10, r7, r9, r0, r10], 0x7) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000180)=0x8) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendto$inet6(r0, &(0x7f00000001c0)="87", 0x1, 0x24000000, 0x0, 0x0) 1m52.575841054s ago: executing program 4 (id=2705): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) arch_prctl$ARCH_SHSTK_ENABLE(0x5003, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000380)={{r3}, 0x7, &(0x7f00000001c0)=[0x1000, 0x7, 0x7, 0x4, 0x80, 0x2, 0x0], 0x8000, 0x5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) write$nbd(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000000040000900000082b0cfc43379659415"], 0x40) dup3(r1, r0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) socket(0x1, 0x2, 0x0) 1m51.609121022s ago: executing program 4 (id=2708): syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpriority(0x2, r2, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) utime(&(0x7f00000000c0)='./file0\x00', 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) 1m50.259455607s ago: executing program 4 (id=2713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f00007dd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1m48.377866977s ago: executing program 4 (id=2717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(0x0, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x4, 0xe000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r5, &(0x7f0000000780), 0x0, 0x102, 0x0) ioctl$KVM_TDX_CAPABILITIES(r2, 0xc008aeba, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x1, 0x0, [{}]}}}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m47.182621238s ago: executing program 4 (id=2720): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2) sendmmsg$inet6(r0, &(0x7f0000004240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x18}}], 0x1, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa0500070084000000060004404e2000000c00028008000140ffff"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m46.59888921s ago: executing program 4 (id=2725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a40000000206050000000000000000030000fffd54000704a70004404e210000050003000500000008000a400000000008000a400000000308000640f800000f060004404e230000060004404e2200020800064000000c630500140008000000080013400000000905000400000000000900020073797a3100000000e37c782c050003001f0000000c00018008000140ffffffff05000500020000000500010006000000"], 0xa4}}, 0x20008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="280000000104030000000000000000000300200405000100010000000a000600000000040200"], 0x28}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000044) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xa0}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b040000000000000000020000003400048018000180080001006f7366000c00028008000140000000041800018008000100647570000c00028008000140000000150900010073797a30000000000900020073797a3200000000140000001104010000000000000000000100000a"], 0x88}}, 0x0) socket(0x11, 0x800, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_generic(0x10, 0x3, 0x10) 1m46.45070339s ago: executing program 33 (id=2725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a40000000206050000000000000000030000fffd54000704a70004404e210000050003000500000008000a400000000008000a400000000308000640f800000f060004404e230000060004404e2200020800064000000c630500140008000000080013400000000905000400000000000900020073797a3100000000e37c782c050003001f0000000c00018008000140ffffffff05000500020000000500010006000000"], 0xa4}}, 0x20008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="280000000104030000000000000000000300200405000100010000000a000600000000040200"], 0x28}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000044) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0xa0}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b040000000000000000020000003400048018000180080001006f7366000c00028008000140000000041800018008000100647570000c00028008000140000000150900010073797a30000000000900020073797a3200000000140000001104010000000000000000000100000a"], 0x88}}, 0x0) socket(0x11, 0x800, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_generic(0x10, 0x3, 0x10) 9.732166025s ago: executing program 1 (id=3093): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newchain={0x58, 0x64, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x8, 0xffe0}, {0xfff2, 0x8}, {0x5, 0xfffe}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffff}}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}]}, 0x58}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67100000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) 8.651582715s ago: executing program 1 (id=3098): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x7, 0x105080) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000180)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', "3f4051c4", "a44a889722b66244"}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_open_dev$dmmidi(&(0x7f00000001c0), 0x4, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_BULK(r9, 0xc0185502, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x3}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 8.466331035s ago: executing program 6 (id=3100): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1802886204ec980eb1e4"], 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200810, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r7, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x20080) 7.833266548s ago: executing program 6 (id=3103): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$ttynull(0xffffff9c, &(0x7f0000000500), 0x800, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000008c0)={0xfffff801, 0x6, 0x1000, 0x4, 0x6, "fc1c92867a85316d4970d64a82ffa658031299"}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x48000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x80085665, &(0x7f00000000c0)={0x6, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000200)={{0x8, 0x3, 0x1, 0x2000003, 'syz1\x00', 0xe8}, 0x3, 0x400, 0x8, 0x0, 0x2, 0x805d2, 'syz0\x00', &(0x7f0000000500)=['/\xa9e2\xd9\xb4\xb9\x1b\xedv/\tus/\n\x00@\xee\xe4\x90\xee\xd1\x00\x00\x13\x10', '/dev/snd/conerolC#\x00'], 0x2e}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ibss_ssid, 0x6, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10040106}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4080) fsetxattr$security_capability(r7, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x4be76ba2}, {0x4, 0xfffffffd}]}, 0x14, 0x3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f300000040014007b76689fcf160abdbbcc2e78cbb91fcd8524c22ffeba3e9e52655a338fe0881b61cb6fcf8f3e19041e8450cb42bb79cc797477b7a5f8f9ebb7c55cd9e4cd08b93d1ad8566ef709897fcc6051738e292a5e"], 0x38}}, 0x0) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000180)=0x9, 0xf) 7.702829121s ago: executing program 2 (id=3104): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) fanotify_init(0x10, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) ptrace$setregset(0x4205, r0, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)="51b81649e9e3eef074b57f2caf79", 0xe}) ptrace$pokeuser(0x6, 0x0, 0x118, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r3, 0x40187542, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x50) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018008000100666962001c000280080001400000001408000240000000020800e040000000120900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) connect$can_bcm(r5, &(0x7f0000001cc0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x80}}, 0x0) close(0x3) 6.306648306s ago: executing program 2 (id=3106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 5.512879708s ago: executing program 5 (id=3108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0x6, 0x27, 0xf9, 0x4}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x2, 0x3, 0x8}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood', 0x8) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 5.443114393s ago: executing program 3 (id=3109): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) 5.432923s ago: executing program 1 (id=3110): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0xca1, 0x2, 0x7, 0xd6a, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x4c, 0x100, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', "3f4051c4", "a44a889722b66244"}, 0x28) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400480c}, 0x2000c040) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r10 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$USBDEVFS_BULK(r10, 0xc0185502, &(0x7f0000000300)={{{0xc, 0x1}}, 0x91, 0xc, &(0x7f00000003c0)="b648489ede2a3a891565dacc795bd2036709d23170c475cd602af46621461810925f89ead9f8a6ec485d603be96fb3d76121328733d27a5becc6eac413bc526cb8604e7b0c4d3d0ec5bce8a4a8e9abb73c6b70338cb675776514883113dc1ece4f21d6178860b95f87c79cffa5fea4aeb1f80ab20b1b3313709022a4fbd3aea41ca47d717ba96bf85e88fd755eb12eecca"}) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r11, 0x0) 5.368362056s ago: executing program 2 (id=3111): writev(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)="c1c3c13b5705794388ca4522b6e472890a8bf5c43db963215a3f9fe4a68cb0eb9a1d1a57211629613867b61e3a87a1161c1438d60fd38102df002a0da4586da9936b032e164cfe9158b932377bd62fa9871dee55ceda711a811a1323d02cef10e800534952f7e7a4def0a367405b8d8f2ab649d2db5589641060a666cda62cae765c20bc97954c3d9132d4cbad746c426df416268b86ef8d15453ed3c3442a6bec7507a6a9b773ddd67d3d905a5847d2636176a76741ee59a8aac2fc5abd2f81b7a27c6ee537ad057f97a6faa9f2d1aaede833de97066630d606b480fadc622f1c688714d7791554b498d23c18a83b57657cc44f23b0e7cae5a2449b43aa0cdffe973874c9ade24051e4d5ab19e70faa1768377e47e34a267979446aae01673c3acb5bb4480cced19c7d77eba14eedb662bd9862816fb7812e9af1f8a6b33004e7d26a74f35f03523942efec91af36dad82ede52ab8420c9d0c6adf8ce0b31c5dd6365bb6c5e25f6fbcccd2b7ee398a26cf1cb3c3ebdffca3fa54aac970adbc6eae2c0f83264bdc3958a2a97f436d56e4ad3d84335d8f4841e19ad9e34bd11fb00d01ae6f238bf97ac358ae604f2e1bf172ff4a4a7faeb79a411590464f49fa778d7d0f78b07f13321c9d6c9ef4ed1bafb0734efd105f315f7525fe44f98c612ccb130bdfe70d33efb859486d13df764b7d4de409447fc4cda67783c57f618dd4972a77c572f346a0824af68c7f950112aff9a7cadef22f9433b881d6b8ba4b7a2779c7780a4bf0b7f0548fc2e290ba8841a01faf979720b0d0e7b0c60e963cc2beae524984c240b32395f81662380cfbce30d8dfa6f0c4bef15b877b361f4f79d9a69355824c8a99316e963dc40943c50d227a274d07f7f369bb074b82ece32bf8649ec53681e3831f5c484343921f7da23b8d0cbb4679dc3c098cef062df69da4e02ef8f346a4d3d5151297563679818ee25e9c1645240b1bf595a13f302cac06a79479b8f9eca6a47799a60f283c95dc2aaac4c156b0293c730a36f1bfc47171bc4cc841e428547cc1e0c58bbda3307e2d7bc44edfee884395958cafca8e3dabe7b88f80825d2c918f8d3959fc97c3fbf190fbe4588dd14ca210926f77b07b3a66d80b35bf4a291ea35320f3c35919fd556347ee7d49611348542d9915928100c2ed9730fce27a4e04b94b59b41c848f03908d57f170aae77d5a22b73037f67f557d73adcaf5d2fc4c0d25ec20c0b5fd418b119a24b4222d8809764437dcf08ac8670ae42a21cfdad8652c3a5e431f057e8cb5c0ae94dd223ed6a37643d08ca4598ab30cf06a1e0b3ad297e263cb797b8a0ad73b0fd3b14ea492034a62844fc7da99247e65b4e0d7febd73eab956ebc8ba7b8049b59dd70b4f411a43bb86eab1ebadc110ad8018dbe5f24d9458a461bef5ff9a579a3619ff56b52ca69b6da0421c9caf50384aa1e0e205d4aacbbbf13ce632282e382c9e4231d5dc73446425310b7a516b078aaa6eb931158f8b2760fe8963e85a770ecf5f0cf85cad54f0242d09254a55125cf1ca6ba577fd1f610fcef4cc3206f5ba98e1d1ca38bcd798a3af06c90370ae91f2e5ddf9c9c7c842e7f027104c65dd5f399b7e22b5d0379ae83fc4c9955d8aeca476ad5afc170ec01e909a780ea204eaf2b79bae63b2672101bd57c811780161c8631a4538db834faebd8d2921a3c1af6b6992b608b721eda5101eef8d23b599151fe4e2561c9e3791724201e63c76691e9bdf3a3050ddd55f50578fa2023d38bd33439294ac633939263ef869078a89bc1258d5087b8af64941ddfef2e0fc7e0b2f11ee0b63102cec9290b8a2e4843366a776933514d767b2a8c15ffb221aeec115dbd7d4f4bfea404fdbc03ba81b20c72d68e032c5440c991d3b41b5dc82cb7b813fc2740a40956e41a8dd641a339a90975fe855327b4d1cf777844cc454225c187f0b1435449b84a54ff2ad6c0e7feea50670693178437d4ec82245fbb0066decfe9f16893951984d931ca802a6fc0ffcdadae401a99fd0d18e21a8fb847f28f770d6f817deebb0055de51002e8ac4935bd4d0c791389bef43b00d6fca9a4aba776b8923987e7eae6ab2079b1e7e7c69d196b369df98eb269e95ce6005e4633f6f0fb649ea3ecdadddd0d4050a70a5aec09e718e87cefed82a0f1f55971a884f6f4f0b76c370461d35cb529f2c4bdccbfb125287de76ff4c73bc53718a9650b5554ea7dfe7bc3207d144199a0bfe1fa1066e62b907b9a9c3bfdacd0e928340cad2fb6849b69b5bb8f1cd59950029ccac2366c791f67f0d77ade582d9c64e58b829d349310fe7c89f329afb284e0e2748dee4b7e689969cc801fa15da4e6b8ee97d61bffe468d93206b2b08cbd0a8f656ad54b3c7b795d8ea172ed61ba6f98b66ba252c7f372a96ec5adc038aea62d60fac1a983dfa0829ab6ce5165bea4eb92273f8704c4bbfb79d6047766a45be33029ca3c98d9c46027bfb0407e049e9c6e73e80572456e082f5cd1e7fefaeb50fdcfa564bdcbcfa59a3295ee8551c26f7d753142c2ac281bad6aabd295c708dd0227acfdb7e959dc2480b2e9e8ef9bd9cda1a21731b6a588d236c911f1ad71c800ea8f954b5bd3cb1387fcc653d6d97d153db2fb828ed9a4b0db2456b46b62e456657228221f81b307898e0fc695de1dbbdcb031cf994c54837833813ca1dfcb8cf215d2596a88a1155b4314c1cd73b2084055c3302e42e9b9a8505b5978d5ade6578818e143e0f1e67d48788d0f888600a53d49458d00d79f277ee6f7a554f0301653f79543408fa0d659ea849cd0f235dff5e5ded86b3527eab97bbd643e9380a8a798c87d08394a42085a7326bab9c02eb8e0b5c22b6cbdcacc684324f0ae89394edc171be53ee9bd8e8ae3837a14587ea6ad7c8cb77faae817a5f16e0e0ba53ab23dbbd625e71fd86b82df4f6ba48488e04f273fc134c2cfb12cabc0d76266e71ce8b52b4557f2bb83bf225fe3b5bf01d5e423ef38bea8e0954d26fad134692f14cbd40f7eb73761cd29b02603f7eb4b6639946913f386544ea8028b539add7cf1d8afb6f9311bbf4d6a99e616eb10e1dc83d0c52db91e39acecc581bf6dd26f368163bbc8ef25a745313471ace25b061e1ca45b099c80f352e1d88f9c43584701b668bd7de8527d7fac736c9ad082dd4ae71883bfda82ca860c7f757f4580241b745e783237c5478c1720a42d1d2b56c4a78d21464a300cf295177da610249579f55c2f1faa1e20a83e12b2bdb70a2b8c16df99c54404877db73999a0eb0f2a182a7d2d0f523679497d649649a032d4b1b70277c1afbd145fd2372b22abce5eb57918fbafe8e483003f213a5d35d65eec8f2e133364a4c4a382aa0db0e185646683bfe394d2e13edf1aaee96a4eb99a61e767fc2b1c21e34462e0b8f3161f88391e12ee454884394e27979e55114c7f84339f554fdb77d4d13f081bae17c5907727dfa49031311af000c3aefec49b855ac9003d6089ba5a0df9ac97660347dd2e302c360e01260f031987a69d58200888d14fa511f16085febc5e532827c298af9451a134c535d5ef47d9e3278795e5f75ba29161fbd01592d58ff6520364b37fa5fb7e133cc788757f949ff3b6b561eebf826d06bed19d07afd377b2fdcd6e13115a2029661a5e7202440a8be6bb051ff6f2e852373cefe506e19329ca58ea7d7a341aa11be1c56ec308e1e4e2da873f6b4b34685da3b0eb535421e8d66f252b03ab13421d12235f8716241209502c01d31067634fcb08e4c088bcf50f796bd82dbd9dd33af49d6613b24c5d879f0fd7604de42318083565e9e86ef0cbf86968395ed4ad32870b83f39efbc16d19ab84ab1718634921d66826fb94d357f3b0512ed87ee497eb8773be2fb08f414eae06b2a94029946574b705a4db417ac511d1388838e62db0ade098a2754e3909af2c80697f5a42fee2c2a", 0xaf3}], 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac1414", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.335724762s ago: executing program 3 (id=3112): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x2, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5.157549944s ago: executing program 2 (id=3113): r0 = gettid() r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x3, r3}, 0x38) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) r4 = eventfd2(0x4, 0x80001) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000180)={0x0, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000240)="0e826edcd390494068f2b5fc091af61b89dae4262c23caf19edc1830f4744039e38d98351012565c06f8dce6bc39d9ee2c0df0a4f3bd1dd88682649789c12861c7e7c16a1b895c6d939e0c0cfb4196cf8feec1883c9f42222da268406b30c6f73e60ca7a2d3b08778b6595b2daa8343a00cc0bccc286898f418bc9f5e8851cc56f9560e75a231b038a0f404cc18f62e337966d8856d921f376fd81e441b147e322d83e5e", &(0x7f0000004000)="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"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r6 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r5}) io_uring_enter(r6, 0x44fd, 0x3, 0x1, 0x0, 0x0) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0x400017e) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000380)=0x4) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) openat$cgroup_ro(r10, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) ptrace$setregs(0xd, r0, 0x4, &(0x7f0000000480)="75efcda6ccc5a91c4277b7f6cd9a8384b8f75b12711607f96add7cbbfa338a314c3526c1a619b41040228dbeca1c4f8ba976e6e0d34e9318ca712bdc48ff2ff581e1ab8eb44d1ad81e16881484e593ef17e803e0bc2c4f386bbd574504eeb7a4d42ddd3d801f2feab1c2d121261b9cc9065964859650fb01ba95d3df9c850221dd93880a02ff3e4e25e09e837550f3969aa890395e5909ec02313f3a84e12a1d8a20cee46dab7e3eeabef33684580f4693e47fcf278134370c4a57cdaee8e2a16070fafb798c220b79a6f104ace90bf295eca3183f63fda327d92cb5036cb8175f50503f6b6841eda58ab5") read$FUSE(r9, &(0x7f0000001fc0)={0x2020}, 0x2020) 4.986662499s ago: executing program 2 (id=3114): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x8000000000000000, 0x1c1102) r1 = socket$inet(0x2, 0x4, 0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001e00)="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", 0x4fb}], 0x1}}], 0x2, 0x0) sendto$inet(r1, &(0x7f0000000580)="17", 0x1, 0x10008095, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = syz_io_uring_setup(0x6156, &(0x7f00000003c0)={0x0, 0x52b, 0x2000, 0x3, 0x54}, &(0x7f0000000240), &(0x7f0000000340)) io_uring_enter(r3, 0x215c, 0x6fe2, 0x2, &(0x7f0000000440)={[0x4]}, 0x8) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000480)) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e25, 0x9, @empty, 0x40003ff}, 0xfffffffffffffea5) writev(r0, &(0x7f0000000500)=[{&(0x7f00000005c0)="aa3c78b500c60daa7bc1d27e3d95c1e1f67aa47c0afb20cd5d253f5d5cb45ef1caa5b9e2d429acbd7cede31c6b912893d74163683decada70d8a94e15f86329c55f01cbed86cbf9777f6305d8cebbbcf54a35b855591ad177e7409776f1d6cc6d1e8cc5be4e7bb71da30a4b3d7caad0779aa21bb36f87fa1b5a2cb5147cfcdce4708c00716818f8b55d74d66f0b0c9c3a43ad7bf44937338ea01a240acdd24837d61e4dd01bae9d4f65e0b92ef23ecaf09f77f13de180cf1501ecc4f", 0xbc}, {&(0x7f0000000680)="738af0905f151734794f9d41e13b85097405e7cf77099b9ad7405457c958d27194a83a4ac168930d7fa69ad7667d8f363acecb1840f38df515f23deb31c9c00fca404278043c5df7e41dbc1409f1550593d47e1ace551c02eb4e20431b2a08bc656d436b16e2f318d72795fd26d82f0e333f3dfec9ef4c174d5c79108cd4aa3339", 0x81}, {&(0x7f0000000740)="0973ba7150dc7aff689379ecbe775c65ed66a401e632284ac435389a72dc9da942897ae58616dd29eab1d5b5a760ec9179df41b713c35485e5c0a8e2e80e55f3c7982554f9d9b69d1bb61d6f1acf670853fe04074877691ed8e1e52e021267d0ab63a3346223bd2e433d37ea35219b3b7dac6148103cffdb26d76a7a834a174aaaeb463a24cc2f240e977018c47de60ceaf4ba90d6e77be4332ccfbeb90c963e4081e628aecfc7cf1d8e78e182d2a76f3e68c9fc2f95016b7d6c307d5c9132c426b1c6499e0e18c60aace2ce31", 0xcd}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f00000002c0)="fc934c909d547b47ffb729b30d38ff8236eb8521729bed958da053282c59d09f98c429343fc8ee4b94f3d33df7d506351db83dac03bf61a4cf6d", 0x3a}], 0x5) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28, 0x0, 0x0, 0x10}, 0x28) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000900), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4800e80010000d04283fe9687ba6047142472192af40069b72a2a34c010b0ae67d4b5e234651fd876000"/51, @ANYRES32=r2, @ANYRESHEX=r5], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010425fbe5ad600027862cf123004f64d6a04c001f0092f6ed85b8eb13468a7bf47e394fc296d4a45ea0eeead32ca1fd8a0d10db00"/68, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c45}, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) 4.866765094s ago: executing program 6 (id=3115): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpriority(0x2, r2, 0x5) pipe(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) utime(&(0x7f00000000c0)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) 4.545459633s ago: executing program 5 (id=3116): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) fanotify_init(0x10, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) ptrace$setregset(0x4205, r0, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)="51b81649e9e3eef074b57f2caf79", 0xe}) ptrace$pokeuser(0x6, 0x0, 0x118, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r3, 0x40187542, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x50) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018008000100666962001c000280080001400000001408000240000000020800e040000000120900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) connect$can_bcm(r5, &(0x7f0000001cc0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000"], 0x80}}, 0x0) close(0x3) 4.447150342s ago: executing program 3 (id=3117): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r5, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 4.394717024s ago: executing program 2 (id=3118): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x15, 0x0, 0x2}, {0x81, 0xff, 0x7f}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x4) pwritev(r1, &(0x7f00000001c0), 0x6, 0x7, 0xfffffffb) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000001b40)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="200001000000171768b64a25acd1b744c8d7a75e9868be0d9a6ee0e6b1822b14b416a2cf7b993a486c2bd8a3657800d06658efb8bbbbcc5cf0258846cdcedc49ec7b8affec52d819275ba3e7669b51f4edcd2ffb911c8fc3673db27118b94856c9621ee3c50591a383b2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0xd, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x618052e3) poll(0x0, 0x0, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15"], 0x15) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 3.147842117s ago: executing program 5 (id=3119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 3.147227764s ago: executing program 3 (id=3120): socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.996626045s ago: executing program 1 (id=3121): syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpriority(0x2, r2, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) utime(&(0x7f00000000c0)='./file0\x00', 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) 2.993203857s ago: executing program 3 (id=3122): syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpriority(0x2, r2, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) utime(0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) 2.98051327s ago: executing program 6 (id=3123): syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpriority(0x2, r2, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) utime(&(0x7f00000000c0)='./file0\x00', 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) 2.966723742s ago: executing program 5 (id=3124): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xb7, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x7, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r0, r0}, &(0x7f00000001c0)=""/44, 0x2c, &(0x7f0000000000)={&(0x7f0000000280)={'rmd160-generic\x00'}}) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r6, 0x95) 1.826425171s ago: executing program 1 (id=3125): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0xa4, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x4}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) 1.686361465s ago: executing program 5 (id=3126): mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 1.49762301s ago: executing program 3 (id=3127): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc000000160001052cbd7000fedbdf25fe80000000000000000000000000002500000000000000000000ffffe00000024e2200064e24fffa0200802088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14140a00000000000000008ea3ea2127d0f3b46f00000000000004d533000000fe8000000000000000000000000000bbff01000000000000a2000000000000000700000000000000fcffffffffffffff00000000000000000400000000000000ff3f000000000000fe4800000000000004000000e3ffffff05000000000000007d4d000000000000fff700000000000005000000f8ffffff0900000026bd7000000000000a00027f0100000003000000de8000"/189], 0xfc}, 0x1, 0x0, 0x0, 0x4075}, 0xc814) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000003060104000000000000000002000005050001000700000025e0144d06db249617cab2013cfc2694c2e1fbf957bf4ea85e3a962656fcaf7b2c5242df28d75e9a5317dfd9db9095578c19f668f1cdb1bf3d29d6ab43"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1.466302625s ago: executing program 6 (id=3128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xc1827000) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d663dd508cd566d13d83ff5586c86315d2538dff0388ba15ccfcbb7b4201fe677ba2539189900a332040f8832cda5d83bc4acfc2156f2845010dd40883560680a91689d320774b585f18ab465e16d1f43383c3c64d8601dd4ea6629ba555d3063ac7ed4dec5f5b222e2d393717205777a86f98c2616733813776ce9740a680db30fa87e65d50aefae4ac82b5ca2cdddeeffeaeb97d9fc29f76e2f86a5832e19a054a53e3d83101149db6e31c23bf637e15dbb4ebdfd81a6291b2c06ce8676ec9f7150291e323778753f93251188ba00"/227, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRES16=r1, @ANYRES64=r0], 0x70}, 0x1, 0x0, 0x0, 0x4040881}, 0x4000000) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndtimer(0xffffff9c, &(0x7f0000000380), 0x80400) 1.208610705s ago: executing program 1 (id=3129): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) r1 = socket(0x400000000010, 0x3, 0x0) syz_usb_connect(0x5, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc858}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xe, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x80}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @exit, @printk={@u, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3}, 0x94) 424.83179ms ago: executing program 5 (id=3130): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0xd, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x90047763aa241143, 0xb, 0x1, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x8d, 0x9}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x9, 0x9a, 0x5, 0x20, 0xcc}, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0xa0, &(0x7f0000000200)=@string={0xa0, 0x3, "353c8badb9996ae9110a6e9d60a96238f41153f7e88a1a09df4e80c79310056f2c3f9df6f96aaacd56332c67185b7acfb73b333a0b224b8ca2015a0f0f236298c283bc094b13db397df6a4fa3cc654cbc9aa8669a2f8de24593bbffb8919826d30adc89274357eab7600133d083e105031d16f18261b4f293b7a3eef378bada3866ab3f664b6c228a63010a258b950bb95488fd46eb67b7aff5d1b806358"}}, {0x17, &(0x7f00000000c0)=@string={0x17, 0x3, "22a11ca0a71e43d7f24b7e6cd2746c86569e0a930f"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x1d, &(0x7f0000000340)=@string={0x1d, 0x3, "0a00e4ba1ba0407fe242d1b867f80c941acddea52cf2e926ef8e11"}}, {0xfc, &(0x7f0000000380)=@string={0xfc, 0x3, "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"}}]}) syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x0, 0x7, 0xf2, {0xf2, 0x22, "b0f233b5274fdfe3546c6d2a5fef1cc5165d71baee48580be41b17de6fb371f5db96be2e260d92ec02ae3b4d3f8b2c5989bd2d46450e46482ecb356a20d650a588b6c4320ab0073facf0b20fa971dad150ed7e13a65091d4b0a2f4876581cb20aae95cd568123c7565d2500caf5b1b45378ec04633f0a91e89fd3561190f2e0a091d11fc1bcd99fc58ed508f2bc722cba11522958c034d124098bc05e72c23cedc5e60883455be32245d4e3a62cd8c8dbc672b2a2477b690c812dad2a1f08fc0f198c4030bdf9d76fde214b258014c4bff489abbc55516963524c89abf54f70358a8cbe59101264009eddc92d3a79e01"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x226}}, &(0x7f0000000640)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x28, 0x1, 0xf8, 0xf8, "43ef8601", "75dd5bef"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4c, 0x60, 0xa8, 0x80, 0x2, 0x4, 0x5}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000740)={0x20, 0x17, 0xb, "c0a6aa33e2bce5f3bfbbd7"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xb8}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3, 0x7}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x10, 0x80}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000900)={0x40, 0xb, 0x2, "d1e9"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000980)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "de76"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000a80)={0x40, 0x1c, 0x1}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0xf7}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x40}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 6 (id=3131): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) open$dir(0x0, 0x20080, 0xa1) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x6, {0x101, 0xb, 0x0, {0x4, 0x0, 0x100000000bdd6, 0x403, 0x10000, 0x5, 0x9d1f, 0x4, 0x8, 0xa000, 0x8, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc879}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xee01) utimes(&(0x7f0000000040)='./file0\x00', 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x83, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) pipe2(0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000400)={@none, 0x2, 0x6800, 0x9, 0x7, 0x35, "6daea5fcb7105de94a8bc43362b531c4b695a8a4d29df6d009291fe8d771c06f171adf499c8a7949afef39e74ee6ce179279451a4b788c9a9ebe874c22ee5590b20acf7e546dcd6cc09d618bce1cdf069d4874ac934d72f198ece8ec19439b17f67f6cc48d305b2e67db1f4658901d4366d04454ce772ad4cdc183b96e14415a"}) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) kernel console output (not intermixed with test programs): pid=15805 comm="syz.1.2624" path="socket:[56496]" dev="sockfs" ino=56496 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 771.640072][ T30] audit: type=1400 audit(1774147459.834:926): avc: denied { read write } for pid=15820 comm="syz.5.2629" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 771.691324][ T30] audit: type=1400 audit(1774147459.834:927): avc: denied { open } for pid=15820 comm="syz.5.2629" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 772.351059][ T5915] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 772.512530][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.613047][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.636752][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 772.671021][ T5915] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 772.799440][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.821036][T12495] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 772.829475][ T5915] usb 5-1: config 0 descriptor?? [ 772.944748][T15842] tipc: Started in network mode [ 772.949724][T15842] tipc: Node identity 3e5de337a6dd, cluster identity 4711 [ 772.957523][T15842] tipc: Enabled bearer , priority 0 [ 772.969117][T15842] syzkaller0: entered promiscuous mode [ 772.974793][T15842] syzkaller0: entered allmulticast mode [ 773.502872][T15845] siw: device registration error -23 [ 773.898840][T15838] tipc: Resetting bearer [ 773.913216][T12495] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.936904][T12495] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 773.946962][T15838] tipc: Disabling bearer [ 773.953364][T12495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.979727][T12495] usb 4-1: config 0 descriptor?? [ 774.184405][ T5915] hid_parser_main: 28 callbacks suppressed [ 774.184427][ T5915] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x4 [ 774.323876][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2633'. [ 774.623801][T12495] usb 4-1: USB disconnect, device number 58 [ 775.351216][T12495] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 775.630996][T12495] usb 4-1: Using ep0 maxpacket: 8 [ 775.730429][T15858] siw: device registration error -23 [ 776.065315][T12495] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.157481][T12495] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice= 0.40 [ 776.266922][T12495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.547147][T12495] usb 4-1: config 0 descriptor?? [ 776.712953][T12495] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 776.879375][T15851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 776.899889][T12495] dvb-usb: bulk message failed: -22 (2/0) [ 777.081254][ T5915] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 777.149286][T12495] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 777.191725][T12495] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 777.200707][T12495] usb 4-1: media controller created [ 777.318697][T12495] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 777.422949][T12495] dvb-usb: bulk message failed: -22 (1/0) [ 777.452948][T15869] fuse: Invalid rootmode [ 777.589745][T12495] DVB: Unable to find symbol mt352_attach() [ 777.653158][T12495] dvb-usb: bulk message failed: -22 (5/0) [ 777.725743][T15871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2639'. [ 777.949416][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2642'. [ 777.979913][T12495] zl10353_read_register: readreg error (reg=127, ret==-121) [ 778.177775][ T5888] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 778.600119][T12495] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 778.612352][ T5888] usb 3-1: not running at top speed; connect to a high speed hub [ 778.687638][T15871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2639'. [ 778.707180][ T5888] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 778.832990][ T5888] usb 3-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 778.840998][T12495] rc_core: IR keymap rc-dvico-mce not found [ 778.847953][T12495] Registered IR keymap rc-empty [ 778.858081][T12495] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 778.865825][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.884868][ T5888] usb 3-1: Product: syz [ 778.889178][ T5888] usb 3-1: Manufacturer: syz [ 778.899232][ T5888] usb 3-1: SerialNumber: syz [ 778.949954][T12495] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input41 [ 778.957762][T15871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2639'. [ 779.025253][T12495] dvb-usb: schedule remote query interval to 100 msecs. [ 779.052369][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 779.063971][T12495] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 779.145940][T12495] usb 4-1: USB disconnect, device number 59 [ 779.232416][T12495] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 779.707471][ T5888] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 779.997606][ T5888] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 780.048258][ T5888] usb 3-1: USB disconnect, device number 63 [ 780.235655][ T30] audit: type=1400 audit(1774147468.364:928): avc: denied { remove_name } for pid=15902 comm="syz.5.2648" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 780.258777][ T30] audit: type=1400 audit(1774147468.374:929): avc: denied { unlink } for pid=15902 comm="syz.5.2648" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 780.328872][T14977] udevd[14977]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 780.355983][ T30] audit: type=1400 audit(1774147468.484:930): avc: denied { accept } for pid=15902 comm="syz.5.2648" lport=54964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 781.376675][T15929] FAULT_INJECTION: forcing a failure. [ 781.376675][T15929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.481278][T15929] CPU: 0 UID: 0 PID: 15929 Comm: syz.1.2657 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.481308][T15929] Tainted: [L]=SOFTLOCKUP [ 781.481314][T15929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 781.481325][T15929] Call Trace: [ 781.481331][T15929] [ 781.481339][T15929] dump_stack_lvl+0x100/0x190 [ 781.481372][T15929] should_fail_ex.cold+0x5/0xa [ 781.481397][T15929] _copy_to_user+0x32/0xd0 [ 781.481418][T15929] simple_read_from_buffer+0xcb/0x170 [ 781.481437][T15929] proc_fail_nth_read+0x1af/0x230 [ 781.481464][T15929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 781.481491][T15929] ? rw_verify_area+0xce/0x6d0 [ 781.481515][T15929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 781.481539][T15929] vfs_read+0x1e4/0xb30 [ 781.481569][T15929] ? __pfx_vfs_read+0x10/0x10 [ 781.481594][T15929] ? __fget_files+0x215/0x3d0 [ 781.481619][T15929] ? __fget_files+0x21f/0x3d0 [ 781.481645][T15929] ksys_read+0x12a/0x250 [ 781.481662][T15929] ? __pfx_ksys_read+0x10/0x10 [ 781.481685][T15929] do_syscall_64+0x106/0xf80 [ 781.481709][T15929] ? clear_bhb_loop+0x40/0x90 [ 781.481732][T15929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.481750][T15929] RIP: 0033:0x7f9a89b5cfce [ 781.481765][T15929] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 781.481787][T15929] RSP: 002b:00007f9a8aa13fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 781.481805][T15929] RAX: ffffffffffffffda RBX: 00007f9a8aa146c0 RCX: 00007f9a89b5cfce [ 781.481816][T15929] RDX: 000000000000000f RSI: 00007f9a8aa140a0 RDI: 0000000000000004 [ 781.481827][T15929] RBP: 00007f9a8aa14090 R08: 0000000000000000 R09: 0000000000000000 [ 781.481838][T15929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.481847][T15929] R13: 00007f9a89e16038 R14: 00007f9a89e15fa0 R15: 00007ffc23c285c8 [ 781.481873][T15929] [ 781.865578][ T30] audit: type=1400 audit(1774147470.064:931): avc: denied { create } for pid=15928 comm="syz.3.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 781.885226][ T30] audit: type=1400 audit(1774147470.064:932): avc: denied { connect } for pid=15928 comm="syz.3.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 782.091014][ T30] audit: type=1400 audit(1774147470.264:933): avc: denied { write } for pid=15928 comm="syz.3.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 782.893816][T15950] FAULT_INJECTION: forcing a failure. [ 782.893816][T15950] name failslab, interval 1, probability 0, space 0, times 0 [ 782.966442][T15950] CPU: 0 UID: 0 PID: 15950 Comm: syz.1.2661 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.966472][T15950] Tainted: [L]=SOFTLOCKUP [ 782.966479][T15950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 782.966490][T15950] Call Trace: [ 782.966496][T15950] [ 782.966505][T15950] dump_stack_lvl+0x100/0x190 [ 782.966537][T15950] should_fail_ex.cold+0x5/0xa [ 782.966563][T15950] should_failslab+0xc2/0x120 [ 782.966583][T15950] __kmalloc_cache_noprof+0x7a/0x6f0 [ 782.966606][T15950] ? sctp_add_bind_addr+0xae/0x3e0 [ 782.966627][T15950] ? __pfx_sctp_get_port_local+0x10/0x10 [ 782.966654][T15950] sctp_add_bind_addr+0xae/0x3e0 [ 782.966679][T15950] sctp_do_bind+0x36c/0x760 [ 782.966711][T15950] sctp_connect_new_asoc+0x5e7/0x770 [ 782.966731][T15950] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 782.966758][T15950] sctp_sendmsg+0x171a/0x22b0 [ 782.966789][T15950] ? __pfx_sctp_sendmsg+0x10/0x10 [ 782.966805][T15950] ? preempt_schedule_irq+0x7b/0x90 [ 782.966834][T15950] ? irqentry_exit+0x180/0x670 [ 782.966868][T15950] ? security_socket_sendmsg+0xde/0x230 [ 782.966889][T15950] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 782.966915][T15950] ? __pfx_sctp_sendmsg+0x10/0x10 [ 782.966933][T15950] inet_sendmsg+0x11c/0x140 [ 782.966954][T15950] __sys_sendto+0x446/0x4b0 [ 782.966974][T15950] ? __pfx_inet_sendmsg+0x10/0x10 [ 782.966993][T15950] ? __pfx___sys_sendto+0x10/0x10 [ 782.967023][T15950] ? preempt_schedule_irq+0x7b/0x90 [ 782.967063][T15950] __x64_sys_sendto+0xe0/0x1c0 [ 782.967083][T15950] ? __pfx___x64_sys_sendto+0x10/0x10 [ 782.967105][T15950] do_syscall_64+0x106/0xf80 [ 782.967128][T15950] ? clear_bhb_loop+0x40/0x90 [ 782.967150][T15950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.967169][T15950] RIP: 0033:0x7f9a89b9c799 [ 782.967185][T15950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.967200][T15950] RSP: 002b:00007f9a8aa14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 782.967218][T15950] RAX: ffffffffffffffda RBX: 00007f9a89e15fa0 RCX: 00007f9a89b9c799 [ 782.967229][T15950] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 782.967239][T15950] RBP: 00007f9a8aa14090 R08: 0000200000004ff0 R09: 0000000000000010 [ 782.967250][T15950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.967260][T15950] R13: 00007f9a89e16038 R14: 00007f9a89e15fa0 R15: 00007ffc23c285c8 [ 782.967284][T15950] [ 783.628129][T15959] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2663'. [ 783.696511][T15959] netlink: 'syz.5.2663': attribute type 6 has an invalid length. [ 783.854695][ T30] audit: type=1326 audit(1774147472.044:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15958 comm="syz.5.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc479c799 code=0x7ffc0000 [ 783.896292][ T30] audit: type=1326 audit(1774147472.044:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15958 comm="syz.5.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc479c799 code=0x7ffc0000 [ 783.968152][T15964] fuse: Invalid rootmode [ 784.075239][ T30] audit: type=1326 audit(1774147472.044:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15958 comm="syz.5.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3bc479c799 code=0x7ffc0000 [ 784.193240][T15966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2664'. [ 784.743684][ T5888] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 784.996075][T15966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2664'. [ 785.015297][ T30] audit: type=1326 audit(1774147472.044:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15958 comm="syz.5.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc479c799 code=0x7ffc0000 [ 785.098638][ T5888] usb 2-1: not running at top speed; connect to a high speed hub [ 785.146867][ T5888] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 785.182259][ T5888] usb 2-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 785.203197][T15824] plantronics 0003:047F:FFFF.0018: timeout initializing reports [ 785.271237][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.279262][ T5888] usb 2-1: Product: syz [ 785.308582][T15966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2664'. [ 785.314935][ T5888] usb 2-1: Manufacturer: syz [ 785.335179][ T5888] usb 2-1: SerialNumber: syz [ 785.418358][T12496] usb 5-1: USB disconnect, device number 62 [ 786.497656][ T5888] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 786.843710][ T5888] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 786.864887][ T5888] usb 2-1: USB disconnect, device number 15 [ 786.920469][T14977] udevd[14977]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 787.712387][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2675'. [ 788.960713][T16022] siw: device registration error -23 [ 789.613291][T16024] syzkaller0: entered promiscuous mode [ 789.618971][T16024] syzkaller0: entered allmulticast mode [ 789.818739][T16031] siw: device registration error -23 [ 790.349724][T16036] ref_ctr_offset mismatch. inode: 0xabb offset: 0x0 ref_ctr_offset(old): 0xffffffff00 ref_ctr_offset(new): 0x0 [ 790.376229][T16037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2683'. [ 790.566106][T16040] fuse: Bad value for 'rootmode' [ 790.678458][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2685'. [ 791.373678][ T5915] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 791.587574][ T5915] usb 6-1: not running at top speed; connect to a high speed hub [ 791.592703][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2685'. [ 791.656092][ T5915] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 791.743723][ T5915] usb 6-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 791.830589][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.860560][ T5915] usb 6-1: Product: syz [ 791.867053][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2685'. [ 791.889379][ T5915] usb 6-1: Manufacturer: syz [ 791.909613][ T5915] usb 6-1: SerialNumber: syz [ 792.611547][ T5915] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 792.658718][ T5915] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 792.700199][T14977] udevd[14977]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.828474][ T5888] usb 6-1: USB disconnect, device number 44 [ 793.423791][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2688'. [ 793.781252][ T5888] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 793.961157][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 793.987686][ T5888] usb 3-1: unable to get BOS descriptor or descriptor too short [ 794.048316][ T5888] usb 3-1: config 6 has an invalid interface number: 3 but max is 1 [ 794.098988][ T5888] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 794.156806][ T5888] usb 3-1: config 6 has no interface number 0 [ 794.200485][ T5888] usb 3-1: config 6 interface 3 has no altsetting 0 [ 794.259112][ T5888] usb 3-1: New USB device found, idVendor=0403, idProduct=b812, bcdDevice=22.79 [ 794.326697][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.342568][ T5888] usb 3-1: Product: syz [ 794.346760][ T5888] usb 3-1: Manufacturer: syz [ 794.366486][ T5888] usb 3-1: SerialNumber: syz [ 794.420059][T16077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2695'. [ 794.657121][T16070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.846317][T16070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.972311][ T5888] hub 3-1:6.3: bad descriptor, ignoring hub [ 794.986364][T16081] ref_ctr_offset mismatch. inode: 0xd9 offset: 0x0 ref_ctr_offset(old): 0xffffffff00 ref_ctr_offset(new): 0x0 [ 794.998160][ T5888] hub 3-1:6.3: probe with driver hub failed with error -5 [ 795.006325][ T5888] ftdi_sio 3-1:6.3: FTDI USB Serial Device converter detected [ 795.016661][ T5888] ftdi_sio ttyUSB0: unknown device type: 0x2279 [ 795.053362][ T5888] usb 3-1: USB disconnect, device number 64 [ 795.070707][ T5888] ftdi_sio 3-1:6.3: device disconnected [ 795.346571][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2697'. [ 796.368576][T12495] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 796.585083][T12495] usb 4-1: Using ep0 maxpacket: 8 [ 796.616641][T16093] FAULT_INJECTION: forcing a failure. [ 796.616641][T16093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.641284][T16093] CPU: 0 UID: 0 PID: 16093 Comm: syz.3.2698 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.641313][T16093] Tainted: [L]=SOFTLOCKUP [ 796.641318][T16093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 796.641329][T16093] Call Trace: [ 796.641335][T16093] [ 796.641342][T16093] dump_stack_lvl+0x100/0x190 [ 796.641375][T16093] should_fail_ex.cold+0x5/0xa [ 796.641398][T16093] _copy_from_user+0x2e/0xd0 [ 796.641417][T16093] kstrtouint_from_user+0xd6/0x1d0 [ 796.641438][T16093] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 796.641458][T16093] ? __lock_acquire+0x4a5/0x2630 [ 796.641478][T16093] ? lock_acquire+0x1cf/0x380 [ 796.641500][T16093] proc_fail_nth_write+0x83/0x220 [ 796.641526][T16093] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 796.641557][T16093] vfs_write+0x2aa/0x1070 [ 796.641573][T16093] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 796.641600][T16093] ? __pfx_vfs_write+0x10/0x10 [ 796.641615][T16093] ? __fget_files+0x215/0x3d0 [ 796.641639][T16093] ? __fget_files+0x21f/0x3d0 [ 796.641670][T16093] ksys_write+0x12a/0x250 [ 796.641685][T16093] ? __pfx_ksys_write+0x10/0x10 [ 796.641708][T16093] do_syscall_64+0x106/0xf80 [ 796.641731][T16093] ? clear_bhb_loop+0x40/0x90 [ 796.641752][T16093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.641769][T16093] RIP: 0033:0x7f296e35cfce [ 796.641784][T16093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 796.641800][T16093] RSP: 002b:00007f296f33cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 796.641816][T16093] RAX: ffffffffffffffda RBX: 00007f296f33d6c0 RCX: 00007f296e35cfce [ 796.641831][T16093] RDX: 0000000000000001 RSI: 00007f296f33d0a0 RDI: 0000000000000005 [ 796.641841][T16093] RBP: 00007f296f33d090 R08: 0000000000000000 R09: 0000000000000000 [ 796.641851][T16093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.641861][T16093] R13: 00007f296e616038 R14: 00007f296e615fa0 R15: 00007ffca083b8e8 [ 796.641883][T16093] [ 796.662065][T12495] usb 4-1: unable to get BOS descriptor or descriptor too short [ 796.879830][T12495] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 796.887540][T12495] usb 4-1: can't read configurations, error -71 [ 796.988475][T16111] fuse: Bad value for 'rootmode' [ 797.001271][T12493] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 797.049107][T16113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2702'. [ 797.146229][T16114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2703'. [ 797.261870][T12493] usb 6-1: Using ep0 maxpacket: 8 [ 797.611608][T12920] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 797.652948][T12493] usb 6-1: unable to get BOS descriptor or descriptor too short [ 797.661691][T12493] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 797.679698][T12493] usb 6-1: can't read configurations, error -71 [ 797.822588][T16114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2703'. [ 797.876661][T12920] usb 2-1: not running at top speed; connect to a high speed hub [ 797.887588][T12920] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 797.920808][T12920] usb 2-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 797.932718][T12920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.952804][T12920] usb 2-1: Product: syz [ 797.956995][T12920] usb 2-1: Manufacturer: syz [ 797.979856][T12920] usb 2-1: SerialNumber: syz [ 798.011447][T16114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2703'. [ 798.661943][ T8545] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 799.227772][T16128] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2706'. [ 799.249469][T12920] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 799.513996][T12920] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 799.555965][T12920] usb 2-1: USB disconnect, device number 16 [ 799.631703][T16145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2710'. [ 800.073361][T14977] udevd[14977]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 800.652347][T12493] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 800.840971][T12493] usb 4-1: Using ep0 maxpacket: 16 [ 801.211764][T12493] usb 4-1: config 0 has no interfaces? [ 801.247981][T12493] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 801.271247][T12493] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 801.289812][T12493] usb 4-1: Manufacturer: syz [ 801.314970][T12493] usb 4-1: config 0 descriptor?? [ 801.773156][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 801.773188][ T30] audit: type=1400 audit(1774147489.934:1008): avc: denied { read } for pid=16165 comm="syz.2.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 802.153857][T16152] bond4 (unregistering): Released all slaves [ 802.365341][T12920] usb 4-1: USB disconnect, device number 62 [ 802.482633][ T6601] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 803.123371][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.433933][T16187] sd 0:0:1:0: PR command failed: 1026 [ 803.443275][T16187] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 803.450230][T16187] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 803.757423][T16193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2722'. [ 804.111668][T12493] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 804.130227][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 804.140133][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 804.151038][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 804.162149][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 804.171191][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 804.271028][T12493] usb 2-1: Using ep0 maxpacket: 8 [ 804.285372][T12493] usb 2-1: config index 0 descriptor too short (expected 76, got 68) [ 804.314071][T12493] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 804.384386][T12493] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 804.398497][T12493] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 804.409474][T12493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 804.419169][T12493] usb 2-1: SerialNumber: syz [ 804.432281][T12493] cdc_ether 2-1:1.0: skipping garbage [ 804.518367][T16218] comedi comedi4: bad chanlist[0]=0x04020007 chan=7 range length=1 [ 804.878250][T12493] usb 2-1: bad CDC descriptors [ 804.883908][T12493] usb-storage 2-1:1.0: USB Mass Storage device detected [ 804.908862][T12493] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 804.973192][T12493] usb 2-1: USB disconnect, device number 17 [ 806.272262][ T5812] Bluetooth: hci3: command tx timeout [ 806.599268][T16209] chnl_net:caif_netlink_parms(): no params data found [ 807.215948][T16209] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.223910][T16209] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.232081][T16209] bridge_slave_0: entered allmulticast mode [ 807.241116][T16209] bridge_slave_0: entered promiscuous mode [ 807.252769][T16209] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.259953][T16209] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.267291][T16209] bridge_slave_1: entered allmulticast mode [ 807.274660][T16209] bridge_slave_1: entered promiscuous mode [ 807.322214][T16209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.382511][T16209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.457793][T16209] team0: Port device team_slave_0 added [ 807.466170][T16209] team0: Port device team_slave_1 added [ 807.514791][T16246] 9p: Bad value for 'wfdno' [ 807.519770][ T30] audit: type=1400 audit(1774147495.714:1009): avc: denied { read write } for pid=16244 comm="syz.2.2734" name="mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 807.549174][T16209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.560351][T16209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.586898][T16246] netlink: 'syz.2.2734': attribute type 8 has an invalid length. [ 807.587670][ T30] audit: type=1400 audit(1774147495.714:1010): avc: denied { open } for pid=16244 comm="syz.2.2734" path="/dev/input/mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 807.623698][T16209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.742051][T16209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.759212][T16209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.831055][T12493] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 807.838518][T16209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.918734][T16209] hsr_slave_0: entered promiscuous mode [ 807.933494][T16209] hsr_slave_1: entered promiscuous mode [ 807.939504][T16209] debugfs: 'hsr0' already exists in 'hsr' [ 807.946286][T16209] Cannot create hsr debugfs directory [ 807.970993][T12495] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 808.002566][T12493] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.013113][T12493] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 808.022517][T12493] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 808.042423][T12493] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 808.052947][T12493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.063338][T12493] usb 2-1: Product: syz [ 808.067518][T12493] usb 2-1: Manufacturer: syz [ 808.072805][T12493] usb 2-1: SerialNumber: syz [ 808.085017][T12493] usb 2-1: config 0 descriptor?? [ 808.088417][T16209] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 808.099398][T16209] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 808.109763][T16209] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 808.111019][T12494] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 808.126808][T12495] usb 6-1: config 0 has no interfaces? [ 808.129512][T16209] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 808.135777][T12495] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 808.148743][T12495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.169456][T12495] usb 6-1: config 0 descriptor?? [ 808.217283][T16209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.235581][T16209] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.252782][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.259868][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.270462][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.277561][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.286100][T12494] usb 4-1: Using ep0 maxpacket: 32 [ 808.318761][T12494] usb 4-1: unable to get BOS descriptor or descriptor too short [ 808.326860][ T5812] Bluetooth: hci3: command tx timeout [ 808.333149][T12494] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 808.344180][T12493] uvcvideo 2-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 808.354747][T12494] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 808.368451][T12493] uvcvideo 2-1:0.0: No valid video chain found. [ 808.392040][T16255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.403928][T12494] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 808.413377][T16255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.421037][T12494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.425022][T16255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.429070][T12494] usb 4-1: Product: syz [ 808.429090][T12494] usb 4-1: Manufacturer: syz [ 808.441744][T16255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.455843][T12494] usb 4-1: SerialNumber: syz [ 808.458545][ T5888] usb 6-1: USB disconnect, device number 47 [ 808.550107][T16209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.570152][T16247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.580048][T16247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.594402][T12496] usb 2-1: USB disconnect, device number 18 [ 808.786447][T16278] vivid-001: disconnect [ 809.102256][T12494] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 809.128883][T16209] veth0_vlan: entered promiscuous mode [ 809.172630][T16209] veth1_vlan: entered promiscuous mode [ 809.296358][T12493] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 809.588922][T16209] veth0_macvtap: entered promiscuous mode [ 809.752996][T16284] 9pnet_fd: Insufficient options for proto=fd [ 809.770352][T16209] veth1_macvtap: entered promiscuous mode [ 810.400987][ T5812] Bluetooth: hci3: command tx timeout [ 810.524227][T16209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.578953][T12494] usb-storage 4-1:1.2: USB Mass Storage device detected [ 810.617624][T16209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.641005][T12493] usb 6-1: device descriptor read/64, error -71 [ 810.733652][T16255] vivid-001: reconnect [ 810.816018][T12494] usb 4-1: USB disconnect, device number 63 [ 810.856729][ T8545] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.881929][ T8545] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.890630][ T30] audit: type=1400 audit(1774147499.084:1011): avc: denied { read } for pid=16316 comm="syz.1.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 810.969517][ T8545] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.007713][ T8545] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.099530][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.117723][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.156105][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.168851][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.771267][T12494] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 812.263177][T12494] usb 4-1: Using ep0 maxpacket: 32 [ 812.341758][T12494] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 812.383093][T12494] usb 4-1: config 0 has no interface number 0 [ 812.414601][T12494] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 812.469974][T12494] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 812.482527][ T5812] Bluetooth: hci3: command tx timeout [ 812.552978][T12494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.616220][T12494] usb 4-1: Product: syz [ 812.616292][ T30] audit: type=1400 audit(1774147500.804:1012): avc: denied { write } for pid=16337 comm="syz.5.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 812.620399][T12494] usb 4-1: Manufacturer: syz [ 812.620416][T12494] usb 4-1: SerialNumber: syz [ 812.679962][T12494] usb 4-1: config 0 descriptor?? [ 812.699277][T16326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 812.900974][ T3091] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 812.924297][T16326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 812.966333][T12494] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 813.001371][ T86] Bluetooth: hci5: Frame reassembly failed (-84) [ 813.002873][T16349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2751'. [ 813.240410][T12494] asix 4-1:0.188: probe with driver asix failed with error -32 [ 813.268446][ T3091] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 813.284890][ T3091] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 813.300703][ T3091] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 813.301309][T12494] usb 4-1: USB disconnect, device number 64 [ 813.334844][ T3091] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 813.348463][ T3091] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 813.364241][ T3091] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 813.375793][ T3091] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 813.413605][ T3091] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 813.433844][ T3091] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 813.447248][ T3091] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 813.470066][ T3091] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 813.478216][ T3091] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 813.489578][T16352] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 813.502290][ T3091] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 813.523152][ T3091] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 813.537217][ T3091] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 813.555256][ T3091] usb 3-1: string descriptor 0 read error: -22 [ 813.590752][ T3091] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 813.603851][ T3091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.638164][ T3091] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 814.170492][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2756'. [ 814.189094][ T5809] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 814.198685][ T5809] Bluetooth: hci4: Injecting HCI hardware error event [ 814.207105][ T5809] Bluetooth: hci4: hardware error 0x00 [ 814.217159][T16343] FAULT_INJECTION: forcing a failure. [ 814.217159][T16343] name failslab, interval 1, probability 0, space 0, times 0 [ 814.230366][T16343] CPU: 1 UID: 0 PID: 16343 Comm: syz.2.2750 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.230395][T16343] Tainted: [L]=SOFTLOCKUP [ 814.230402][T16343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 814.230412][T16343] Call Trace: [ 814.230419][T16343] [ 814.230426][T16343] dump_stack_lvl+0x100/0x190 [ 814.230460][T16343] should_fail_ex.cold+0x5/0xa [ 814.230483][T16343] should_failslab+0xc2/0x120 [ 814.230503][T16343] __kmalloc_cache_noprof+0x7a/0x6f0 [ 814.230525][T16343] ? dummy_urb_enqueue+0xa3/0x880 [ 814.230550][T16343] dummy_urb_enqueue+0xa3/0x880 [ 814.230568][T16343] ? usb_hcd_map_urb_for_dma+0x28a/0x1170 [ 814.230601][T16343] usb_hcd_submit_urb+0x26c/0x2150 [ 814.230629][T16343] ? do_raw_spin_lock+0x128/0x260 [ 814.230657][T16343] usb_submit_urb+0x8aa/0x1910 [ 814.230681][T16343] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 814.230707][T16343] adu_read+0x99e/0x1960 [ 814.230736][T16343] ? __pfx_adu_read+0x10/0x10 [ 814.230755][T16343] ? avc_policy_seqno+0x9/0x20 [ 814.230773][T16343] ? selinux_file_permission+0x8f/0x6d0 [ 814.230799][T16343] ? __pfx_default_wake_function+0x10/0x10 [ 814.230825][T16343] ? bpf_lsm_file_permission+0x9/0x10 [ 814.230852][T16343] ? security_file_permission+0x76/0x210 [ 814.230880][T16343] ? rw_verify_area+0xce/0x6d0 [ 814.230910][T16343] ? __pfx_adu_read+0x10/0x10 [ 814.230927][T16343] vfs_readv+0x5d8/0x8d0 [ 814.230959][T16343] ? __pfx_vfs_readv+0x10/0x10 [ 814.230986][T16343] ? find_held_lock+0x2b/0x80 [ 814.231024][T16343] ? __fget_files+0x21f/0x3d0 [ 814.231051][T16343] ? do_preadv+0x1ac/0x270 [ 814.231075][T16343] do_preadv+0x1ac/0x270 [ 814.231102][T16343] ? __pfx_do_preadv+0x10/0x10 [ 814.231135][T16343] do_syscall_64+0x106/0xf80 [ 814.231159][T16343] ? clear_bhb_loop+0x40/0x90 [ 814.231182][T16343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.231200][T16343] RIP: 0033:0x7f2a3bd9c799 [ 814.231216][T16343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.231233][T16343] RSP: 002b:00007f2a3cc8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 814.231249][T16343] RAX: ffffffffffffffda RBX: 00007f2a3c015fa0 RCX: 00007f2a3bd9c799 [ 814.231260][T16343] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000006 [ 814.231277][T16343] RBP: 00007f2a3cc8a090 R08: 0000000000003dfc R09: 0000000000000000 [ 814.231288][T16343] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 814.231296][T16343] R13: 00007f2a3c016038 R14: 00007f2a3c015fa0 R15: 00007fff95aa1668 [ 814.231319][T16343] [ 814.523536][T12493] usb 3-1: USB disconnect, device number 65 [ 814.801225][T12496] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 814.974373][T12496] usb 4-1: Using ep0 maxpacket: 32 [ 815.013293][T12496] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.032892][T12496] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 815.047008][T16364] Bluetooth: hci5: command 0x1003 tx timeout [ 815.063833][ T5812] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 815.194003][T12496] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 815.207728][T12496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.683055][T12496] usb 4-1: Product: syz [ 815.779617][T12496] usb 4-1: Manufacturer: syz [ 815.813339][T12496] usb 4-1: SerialNumber: syz [ 816.507464][T12496] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 816.561429][ T5809] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 816.690278][T12496] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 816.904801][T16396] FAULT_INJECTION: forcing a failure. [ 816.904801][T16396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.920536][T16396] CPU: 0 UID: 0 PID: 16396 Comm: syz.5.2765 Tainted: G L syzkaller #0 PREEMPT(full) [ 816.920564][T16396] Tainted: [L]=SOFTLOCKUP [ 816.920570][T16396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 816.920580][T16396] Call Trace: [ 816.920586][T16396] [ 816.920592][T16396] dump_stack_lvl+0x100/0x190 [ 816.920624][T16396] should_fail_ex.cold+0x5/0xa [ 816.920647][T16396] _copy_from_user+0x2e/0xd0 [ 816.920666][T16396] bpf_test_init.isra.0+0xaf/0x100 [ 816.920692][T16396] bpf_prog_test_run_skb+0x489/0x3230 [ 816.920722][T16396] ? find_held_lock+0x2b/0x80 [ 816.920745][T16396] ? __fget_files+0x215/0x3d0 [ 816.920772][T16396] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 816.920799][T16396] ? fput+0x79/0x100 [ 816.920822][T16396] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 816.920848][T16396] __sys_bpf+0x1725/0x4b90 [ 816.920871][T16396] ? __pfx___sys_bpf+0x10/0x10 [ 816.920892][T16396] ? proc_fail_nth_write+0x9f/0x220 [ 816.920916][T16396] ? find_held_lock+0x2b/0x80 [ 816.920943][T16396] ? find_held_lock+0x2b/0x80 [ 816.920964][T16396] ? ksys_write+0x190/0x250 [ 816.920986][T16396] ? __mutex_unlock_slowpath+0x15c/0x790 [ 816.921012][T16396] ? __fget_files+0x215/0x3d0 [ 816.921044][T16396] ? fput+0x79/0x100 [ 816.921064][T16396] ? ksys_write+0x1ac/0x250 [ 816.921080][T16396] ? __pfx_ksys_write+0x10/0x10 [ 816.921101][T16396] __x64_sys_bpf+0x7b/0xc0 [ 816.921121][T16396] ? lockdep_hardirqs_on+0x78/0x100 [ 816.921144][T16396] do_syscall_64+0x106/0xf80 [ 816.921166][T16396] ? clear_bhb_loop+0x40/0x90 [ 816.921188][T16396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.921206][T16396] RIP: 0033:0x7f3bc479c799 [ 816.921223][T16396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.921239][T16396] RSP: 002b:00007f3bc5577028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 816.921257][T16396] RAX: ffffffffffffffda RBX: 00007f3bc4a15fa0 RCX: 00007f3bc479c799 [ 816.921268][T16396] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 816.921284][T16396] RBP: 00007f3bc5577090 R08: 0000000000000000 R09: 0000000000000000 [ 816.921294][T16396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.921304][T16396] R13: 00007f3bc4a16038 R14: 00007f3bc4a15fa0 R15: 00007ffeb2c543e8 [ 816.921329][T16396] [ 817.022782][T12496] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 817.103513][ T30] audit: type=1400 audit(1774147505.224:1013): avc: denied { listen } for pid=16389 comm="syz.1.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 817.212294][T16397] ref_ctr_offset mismatch. inode: 0xa45 offset: 0x0 ref_ctr_offset(old): 0xffffffff00 ref_ctr_offset(new): 0x0 [ 817.239294][T16398] netlink: 'syz.1.2764': attribute type 29 has an invalid length. [ 817.242639][T12496] usb 4-1: USB disconnect, device number 65 [ 817.265690][T16399] netlink: 'syz.1.2764': attribute type 29 has an invalid length. [ 817.296416][T14978] udevd[14978]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.483365][T16410] FAULT_INJECTION: forcing a failure. [ 817.483365][T16410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.506613][T16388] 9p: Could not find request transport: f=ÕÍVmØ?õXl†1]%8ßð8‹¡\ÏË·´ æwº%9™ [ 817.515762][T16410] CPU: 1 UID: 0 PID: 16410 Comm: syz.2.2769 Tainted: G L syzkaller #0 PREEMPT(full) [ 817.515789][T16410] Tainted: [L]=SOFTLOCKUP [ 817.515793][T16410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 817.515800][T16410] Call Trace: [ 817.515804][T16410] [ 817.515808][T16410] dump_stack_lvl+0x100/0x190 [ 817.515831][T16410] should_fail_ex.cold+0x5/0xa [ 817.515846][T16410] _copy_from_user+0x2e/0xd0 [ 817.515860][T16410] get_user_ifreq+0xe7/0x250 [ 817.515878][T16410] sock_do_ioctl+0x16e/0x280 [ 817.515896][T16410] ? __pfx_sock_do_ioctl+0x10/0x10 [ 817.515916][T16410] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 817.515934][T16410] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 817.515954][T16410] sock_ioctl+0x599/0x6b0 [ 817.515966][T16410] ? __pfx_sock_ioctl+0x10/0x10 [ 817.515976][T16410] ? hook_file_ioctl_common+0x146/0x410 [ 817.515992][T16410] ? selinux_file_ioctl+0x139/0x290 [ 817.516007][T16410] ? selinux_file_ioctl+0xb4/0x290 [ 817.516023][T16410] ? __pfx_sock_ioctl+0x10/0x10 [ 817.516035][T16410] __x64_sys_ioctl+0x18e/0x210 [ 817.516053][T16410] do_syscall_64+0x106/0xf80 [ 817.516069][T16410] ? clear_bhb_loop+0x40/0x90 [ 817.516083][T16410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.516095][T16410] RIP: 0033:0x7f2a3bd9c799 [ 817.516105][T16410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.516116][T16410] RSP: 002b:00007f2a3cc8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 817.516127][T16410] RAX: ffffffffffffffda RBX: 00007f2a3c015fa0 RCX: 00007f2a3bd9c799 [ 817.516134][T16410] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 817.516141][T16410] RBP: 00007f2a3cc8a090 R08: 0000000000000000 R09: 0000000000000000 [ 817.516147][T16410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.516153][T16410] R13: 00007f2a3c016038 R14: 00007f2a3c015fa0 R15: 00007fff95aa1668 [ 817.516167][T16410] [ 818.473172][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2772'. [ 818.740135][T16431] siw: device registration error -23 [ 819.571321][T16439] ref_ctr_offset mismatch. inode: 0xa5f offset: 0x0 ref_ctr_offset(old): 0xffffffff00 ref_ctr_offset(new): 0x0 [ 821.199435][T16460] netlink: 'syz.1.2782': attribute type 64 has an invalid length. [ 821.209148][T16460] netlink: 'syz.1.2782': attribute type 4 has an invalid length. [ 821.220291][T16460] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2782'. [ 821.521155][T12496] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 821.661014][T12496] usb 2-1: device descriptor read/64, error -71 [ 822.092068][ T30] audit: type=1400 audit(1774147510.274:1014): avc: denied { setopt } for pid=16479 comm="syz.2.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 822.130067][T12496] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 822.391222][ T30] audit: type=1400 audit(1774147510.424:1015): avc: denied { map } for pid=16479 comm="syz.2.2788" path="socket:[60478]" dev="sockfs" ino=60478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 822.531097][T12496] usb 2-1: device descriptor read/64, error -71 [ 822.648041][T12496] usb usb2-port1: attempt power cycle [ 823.407882][T12496] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 823.477486][T12496] usb 2-1: device descriptor read/8, error -71 [ 823.770986][T12496] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 823.801513][T12496] usb 2-1: device descriptor read/8, error -71 [ 823.921307][T12496] usb usb2-port1: unable to enumerate USB device [ 824.000985][T12493] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 824.234325][T12493] usb 6-1: unable to get BOS descriptor or descriptor too short [ 824.293384][T12493] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 824.305488][T12493] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 824.333315][T12493] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 824.387402][T16512] netlink: 'syz.6.2794': attribute type 1 has an invalid length. [ 824.485515][T16512] bond1: entered promiscuous mode [ 824.490674][T12493] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 824.500490][T12493] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.537748][T12493] usb 6-1: Product: syz [ 824.555055][T12493] usb 6-1: Manufacturer: syz [ 824.580108][T16512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 824.588736][T12493] usb 6-1: SerialNumber: syz [ 824.922491][T12493] usb 6-1: Can't get UAC3 power state for id 10 [ 824.939987][T12493] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 824.950175][T12493] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 825.172816][T12493] usb 6-1: USB disconnect, device number 50 [ 825.370985][T12920] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 825.381182][ T5883] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 825.478298][T15354] udevd[15354]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 825.531276][T12920] usb 2-1: Using ep0 maxpacket: 16 [ 825.553827][T12920] usb 2-1: config 4 has an invalid interface number: 227 but max is 0 [ 825.571766][T12920] usb 2-1: config 4 has no interface number 0 [ 825.580977][T12920] usb 2-1: config 4 interface 227 has no altsetting 0 [ 825.589476][T12920] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=43.06 [ 825.602185][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 825.602196][T12920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.615410][T12920] usb 2-1: Product: syz [ 825.619049][ T5883] usb 4-1: no configurations [ 825.619984][T12920] usb 2-1: Manufacturer: syz [ 825.638149][T12920] usb 2-1: SerialNumber: syz [ 825.710350][ T5883] usb 4-1: can't read configurations, error -22 [ 825.848849][T16544] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2804'. [ 825.858519][T16544] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2804'. [ 825.883455][T12920] etas_es58x 2-1:4.227: Starting syz syz (Serial Number syz) [ 825.909481][T12920] usb 2-1: USB disconnect, device number 23 [ 826.470992][ T5883] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 827.360605][T16555] siw: device registration error -23 [ 827.976933][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 828.021561][ T5883] usb 4-1: no configurations [ 828.026183][ T5883] usb 4-1: can't read configurations, error -22 [ 828.032945][ T5883] usb usb4-port1: attempt power cycle [ 828.038247][T16557] delete_channel: no stack [ 828.049486][ T30] audit: type=1400 audit(1774147516.244:1016): avc: denied { ioctl } for pid=16556 comm="syz.1.2807" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 828.280289][T16563] syzkaller0: entered promiscuous mode [ 828.285911][T16563] syzkaller0: entered allmulticast mode [ 828.297807][T16564] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2810'. [ 829.784799][ T30] audit: type=1400 audit(1774147517.984:1017): avc: denied { nlmsg_read } for pid=16589 comm="syz.1.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 829.813989][T16590] ipvlan1: entered promiscuous mode [ 829.820006][ T30] audit: type=1400 audit(1774147518.014:1018): avc: denied { ioctl } for pid=16589 comm="syz.1.2817" path="socket:[60738]" dev="sockfs" ino=60738 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 830.657877][ T86] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 831.764558][T16615] syzkaller0: entered promiscuous mode [ 831.782384][T16615] syzkaller0: entered allmulticast mode [ 832.336587][T16625] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 832.346015][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2827'. [ 832.789278][T16629] 9p: Could not find request transport: f=ÕÍVmØ?õXl†1]%8ßð8‹¡\ÏË·´ æwº%9™ [ 832.868922][T16638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2831'. [ 833.010020][T12496] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 833.165104][T16646] input: syz0 as /devices/virtual/input/input42 [ 833.201914][ T30] audit: type=1400 audit(1774147521.344:1019): avc: denied { ioctl } for pid=16639 comm="syz.5.2832" path="socket:[60027]" dev="sockfs" ino=60027 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 833.479076][T12496] usb 4-1: unable to get BOS descriptor or descriptor too short [ 833.479919][T12496] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 833.479942][T12496] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 833.479986][T12496] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 833.526083][T12496] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 833.526113][T12496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.526129][T12496] usb 4-1: Product: syz [ 833.526140][T12496] usb 4-1: Manufacturer: syz [ 833.526150][T12496] usb 4-1: SerialNumber: syz [ 833.605349][T16651] fuse: Unknown parameter 'use00000000000000000000' [ 833.612236][T16652] fuse: Unknown parameter 'user_i00000000000000000000' [ 833.634989][T16653] syzkaller0: entered promiscuous mode [ 833.640576][T16653] syzkaller0: entered allmulticast mode [ 833.839642][T12496] usb 4-1: Can't get UAC3 power state for id 10 [ 833.871204][T12496] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 833.900404][T12496] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 833.949745][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2835'. [ 833.998159][T16660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2836'. [ 834.032574][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2835'. [ 834.126929][T12496] usb 4-1: USB disconnect, device number 69 [ 834.184877][T15135] udevd[15135]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.222186][T16660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2836'. [ 834.311071][T12493] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 834.370580][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2835'. [ 834.440628][T16660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2836'. [ 834.481499][ T86] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 834.501757][T12493] usb 2-1: not running at top speed; connect to a high speed hub [ 834.520603][T12493] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 834.531842][ T5883] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 834.674162][T12493] usb 2-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 834.699312][T12493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.723899][T12493] usb 2-1: Product: syz [ 834.734723][T12493] usb 2-1: Manufacturer: syz [ 834.749494][T12493] usb 2-1: SerialNumber: syz [ 834.803978][ T5883] usb 3-1: not running at top speed; connect to a high speed hub [ 834.826707][ T5883] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 834.863711][ T5883] usb 3-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 834.885834][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.908403][ T5883] usb 3-1: Product: syz [ 834.920131][ T5883] usb 3-1: Manufacturer: syz [ 834.933235][ T5883] usb 3-1: SerialNumber: syz [ 835.474695][T12493] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 835.557047][T12493] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 835.696716][T16673] udevd[16673]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 835.788238][ T5915] usb 2-1: USB disconnect, device number 24 [ 836.083838][ T5883] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 836.221926][ T5883] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 836.307119][T16673] udevd[16673]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.351797][T16690] fuse: Unknown parameter 'use00000000000000000000' [ 836.555664][ T5915] usb 3-1: USB disconnect, device number 66 [ 836.888329][T16696] 9p: Could not find request transport: f=ÕÍVmØ?õXl†1]%8ßð8‹¡\ÏË·´ æwº%9™ [ 836.895125][T16692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2844'. [ 836.992561][T16692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2844'. [ 837.121071][ T5809] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 837.130869][ T5809] Bluetooth: hci3: Injecting HCI hardware error event [ 837.143139][ T5812] Bluetooth: hci3: hardware error 0x00 [ 837.331026][ T5883] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 837.492180][ T5883] usb 6-1: not running at top speed; connect to a high speed hub [ 837.511215][ T5883] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 837.542898][ T5883] usb 6-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 837.561010][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.581018][ T5883] usb 6-1: Product: syz [ 837.585182][ T5883] usb 6-1: Manufacturer: syz [ 837.610341][ T5883] usb 6-1: SerialNumber: syz [ 838.004235][T16714] syzkaller0: entered promiscuous mode [ 838.067993][T16714] syzkaller0: entered allmulticast mode [ 838.412581][ T30] audit: type=1400 audit(1774147526.614:1020): avc: denied { connect } for pid=16721 comm="syz.2.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 838.743823][ T5883] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 838.807396][ T5883] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 838.941491][T16673] udevd[16673]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 839.074066][T16735] fuse: Unknown parameter 'user_i00000000000000000000' [ 839.090311][T12920] usb 6-1: USB disconnect, device number 51 [ 839.301021][ T5812] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 839.368830][T16738] __nla_validate_parse: 1 callbacks suppressed [ 839.368847][T16738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2855'. [ 839.675259][T16738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2855'. [ 839.791509][T12920] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 839.979897][T12920] usb 2-1: not running at top speed; connect to a high speed hub [ 840.017494][T16738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2855'. [ 840.017769][T12920] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 840.089652][T12920] usb 2-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 840.118466][T12920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.154903][T12920] usb 2-1: Product: syz [ 840.159217][T12920] usb 2-1: Manufacturer: syz [ 840.168352][T12920] usb 2-1: SerialNumber: syz [ 840.584123][T16752] 9p: Could not find request transport: f=ÕÍVmØ?õXl†1]%8ßð8‹¡\ÏË·´ æwº%9™ [ 840.828790][T12920] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 840.881682][T12920] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 840.977645][T16673] udevd[16673]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 841.058050][T12920] usb 2-1: USB disconnect, device number 25 [ 841.512982][T12920] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 841.636263][ T30] audit: type=1400 audit(1774147529.834:1021): avc: denied { read write } for pid=16771 comm="syz.3.2863" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 841.672556][ T30] audit: type=1400 audit(1774147529.834:1022): avc: denied { open } for pid=16771 comm="syz.3.2863" path="/542/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 841.696028][T12920] usb 7-1: Using ep0 maxpacket: 32 [ 841.703973][T12920] usb 7-1: unable to get BOS descriptor or descriptor too short [ 841.704405][T16772] FAULT_INJECTION: forcing a failure. [ 841.704405][T16772] name failslab, interval 1, probability 0, space 0, times 0 [ 841.737959][T12920] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 841.754159][T12920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.778379][T12920] usb 7-1: Product: syz [ 841.786182][T16772] CPU: 1 UID: 0 PID: 16772 Comm: syz.3.2863 Tainted: G L syzkaller #0 PREEMPT(full) [ 841.786204][T16772] Tainted: [L]=SOFTLOCKUP [ 841.786208][T16772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 841.786215][T16772] Call Trace: [ 841.786219][T16772] [ 841.786224][T16772] dump_stack_lvl+0x100/0x190 [ 841.786247][T16772] should_fail_ex.cold+0x5/0xa [ 841.786263][T16772] should_failslab+0xc2/0x120 [ 841.786275][T16772] __kmalloc_cache_noprof+0x7a/0x6f0 [ 841.786291][T16772] ? binder_get_thread+0x201/0x850 [ 841.786309][T16772] binder_get_thread+0x201/0x850 [ 841.786326][T16772] binder_poll+0x3f/0x430 [ 841.786341][T16772] ? __pfx_binder_poll+0x10/0x10 [ 841.786356][T16772] do_select+0xd54/0x1850 [ 841.786378][T16772] ? __pfx_do_select+0x10/0x10 [ 841.786393][T16772] ? __pfx_pollwake+0x10/0x10 [ 841.786405][T16772] ? __pfx_pollwake+0x10/0x10 [ 841.786416][T16772] ? __pfx_pollwake+0x10/0x10 [ 841.786428][T16772] ? __pfx_pollwake+0x10/0x10 [ 841.786440][T16772] ? __pfx_pollwake+0x10/0x10 [ 841.786460][T16772] ? find_held_lock+0x2b/0x80 [ 841.786476][T16772] ? __might_fault+0xc5/0x140 [ 841.786491][T16772] ? __might_fault+0xc5/0x140 [ 841.786511][T16772] ? core_sys_select+0x55b/0xbb0 [ 841.786522][T16772] core_sys_select+0x55b/0xbb0 [ 841.786536][T16772] ? __pfx_core_sys_select+0x10/0x10 [ 841.786547][T16772] ? find_held_lock+0x2b/0x80 [ 841.786562][T16772] ? get_pid_task+0xfc/0x250 [ 841.786584][T16772] ? __pfx_set_user_sigmask+0x10/0x10 [ 841.786597][T16772] ? __mutex_unlock_slowpath+0x15c/0x790 [ 841.786615][T16772] ? __fget_files+0x215/0x3d0 [ 841.786629][T16772] do_pselect.constprop.0+0x238/0x270 [ 841.786643][T16772] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 841.786658][T16772] ? ksys_write+0x1ac/0x250 [ 841.786670][T16772] __x64_sys_pselect6+0x149/0x1c0 [ 841.786685][T16772] do_syscall_64+0x106/0xf80 [ 841.786700][T16772] ? clear_bhb_loop+0x40/0x90 [ 841.786714][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.786726][T16772] RIP: 0033:0x7f296e39c799 [ 841.786736][T16772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.786747][T16772] RSP: 002b:00007f296f33d028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 841.786758][T16772] RAX: ffffffffffffffda RBX: 00007f296e615fa0 RCX: 00007f296e39c799 [ 841.786765][T16772] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 841.786772][T16772] RBP: 00007f296f33d090 R08: 0000000000000000 R09: 0000000000000000 [ 841.786778][T16772] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 841.786785][T16772] R13: 00007f296e616038 R14: 00007f296e615fa0 R15: 00007ffca083b8e8 [ 841.786799][T16772] [ 842.059875][T12920] usb 7-1: Manufacturer: syz [ 842.329389][T12920] usb 7-1: SerialNumber: syz [ 842.674787][T16787] FAULT_INJECTION: forcing a failure. [ 842.674787][T16787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.692092][T12920] usb 7-1: unit 4 not found! [ 842.696688][T12920] usb 7-1: unit 0 not found! [ 842.706587][T16787] CPU: 0 UID: 0 PID: 16787 Comm: syz.5.2866 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.706615][T16787] Tainted: [L]=SOFTLOCKUP [ 842.706620][T16787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 842.706630][T16787] Call Trace: [ 842.706636][T16787] [ 842.706643][T16787] dump_stack_lvl+0x100/0x190 [ 842.706672][T16787] should_fail_ex.cold+0x5/0xa [ 842.706688][T16787] _copy_from_user+0x2e/0xd0 [ 842.706701][T16787] ____sys_sendmsg+0x1d1/0xb70 [ 842.706721][T16787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 842.706745][T16787] ___sys_sendmsg+0x190/0x1e0 [ 842.706758][T16787] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.706785][T16787] __sys_sendmsg+0x170/0x220 [ 842.706800][T16787] ? __pfx___sys_sendmsg+0x10/0x10 [ 842.706824][T16787] do_syscall_64+0x106/0xf80 [ 842.706840][T16787] ? clear_bhb_loop+0x40/0x90 [ 842.706853][T16787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.706865][T16787] RIP: 0033:0x7f3bc479c799 [ 842.706875][T16787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.706886][T16787] RSP: 002b:00007f3bc5577028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.706897][T16787] RAX: ffffffffffffffda RBX: 00007f3bc4a15fa0 RCX: 00007f3bc479c799 [ 842.706904][T16787] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 842.706911][T16787] RBP: 00007f3bc5577090 R08: 0000000000000000 R09: 0000000000000000 [ 842.706917][T16787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.706924][T16787] R13: 00007f3bc4a16038 R14: 00007f3bc4a15fa0 R15: 00007ffeb2c543e8 [ 842.706938][T16787] [ 843.168131][ T30] audit: type=1400 audit(1774147531.364:1023): avc: denied { connect } for pid=16793 comm="syz.2.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 843.387661][T12920] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 843.399971][T12920] usb 7-1: unit 4 not found! [ 843.401879][T16799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 843.406288][T12920] usb 7-1: unit 0 not found! [ 843.468408][T12920] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 843.497947][T12920] usb 7-1: unit 4 not found! [ 843.507365][T12920] usb 7-1: unit 0 not found! [ 843.694863][T12920] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 844.160995][ T30] audit: type=1400 audit(1774147531.974:1024): avc: denied { setopt } for pid=16800 comm="syz.1.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 844.184049][T12920] usb 7-1: USB disconnect, device number 2 [ 844.561917][T15004] udevd[15004]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 844.609547][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2875'. [ 844.779718][ T30] audit: type=1400 audit(1774147532.974:1025): avc: denied { write } for pid=16816 comm="syz.2.2876" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 844.812586][T16817] binder: 16816:16817 ioctl 5412 200000000200 returned -22 [ 846.710952][T12495] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 846.942658][T12495] usb 3-1: unable to get BOS descriptor or descriptor too short [ 846.954475][T12495] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.968730][T12495] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 847.432301][T12495] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 847.452831][T12495] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 847.469438][T12495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.481660][ T5883] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 847.489208][T12495] usb 3-1: Product: syz [ 847.497537][T12495] usb 3-1: Manufacturer: syz [ 847.505600][T12495] usb 3-1: SerialNumber: syz [ 847.652999][ T5883] usb 7-1: config 0 has an invalid interface number: 3 but max is 2 [ 847.761159][ T5883] usb 7-1: config 0 has an invalid interface number: 176 but max is 2 [ 847.769351][ T5883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.795871][ T5883] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 847.814278][ T5883] usb 7-1: config 0 has no interface number 0 [ 847.821900][T12495] usb 3-1: Can't get UAC3 power state for id 10 [ 847.836999][ T5883] usb 7-1: config 0 has no interface number 1 [ 847.845146][T12495] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 847.854887][ T5883] usb 7-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice=29.ac [ 847.864695][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.875829][T12495] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 847.890289][ T5883] usb 7-1: config 0 descriptor?? [ 847.907650][ T5883] usb 7-1: unknown number of interfaces: 2 [ 847.967622][T12495] usb 3-1: USB disconnect, device number 67 [ 848.060485][T15135] udevd[15135]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.213076][ T5888] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 849.223574][T12920] usb 7-1: USB disconnect, device number 3 [ 849.391982][ T5888] usb 6-1: not running at top speed; connect to a high speed hub [ 849.400661][ T5888] usb 6-1: config 7 has an invalid interface number: 116 but max is 0 [ 849.415030][ T5888] usb 6-1: config 7 has no interface number 0 [ 849.432845][ T5888] usb 6-1: config 7 interface 116 has no altsetting 0 [ 849.455929][ T5888] usb 6-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ca.2d [ 849.465625][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.485655][ T5888] usb 6-1: Product: syz [ 849.491787][ T5888] usb 6-1: Manufacturer: syz [ 849.505922][ T5888] usb 6-1: SerialNumber: syz [ 849.790488][ T5888] usb-storage 6-1:7.116: USB Mass Storage device detected [ 849.882171][ T5888] usb 6-1: USB disconnect, device number 52 [ 850.020426][T16885] fuse: Bad value for 'fd' [ 850.250963][T12495] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 850.252886][T16882] ptrace attach of "./syz-executor exec"[5804] was attempted by ""[16882] [ 850.516282][T12495] usb 3-1: unable to get BOS descriptor or descriptor too short [ 850.524545][T12495] usb 3-1: not running at top speed; connect to a high speed hub [ 850.533893][T12495] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.544596][T12495] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 850.555985][T12495] usb 3-1: string descriptor 0 read error: -22 [ 850.562607][T12495] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 850.571864][T12495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.590108][T12495] usb 3-1: 0:2 : does not exist [ 851.423203][T16906] ipvlan1: entered promiscuous mode [ 851.667200][T12495] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 851.683846][T12495] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 851.706158][T12495] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 851.726540][T12493] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 851.762858][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2900'. [ 851.783808][T12495] usb 3-1: USB disconnect, device number 68 [ 851.805269][T16910] ip_vti0: left promiscuous mode [ 851.817795][T16910] ipvlan1: left promiscuous mode [ 851.895712][T16910] hsr1: left promiscuous mode [ 851.932218][T12493] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.945552][T12493] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 851.968615][T12493] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 851.988552][T12493] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.015348][T12493] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 852.036016][T12493] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.055798][T12493] usb 6-1: config 0 descriptor?? [ 852.364064][T16907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.468991][T16907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.978056][ T30] audit: type=1326 audit(1774147541.174:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16902 comm="syz.5.2897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bc479c799 code=0x0 [ 853.331903][ T5888] usb 6-1: USB disconnect, device number 53 [ 853.446800][ T5812] block nbd5: Receive control failed (result -32) [ 853.476723][T16904] block nbd5: shutting down sockets [ 853.761986][T12920] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 853.821118][T12495] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 853.980975][T12495] usb 3-1: Using ep0 maxpacket: 8 [ 853.987750][T12920] usb 2-1: unable to get BOS descriptor or descriptor too short [ 853.991214][T12495] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 67, changing to 10 [ 854.018595][T12495] usb 3-1: config 1 interface 0 has no altsetting 0 [ 854.020007][T12920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.044076][T12920] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 854.050240][T12495] usb 3-1: string descriptor 0 read error: -22 [ 854.060999][T12920] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 854.061045][T12495] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.40 [ 854.090761][T12920] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 854.100310][T12920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.108651][T12920] usb 2-1: Product: syz [ 854.113049][T12495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.154969][T12920] usb 2-1: Manufacturer: syz [ 854.159609][T12920] usb 2-1: SerialNumber: syz [ 854.403335][T12920] usb 2-1: Can't get UAC3 power state for id 10 [ 854.413244][T12920] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 854.425160][T12920] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 854.441799][T12493] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 854.602501][T12920] usb 2-1: USB disconnect, device number 26 [ 854.662015][T12493] usb 7-1: Using ep0 maxpacket: 32 [ 854.685036][T12493] usb 7-1: unable to get BOS descriptor or descriptor too short [ 854.762491][T12493] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 854.840053][T12493] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.848205][T12493] usb 7-1: Product: syz [ 854.852686][T12493] usb 7-1: Manufacturer: syz [ 854.857282][T12493] usb 7-1: SerialNumber: syz [ 854.863691][T12495] acrux 0003:1A34:0802.0019: unknown main item tag 0x0 [ 854.885675][T12495] acrux 0003:1A34:0802.0019: unknown main item tag 0x0 [ 854.900960][T12495] acrux 0003:1A34:0802.0019: unknown main item tag 0x0 [ 854.917244][T12495] acrux 0003:1A34:0802.0019: unknown main item tag 0x0 [ 854.932321][T12495] acrux 0003:1A34:0802.0019: unknown main item tag 0x0 [ 854.939278][T12495] acrux 0003:1A34:0802.0019: unknown main item tag 0x0 [ 854.949405][T12495] acrux 0003:1A34:0802.0019: unknown main item tag 0x0 [ 854.959472][T12495] acrux 0003:1A34:0802.0019: unknown main item tag 0x0 [ 854.973038][T12495] acrux 0003:1A34:0802.0019: unknown main item tag 0x0 [ 854.985090][T12495] acrux 0003:1A34:0802.0019: unknown main item tag 0x0 [ 855.035066][T12495] acrux 0003:1A34:0802.0019: hidraw0: USB HID vff.7f Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 855.047773][T12495] acrux 0003:1A34:0802.0019: no inputs found [ 855.054167][T12495] acrux 0003:1A34:0802.0019: Failed to enable force feedback support, error: -19 [ 855.122999][T12493] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 855.135348][T12493] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 855.170132][T12493] usb 7-1: 3:0: failed to get current value for ch 0 (-22) [ 855.179805][T12920] usb 3-1: USB disconnect, device number 69 [ 855.208540][T12493] usb 7-1: applying playback min mute quirk [ 855.238353][T12493] usb 7-1: 3:0: cannot get min/max values for control 2 (id 3) [ 855.246487][T12493] usb 7-1: applying playback min mute quirk [ 855.281742][T12493] usb 7-1: 3:0: cannot get min/max values for control 3 (id 3) [ 855.323705][T12493] usb 7-1: 3:0: cannot get min/max values for control 3 (id 3) [ 855.359077][T12493] usb 7-1: 3:0: cannot get min/max values for control 2 (id 3) [ 855.385776][T12493] usb 7-1: USB disconnect, device number 4 [ 855.540969][T12495] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 855.691075][T12495] usb 4-1: Using ep0 maxpacket: 32 [ 855.704164][T12495] usb 4-1: unable to get BOS descriptor or descriptor too short [ 855.716647][T12495] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 855.727720][T12495] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 855.745588][T12495] usb 4-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 855.756382][T12495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.764483][T12495] usb 4-1: Product: syz [ 855.776668][T12495] usb 4-1: Manufacturer: syz [ 855.800687][T12495] usb 4-1: SerialNumber: syz [ 856.092641][ T5812] Bluetooth: hci2: unexpected event for opcode 0x200b [ 856.109742][T16979] netlink: 'syz.6.2921': attribute type 3 has an invalid length. [ 856.136551][T16979] netlink: 'syz.6.2921': attribute type 3 has an invalid length. [ 856.138233][T12495] usb 4-1: unable to issue vendor read request (ret = -71) [ 856.154934][T12495] usb 4-1: unable to issue vendor read request (ret = -71) [ 856.162682][T16982] netlink: 'syz.6.2921': attribute type 10 has an invalid length. [ 856.172488][T12495] usb 4-1: unable to issue vendor read request (ret = -71) [ 856.184937][T16982] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.187082][T12495] usb 4-1: unable to issue vendor read request (ret = -71) [ 856.205303][T12495] usb 4-1: unable to issue vendor read request (ret = -71) [ 856.215517][T16982] bond0: (slave team0): Enslaving as an active interface with an up link [ 856.225661][T12495] usb 4-1: unable to issue vendor read request (ret = -71) [ 856.239828][T12495] usb 4-1: unable to issue vendor read request (ret = -71) [ 856.247872][T12495] usb 4-1: unable to issue vendor read request (ret = -71) [ 856.285502][T12495] usb 4-1: USB disconnect, device number 70 [ 857.566155][T17010] evm: overlay not supported [ 857.651372][T12920] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 857.811873][T12920] usb 2-1: Using ep0 maxpacket: 8 [ 857.862556][T12920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 857.881002][T12920] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 857.902610][T12920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.961608][T12920] usb 2-1: config 0 descriptor?? [ 858.013705][T17020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2932'. [ 858.425633][T17004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.453496][T17004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.486288][T12920] lenovo 0003:17EF:6047.001A: hidraw0: USB HID v0.08 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 858.706501][T12920] usb 2-1: USB disconnect, device number 27 [ 859.140684][ T5888] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 859.622532][ T5888] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 859.645553][ T5888] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 859.648029][T17044] binder: 17043:17044 ioctl c0306201 200000000080 returned -22 [ 859.718035][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.741253][ T5888] usb 4-1: Product: syz [ 859.751686][ T30] audit: type=1400 audit(1774147547.954:1027): avc: denied { map } for pid=17046 comm="syz.5.2940" path="socket:[63076]" dev="sockfs" ino=63076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 859.766172][ T5888] usb 4-1: Manufacturer: syz [ 859.783838][ T30] audit: type=1400 audit(1774147547.984:1028): avc: denied { read } for pid=17046 comm="syz.5.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 859.804913][ T5888] usb 4-1: SerialNumber: syz [ 859.835956][ T5888] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 859.962910][T17056] netlink: 'syz.2.2943': attribute type 4 has an invalid length. [ 859.986388][T17056] fuse: Unknown parameter 'group_i…' [ 860.100568][ T30] audit: type=1400 audit(1774147548.294:1029): avc: denied { ioctl } for pid=17046 comm="syz.5.2940" path="socket:[63075]" dev="sockfs" ino=63075 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 860.131152][T12920] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 860.254819][ T5888] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 860.266008][ T5888] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 860.274654][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 860.291043][ T5888] usb 4-1: media controller created [ 860.306024][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 860.317391][T12920] usb 2-1: unable to get BOS descriptor or descriptor too short [ 860.331417][T12920] usb 2-1: not running at top speed; connect to a high speed hub [ 860.345747][T12920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.371299][T12920] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 860.399982][T12920] usb 2-1: string descriptor 0 read error: -22 [ 860.416534][T12920] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 860.434287][T12920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.446669][ T5888] usb 4-1: USB disconnect, device number 71 [ 860.454060][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 860.468439][T12920] usb 2-1: 0:2 : does not exist [ 860.476603][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 860.493966][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.506792][ T10] usb 3-1: Product: syz [ 860.511032][ T10] usb 3-1: Manufacturer: syz [ 860.515638][ T10] usb 3-1: SerialNumber: syz [ 860.528045][ T10] usb 3-1: config 0 descriptor?? [ 860.745541][ T10] airspy 3-1:0.0: usb_control_msg() failed -71 request 09 [ 860.766921][ T10] airspy 3-1:0.0: Could not detect board [ 860.775882][ T10] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 860.788421][ T10] usb 3-1: USB disconnect, device number 70 [ 861.403194][T12920] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 861.414357][T12920] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 861.425974][T12920] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 861.467385][T12920] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 861.495235][T12920] usb 2-1: USB disconnect, device number 28 [ 861.843096][T17081] syzkaller0: entered promiscuous mode [ 861.848569][T17081] syzkaller0: entered allmulticast mode [ 862.308213][T17079] 9p: Could not find request transport: f=ÕÍVmØ?õXl†1]%8ßð8‹¡\ÏË·´ æwº%9™ [ 862.587202][T17096] FAULT_INJECTION: forcing a failure. [ 862.587202][T17096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.608296][T17096] CPU: 0 UID: 0 PID: 17096 Comm: syz.2.2953 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.608326][T17096] Tainted: [L]=SOFTLOCKUP [ 862.608332][T17096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 862.608342][T17096] Call Trace: [ 862.608348][T17096] [ 862.608355][T17096] dump_stack_lvl+0x100/0x190 [ 862.608388][T17096] should_fail_ex.cold+0x5/0xa [ 862.608412][T17096] _copy_to_iter+0x1f3/0x1720 [ 862.608433][T17096] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 862.608462][T17096] ? __pfx__copy_to_iter+0x10/0x10 [ 862.608481][T17096] ? __pfx_woken_wake_function+0x10/0x10 [ 862.608512][T17096] tty_read+0x242/0x550 [ 862.608537][T17096] ? __pfx_tty_read+0x10/0x10 [ 862.608557][T17096] ? get_pid_task+0x106/0x250 [ 862.608573][T17096] ? avc_policy_seqno+0x9/0x20 [ 862.608596][T17096] ? bpf_lsm_file_permission+0x9/0x10 [ 862.608623][T17096] ? security_file_permission+0x76/0x210 [ 862.608650][T17096] ? rw_verify_area+0xce/0x6d0 [ 862.608674][T17096] ? __pfx_tty_read+0x10/0x10 [ 862.608694][T17096] vfs_read+0x825/0xb30 [ 862.608724][T17096] ? __pfx_vfs_read+0x10/0x10 [ 862.608750][T17096] ? find_held_lock+0x2b/0x80 [ 862.608790][T17096] ksys_read+0x12a/0x250 [ 862.608807][T17096] ? __pfx_ksys_read+0x10/0x10 [ 862.608832][T17096] do_syscall_64+0x106/0xf80 [ 862.608856][T17096] ? clear_bhb_loop+0x40/0x90 [ 862.608879][T17096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.608898][T17096] RIP: 0033:0x7f2a3bd9c799 [ 862.608915][T17096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.608932][T17096] RSP: 002b:00007f2a3cc69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 862.608950][T17096] RAX: ffffffffffffffda RBX: 00007f2a3c016090 RCX: 00007f2a3bd9c799 [ 862.608968][T17096] RDX: 00000000000000e3 RSI: 0000200000000200 RDI: 0000000000000003 [ 862.608980][T17096] RBP: 00007f2a3cc69090 R08: 0000000000000000 R09: 0000000000000000 [ 862.608991][T17096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.609002][T17096] R13: 00007f2a3c016128 R14: 00007f2a3c016090 R15: 00007fff95aa1668 [ 862.609027][T17096] [ 862.825712][T17104] ipt_REJECT: ECHOREPLY no longer supported. [ 864.564444][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.744100][T17134] ipvlan1: entered promiscuous mode [ 865.842412][ T664] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 866.530637][T17143] ipvlan1: left promiscuous mode [ 866.567967][T17144] 9p: Could not find request transport: f=ÕÍVmØ?õXl†1]%8ßð8‹¡\ÏË·´ æwº%9™ [ 866.891644][ T5888] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 867.051717][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 867.061787][ T5888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 867.084100][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 867.102763][ T5888] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 867.316307][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 23165, setting to 64 [ 867.400280][ T5888] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 867.421617][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.454665][ T5888] hub 2-1:1.0: bad descriptor, ignoring hub [ 867.471088][ T5888] hub 2-1:1.0: probe with driver hub failed with error -5 [ 867.482518][ T5888] cdc_wdm 2-1:1.0: skipping garbage [ 867.490302][ T5888] cdc_wdm 2-1:1.0: skipping garbage [ 867.504202][ T5888] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 868.054651][ T5888] usb 2-1: USB disconnect, device number 29 [ 868.261561][T17172] input: syz0 as /devices/virtual/input/input43 [ 869.446613][T17175] FAULT_INJECTION: forcing a failure. [ 869.446613][T17175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.058615][T17175] CPU: 1 UID: 0 PID: 17175 Comm: syz.5.2971 Tainted: G L syzkaller #0 PREEMPT(full) [ 870.058644][T17175] Tainted: [L]=SOFTLOCKUP [ 870.058649][T17175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 870.058655][T17175] Call Trace: [ 870.058659][T17175] [ 870.058665][T17175] dump_stack_lvl+0x100/0x190 [ 870.058688][T17175] should_fail_ex.cold+0x5/0xa [ 870.058703][T17175] copy_fpstate_to_sigframe+0x861/0xb20 [ 870.058722][T17175] ? kmem_cache_free+0x124/0x6a0 [ 870.058738][T17175] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 870.058759][T17175] ? collect_signal+0x271/0x550 [ 870.058769][T17175] ? x86_task_fpu+0x5f/0x90 [ 870.058784][T17175] get_sigframe+0x3fb/0x940 [ 870.058802][T17175] ? __pfx_get_sigframe+0x10/0x10 [ 870.058817][T17175] ? rcu_is_watching+0x12/0xc0 [ 870.058831][T17175] ? siginfo_layout+0x156/0x290 [ 870.058847][T17175] x64_setup_rt_frame+0x12f/0xce0 [ 870.058866][T17175] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 870.058882][T17175] ? __do_sys_waitid+0x180/0x260 [ 870.058895][T17175] arch_do_signal_or_restart+0x59e/0x7a0 [ 870.058912][T17175] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 870.058936][T17175] exit_to_user_mode_loop+0x86/0x4a0 [ 870.058949][T17175] do_syscall_64+0x67c/0xf80 [ 870.058964][T17175] ? clear_bhb_loop+0x40/0x90 [ 870.058978][T17175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.058990][T17175] RIP: 0033:0x7f3bc479c799 [ 870.059000][T17175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.059011][T17175] RSP: 002b:00007f3bc5577028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 870.059023][T17175] RAX: fffffffffffffff6 RBX: 00007f3bc4a15fa0 RCX: 00007f3bc479c799 [ 870.059030][T17175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 870.059036][T17175] RBP: 00007f3bc5577090 R08: 0000000000000000 R09: 0000000000000000 [ 870.059043][T17175] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 870.059050][T17175] R13: 00007f3bc4a16038 R14: 00007f3bc4a15fa0 R15: 00007ffeb2c543e8 [ 870.059064][T17175] [ 870.501171][ T30] audit: type=1400 audit(1774147558.314:1030): avc: denied { setopt } for pid=17182 comm="syz.3.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 870.798925][T17192] 9p: Bad value for 'wfdno' [ 871.451066][T12493] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 871.617445][T12493] usb 7-1: unable to get BOS descriptor or descriptor too short [ 871.688653][T12493] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.709176][T12493] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 871.759584][T12493] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 871.793126][T12493] usb 7-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 871.900274][T12493] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 871.925424][T12493] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.939535][T12493] usb 7-1: Product: syz [ 871.958143][T12493] usb 7-1: Manufacturer: syz [ 871.971518][T12493] usb 7-1: SerialNumber: syz [ 872.270224][T12493] usb 7-1: Can't get UAC3 power state for id 10 [ 872.283279][T12493] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 872.308759][T12493] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 872.409029][T12493] usb 7-1: USB disconnect, device number 5 [ 872.466974][T15004] udevd[15004]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 872.852028][T17238] fuse: Bad value for 'fd' [ 874.815193][T17244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2989'. [ 875.391142][T12920] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 875.402465][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 875.541021][T12920] usb 6-1: device descriptor read/64, error -32 [ 875.553646][T17244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2989'. [ 875.820936][T12920] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 875.821520][T17244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2989'. [ 875.883501][ T3091] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 875.983605][T12920] usb 6-1: not running at top speed; connect to a high speed hub [ 876.276189][ T3091] usb 2-1: config 0 has an invalid interface number: 3 but max is 2 [ 876.311579][ T3091] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 876.324813][ T3091] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.335531][ T3091] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 876.345685][ T3091] usb 2-1: config 0 has no interface number 0 [ 876.351814][ T3091] usb 2-1: config 0 has no interface number 1 [ 876.358012][ T3091] usb 2-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice=29.ac [ 876.369696][ T3091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.385438][ T3091] usb 2-1: config 0 descriptor?? [ 876.398533][ T3091] usb 2-1: unknown number of interfaces: 2 [ 876.473430][T17268] syzkaller0: entered promiscuous mode [ 876.479059][T17268] syzkaller0: entered allmulticast mode [ 877.995085][ T5888] usb 2-1: USB disconnect, device number 30 [ 878.440989][T12495] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 878.475631][T12920] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 878.486239][T12920] usb 6-1: can't read configurations, error -71 [ 878.504536][T12920] usb usb6-port1: attempt power cycle [ 878.618650][T12495] usb 4-1: unable to get BOS descriptor or descriptor too short [ 878.627342][T12495] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.645714][T12495] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 878.655554][T12495] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 878.666797][T12495] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 878.678218][T12495] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 878.695365][T12495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.703626][T12495] usb 4-1: Product: syz [ 878.707846][T12495] usb 4-1: Manufacturer: syz [ 878.712728][T12495] usb 4-1: SerialNumber: syz [ 879.318106][T12495] usb 4-1: Can't get UAC3 power state for id 10 [ 879.325732][T12495] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 879.344410][T12495] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 879.459511][T12495] usb 4-1: USB disconnect, device number 72 [ 879.497082][T15004] udevd[15004]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 879.842403][T17295] netlink: 'syz.5.3003': attribute type 10 has an invalid length. [ 879.850283][T17295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3003'. [ 880.335935][T17307] fuse: Bad value for 'fd' [ 881.856943][ T30] audit: type=1400 audit(1774147570.054:1031): avc: denied { transfer } for pid=17324 comm="syz.6.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 882.851754][T17334] ipvlan1: entered promiscuous mode [ 883.469327][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3015'. [ 883.561121][T17339] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3015'. [ 884.117246][T17350] 9p: Could not find request transport: f=ÕÍVmØ?õXl†1]%8ßð8‹¡\ÏË·´ æwº%9™ [ 884.451010][T12495] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 884.532563][T17363] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 884.542462][T17363] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 884.554815][T17363] overlayfs: failed to get uuid (548/file0, err=-13); falling back to uuid=null. [ 884.565545][T17363] FAULT_INJECTION: forcing a failure. [ 884.565545][T17363] name failslab, interval 1, probability 0, space 0, times 0 [ 884.578726][T17363] CPU: 0 UID: 0 PID: 17363 Comm: syz.2.3023 Tainted: G L syzkaller #0 PREEMPT(full) [ 884.578764][T17363] Tainted: [L]=SOFTLOCKUP [ 884.578771][T17363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 884.578780][T17363] Call Trace: [ 884.578787][T17363] [ 884.578794][T17363] dump_stack_lvl+0x100/0x190 [ 884.578828][T17363] should_fail_ex.cold+0x5/0xa [ 884.578852][T17363] should_failslab+0xc2/0x120 [ 884.578871][T17363] __kmalloc_cache_noprof+0x7a/0x6f0 [ 884.578893][T17363] ? copy_mount_options+0x55/0x190 [ 884.578924][T17363] copy_mount_options+0x55/0x190 [ 884.578951][T17363] __x64_sys_mount+0x1ab/0x310 [ 884.578974][T17363] ? __pfx___x64_sys_mount+0x10/0x10 [ 884.579003][T17363] do_syscall_64+0x106/0xf80 [ 884.579027][T17363] ? clear_bhb_loop+0x40/0x90 [ 884.579049][T17363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.579067][T17363] RIP: 0033:0x7f2a3bd9c799 [ 884.579083][T17363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.579099][T17363] RSP: 002b:00007f2a3cc8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 884.579117][T17363] RAX: ffffffffffffffda RBX: 00007f2a3c015fa0 RCX: 00007f2a3bd9c799 [ 884.579128][T17363] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 884.579139][T17363] RBP: 00007f2a3cc8a090 R08: 0000200000000500 R09: 0000000000000000 [ 884.579150][T17363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.579160][T17363] R13: 00007f2a3c016038 R14: 00007f2a3c015fa0 R15: 00007fff95aa1668 [ 884.579183][T17363] [ 884.783055][T12495] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 884.794320][T12495] usb 2-1: config 0 has no interface number 0 [ 884.872606][T12495] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 884.936352][T12495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.077724][T12495] usb 2-1: config 0 descriptor?? [ 885.193863][T12495] usb 2-1: selecting invalid altsetting 1 [ 885.199765][T12495] dvb_ttusb_budget: ttusb_init_controller: error [ 885.215275][T12495] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 885.261282][T17369] ipvlan1: entered promiscuous mode [ 885.289937][T12495] DVB: Unable to find symbol cx22700_attach() [ 885.886640][T12495] DVB: Unable to find symbol tda10046_attach() [ 885.903903][T12495] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 885.943017][T12495] usb 2-1: USB disconnect, device number 31 [ 885.958329][ T30] audit: type=1400 audit(1774147574.154:1032): avc: denied { bind } for pid=17373 comm="syz.6.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 887.055044][T12920] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 887.281920][T12920] usb 7-1: device descriptor read/64, error -71 [ 887.612508][T12920] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 887.620967][T12493] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 887.750960][T12920] usb 7-1: device descriptor read/64, error -71 [ 887.772985][T12493] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 887.783199][T12493] usb 4-1: config 0 interface 0 has no altsetting 0 [ 887.791689][T12493] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 887.802472][T12493] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 887.810613][T12493] usb 4-1: Product: syz [ 887.821077][T12493] usb 4-1: Manufacturer: syz [ 887.825883][T12493] usb 4-1: SerialNumber: syz [ 887.846471][T12493] usb 4-1: config 0 descriptor?? [ 887.857416][T12493] usb 4-1: selecting invalid altsetting 0 [ 887.871241][T12920] usb usb7-port1: attempt power cycle [ 887.960963][ T5883] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 888.065632][ T5888] usb 4-1: USB disconnect, device number 73 [ 888.220942][T12920] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 888.252485][T12920] usb 7-1: device descriptor read/8, error -71 [ 888.272879][T12493] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 888.377857][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 888.399152][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.420018][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 888.435100][T12493] usb 6-1: Using ep0 maxpacket: 32 [ 888.449754][T12493] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.461229][ T5883] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 888.480338][T17422] FAULT_INJECTION: forcing a failure. [ 888.480338][T17422] name failslab, interval 1, probability 0, space 0, times 0 [ 888.494604][T12493] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.504405][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.512623][T12493] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 888.522930][T17422] CPU: 0 UID: 0 PID: 17422 Comm: syz.6.3037 Tainted: G L syzkaller #0 PREEMPT(full) [ 888.522957][T17422] Tainted: [L]=SOFTLOCKUP [ 888.522964][T17422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 888.522974][T17422] Call Trace: [ 888.522980][T17422] [ 888.522987][T17422] dump_stack_lvl+0x100/0x190 [ 888.523029][T17422] should_fail_ex.cold+0x5/0xa [ 888.523053][T17422] should_failslab+0xc2/0x120 [ 888.523072][T17422] __kmalloc_cache_noprof+0x7a/0x6f0 [ 888.523094][T17422] ? snd_seq_port_connect+0x61/0x560 [ 888.523120][T17422] ? snd_seq_port_use_ptr+0x14d/0x1b0 [ 888.523145][T17422] ? snd_seq_port_use_ptr+0x14d/0x1b0 [ 888.523174][T17422] snd_seq_port_connect+0x61/0x560 [ 888.523200][T17422] ? _raw_read_unlock+0x28/0x50 [ 888.523223][T17422] ? check_subscription_permission.isra.0+0x146/0x240 [ 888.523255][T17422] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 888.523284][T17422] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 888.523321][T17422] call_seq_client_ctl+0xa3/0x130 [ 888.523347][T17422] snd_seq_kernel_client_ctl+0x77/0xd0 [ 888.523371][T17422] snd_seq_oss_midi_open+0x5ad/0x6b0 [ 888.523392][T17422] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 888.523411][T17422] ? snd_seq_oss_midi_reset+0x11a/0x4c0 [ 888.523438][T17422] ? lock_acquire+0x1cf/0x380 [ 888.523458][T17422] snd_seq_oss_synth_reset+0x439/0x8e0 [ 888.523480][T17422] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 888.523500][T17422] ? __mutex_lock+0x26a/0x1b90 [ 888.523523][T17422] ? do_vfs_ioctl+0x226/0x13e0 [ 888.523547][T17422] ? odev_ioctl+0x6f/0x120 [ 888.523572][T17422] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 888.523600][T17422] snd_seq_oss_reset+0x73/0x290 [ 888.523620][T17422] snd_seq_oss_ioctl+0xab2/0xd90 [ 888.523638][T17422] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 888.523655][T17422] ? hook_file_ioctl_common+0x146/0x410 [ 888.523687][T17422] odev_ioctl+0x94/0x120 [ 888.523714][T17422] ? __pfx_odev_ioctl+0x10/0x10 [ 888.523740][T17422] __x64_sys_ioctl+0x18e/0x210 [ 888.523767][T17422] do_syscall_64+0x106/0xf80 [ 888.523789][T17422] ? clear_bhb_loop+0x40/0x90 [ 888.523811][T17422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.523829][T17422] RIP: 0033:0x7f007a19c799 [ 888.523844][T17422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.523859][T17422] RSP: 002b:00007f007af9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 888.523877][T17422] RAX: ffffffffffffffda RBX: 00007f007a416090 RCX: 00007f007a19c799 [ 888.523889][T17422] RDX: 0000000000000000 RSI: 0000000000005100 RDI: 0000000000000005 [ 888.523898][T17422] RBP: 00007f007af9b090 R08: 0000000000000000 R09: 0000000000000000 [ 888.523908][T17422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.523918][T17422] R13: 00007f007a416128 R14: 00007f007a416090 R15: 00007ffd6b1a6e48 [ 888.523941][T17422] [ 888.524343][ T5883] usb 2-1: config 0 descriptor?? [ 888.815706][T12493] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.849216][T12493] usb 6-1: config 0 descriptor?? [ 889.481174][T12493] hid_parser_main: 4050 callbacks suppressed [ 889.481189][T12493] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 889.498408][T12493] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 889.674970][ T5883] aquacomputer_d5next 0003:0C70:F003.001C: unknown main item tag 0x0 [ 889.686834][ T5883] aquacomputer_d5next 0003:0C70:F003.001C: unknown main item tag 0x0 [ 889.703973][ T5883] aquacomputer_d5next 0003:0C70:F003.001C: unknown main item tag 0x0 [ 889.713192][T12493] ft260 0003:0403:6030.001B: chip code: 0000 0000 [ 889.744850][ T5883] aquacomputer_d5next 0003:0C70:F003.001C: unknown main item tag 0x0 [ 889.765229][ T5883] aquacomputer_d5next 0003:0C70:F003.001C: unknown main item tag 0x0 [ 889.780942][ T5883] aquacomputer_d5next 0003:0C70:F003.001C: unknown main item tag 0x0 [ 889.796425][ T5883] aquacomputer_d5next 0003:0C70:F003.001C: unexpected long global item [ 889.811741][ T5883] aquacomputer_d5next 0003:0C70:F003.001C: probe with driver aquacomputer_d5next failed with error -22 [ 889.932158][T12493] ft260 0003:0403:6030.001B: failed to retrieve system status [ 889.944630][T12493] ft260 0003:0403:6030.001B: probe with driver ft260 failed with error -71 [ 889.980130][T12493] usb 6-1: USB disconnect, device number 57 [ 890.117481][T17411] netlink: 'syz.1.3033': attribute type 4 has an invalid length. [ 890.220987][T13595] nci: nci_rx_work: unknown MT 0x7 [ 890.490483][T17454] 9p: Could not find request transport: f=ÕÍVmØ?õXl†1]%8ßð8‹¡\ÏË·´ æwº%9™ [ 890.855285][T17464] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3046'. [ 890.981080][T17446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 891.791007][T12920] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 891.866475][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3048'. [ 891.876011][T17469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3048'. [ 891.901409][T17469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3048'. [ 891.984744][T12920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 892.005300][T12920] usb 6-1: string descriptor 0 read error: -22 [ 892.011889][T12920] usb 6-1: New USB device found, idVendor=2471, idProduct=8010, bcdDevice= 0.40 [ 892.021152][T12920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.063838][T12920] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 892.280330][T12920] usb 6-1: 0:4 : does not exist [ 892.501694][T12920] usb 6-1: USB disconnect, device number 58 [ 893.117494][T12920] usb 2-1: USB disconnect, device number 32 [ 894.709415][T17496] 9p: Could not find request transport: f=ÕÍVmØ?õXl†1]%8ßð8‹¡\ÏË·´ æwº%9™ [ 895.431030][T17531] siw: device registration error -23 [ 895.804929][T17544] mkiss: ax0: crc mode is auto. [ 895.829885][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3069'. [ 895.916193][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3061'. [ 895.939034][T17518] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3061'. [ 895.951307][T17551] ipvlan1: entered promiscuous mode [ 895.957021][T17518] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3061'. [ 897.217165][T17569] siw: device registration error -23 [ 897.230971][T12920] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 897.244561][T12493] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 897.287187][ T30] audit: type=1400 audit(1774147585.474:1033): avc: denied { shutdown } for pid=17571 comm="syz.2.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 897.400941][T12493] usb 6-1: Using ep0 maxpacket: 16 [ 897.408202][T12493] usb 6-1: config 0 has no interfaces? [ 897.414221][T12493] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 897.420918][T12920] usb 4-1: Using ep0 maxpacket: 32 [ 897.423568][T12493] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.440685][T12493] usb 6-1: config 0 descriptor?? [ 897.449175][T12920] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 897.462117][T12920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.474579][T12920] usb 4-1: Product: syz [ 897.478789][T12920] usb 4-1: Manufacturer: syz [ 897.483943][T12920] usb 4-1: SerialNumber: syz [ 897.503794][T12920] usb 4-1: config 0 descriptor?? [ 897.512878][T12920] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 897.673506][ T5915] usb 6-1: USB disconnect, device number 59 [ 897.841904][T12976] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 898.415782][T17568] fuse: Unknown parameter 'd' [ 898.501180][T12495] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 898.662640][T12495] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.673093][T12495] usb 3-1: config 0 has no interfaces? [ 898.681663][T12495] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 898.690790][T12495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.698897][T12495] usb 3-1: Product: syz [ 898.703193][T12495] usb 3-1: Manufacturer: syz [ 898.707874][T12495] usb 3-1: SerialNumber: syz [ 898.721229][T12920] gspca_topro: reg_w err -110 [ 898.751106][T12920] gspca_topro: Sensor soi763a [ 898.785179][T12495] usb 3-1: config 0 descriptor?? [ 898.871210][T12920] usb 4-1: USB disconnect, device number 74 [ 898.949279][T17595] ipvlan1: entered promiscuous mode [ 899.790969][T12920] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 900.042853][T12920] usb 4-1: Using ep0 maxpacket: 8 [ 900.116700][T12920] usb 4-1: unable to get BOS descriptor or descriptor too short [ 900.126716][T12920] usb 4-1: config 86 has an invalid interface number: 149 but max is 0 [ 900.136150][T12920] usb 4-1: config 86 has no interface number 0 [ 900.229486][T12920] usb 4-1: config 86 interface 149 has no altsetting 0 [ 900.242297][T12920] usb 4-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice= a.5c [ 900.252160][T12920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.260156][T12920] usb 4-1: Product: syz [ 900.269638][T12920] usb 4-1: Manufacturer: syz [ 900.671994][T12920] usb 4-1: SerialNumber: syz [ 900.799742][T17621] FAULT_INJECTION: forcing a failure. [ 900.799742][T17621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.813759][T17621] CPU: 0 UID: 0 PID: 17621 Comm: syz.5.3092 Tainted: G L syzkaller #0 PREEMPT(full) [ 900.813787][T17621] Tainted: [L]=SOFTLOCKUP [ 900.813793][T17621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 900.813806][T17621] Call Trace: [ 900.813812][T17621] [ 900.813818][T17621] dump_stack_lvl+0x100/0x190 [ 900.813846][T17621] should_fail_ex.cold+0x5/0xa [ 900.813866][T17621] _copy_from_iter+0x1f4/0x1690 [ 900.813890][T17621] ? __asan_memset+0x23/0x50 [ 900.813910][T17621] ? __pfx__copy_from_iter+0x10/0x10 [ 900.813925][T17621] ? __pfx___alloc_skb+0x10/0x10 [ 900.813951][T17621] netlink_sendmsg+0x808/0xda0 [ 900.813976][T17621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 900.813995][T17621] ? __might_fault+0x60/0x140 [ 900.814022][T17621] ____sys_sendmsg+0x9e1/0xb70 [ 900.814043][T17621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 900.814066][T17621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 900.814097][T17621] ___sys_sendmsg+0x190/0x1e0 [ 900.814112][T17621] ? __pfx____sys_sendmsg+0x10/0x10 [ 900.814151][T17621] __sys_sendmsg+0x170/0x220 [ 900.814169][T17621] ? __pfx___sys_sendmsg+0x10/0x10 [ 900.814200][T17621] do_syscall_64+0x106/0xf80 [ 900.814221][T17621] ? clear_bhb_loop+0x40/0x90 [ 900.814239][T17621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.814253][T17621] RIP: 0033:0x7f3bc479c799 [ 900.814266][T17621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.814280][T17621] RSP: 002b:00007f3bc29f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.814295][T17621] RAX: ffffffffffffffda RBX: 00007f3bc4a16090 RCX: 00007f3bc479c799 [ 900.814304][T17621] RDX: 0000000004000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 900.814313][T17621] RBP: 00007f3bc29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 900.814322][T17621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.814330][T17621] R13: 00007f3bc4a16128 R14: 00007f3bc4a16090 R15: 00007ffeb2c543e8 [ 900.814350][T17621] [ 901.312125][T12495] usb 3-1: USB disconnect, device number 71 [ 901.588516][T12920] belkin_sa 4-1:86.149: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 901.594375][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'. [ 901.622972][T12920] usb 4-1: bcdDevice: 0a5c, bfc: 0 [ 901.776764][T12920] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 901.798336][T12920] usb 4-1: USB disconnect, device number 75 [ 901.825333][T12920] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 901.845839][ T5812] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 901.866168][T12920] belkin_sa 4-1:86.149: device disconnected [ 902.399409][T17637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3098'. [ 903.397720][T17659] snd_dummy snd_dummy.0: control 3:1:33554435:syz1:232 is already present [ 903.642662][ T30] audit: type=1400 audit(1774147591.834:1034): avc: denied { setattr } for pid=17652 comm="syz.6.3103" name="NETLINK" dev="sockfs" ino=66529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 904.923926][T17672] 8021q: VLANs not supported on ip6_vti0 [ 905.024136][T17675] netlink: 'syz.3.3109': attribute type 10 has an invalid length. [ 905.032999][T17675] wlan1: mtu less than device minimum [ 905.051451][T17675] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 905.280437][ T30] audit: type=1400 audit(1774147593.474:1035): avc: denied { map } for pid=17676 comm="syz.1.3110" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 905.325056][ T30] audit: type=1400 audit(1774147593.474:1036): avc: denied { execute } for pid=17676 comm="syz.1.3110" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 905.509429][T17692] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3114'. [ 907.330953][ T5915] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 907.438102][ T30] audit: type=1400 audit(1774147595.634:1037): avc: denied { write } for pid=17709 comm="syz.5.3119" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 907.551080][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 907.574851][ T5915] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 907.584945][ T5915] usb 3-1: config 0 has no interface number 0 [ 907.591408][ T5915] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 907.603514][ T5915] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 907.613192][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.621502][ T5915] usb 3-1: Product: syz [ 907.641878][ T5915] usb 3-1: Manufacturer: syz [ 907.651216][ T5915] usb 3-1: SerialNumber: syz [ 907.810942][ T5915] usb 3-1: config 0 descriptor?? [ 907.913686][ T5915] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 907.923519][ T5915] em28xx 3-1:0.132: Video interface 132 found: [ 908.480699][ T5915] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 909.211344][ T5915] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 909.218339][ T5915] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 909.271081][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3127'. [ 910.218701][T17740] 9p: Could not find request transport: f=ÕÍVmØ?õXl†1]%8ßð8‹¡\ÏË·´ æwº%9™ [ 910.270941][ T5888] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 910.300956][ T5915] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 910.308814][ T5915] em28xx 3-1:0.132: analog set to bulk mode. [ 910.315007][ T3091] em28xx 3-1:0.132: Registering V4L2 extension [ 910.341195][T12920] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 910.377552][ T3091] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 910.389925][ T3091] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 910.406184][ T3091] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 910.419722][ T3091] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 910.428618][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 910.436281][ T5888] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 910.447777][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.463166][ T5888] usb 2-1: config 0 has no interface number 0 [ 910.474841][ T3091] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 910.487996][ T5888] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 910.502389][ T3091] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 910.513756][T12920] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 910.521848][ T5888] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 910.532318][T12920] usb 6-1: config 0 has no interface number 0 [ 910.539606][ T3091] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 910.549425][ T5888] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 910.559739][T12920] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.571028][ T5888] usb 2-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 910.582155][ T3091] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 910.591007][T12920] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.600982][T12920] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 910.613998][ T5888] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 910.624266][ T5888] usb 2-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 910.641735][T12920] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 910.653327][T12920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.671270][ T5888] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 910.680735][ T3091] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 910.694304][T12920] usb 6-1: config 0 descriptor?? [ 910.699361][ T3091] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 910.708306][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.716691][ T5888] usb 2-1: Product: syz [ 910.716880][ T3091] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 910.737593][ T5888] usb 2-1: Manufacturer: syz [ 910.742605][ T5888] usb 2-1: SerialNumber: syz [ 910.751476][ T3091] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 910.761815][ T5888] usb 2-1: config 0 descriptor?? [ 910.766856][ T3091] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 910.776314][T17747] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 910.786988][ T3091] em28xx 3-1:0.132: Config register raw data: 0xfffffffb [ 910.806945][ T3091] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 910.823864][T17747] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 910.831078][ T3091] em28xx 3-1:0.132: No AC97 audio processor [ 910.870690][ T3091] usb 3-1: Decoder not found [ 910.893801][ T3091] em28xx 3-1:0.132: failed to create media graph [ 910.923882][ T3091] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 911.001902][T17760] ================================================================== [ 911.009991][T17760] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 911.017448][T17760] Read of size 8 at addr ffff888078eb4748 by task v4l_id/17760 [ 911.024989][T17760] [ 911.027306][T17760] CPU: 1 UID: 0 PID: 17760 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 911.027329][T17760] Tainted: [L]=SOFTLOCKUP [ 911.027334][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 911.027341][T17760] Call Trace: [ 911.027347][T17760] [ 911.027352][T17760] dump_stack_lvl+0x100/0x190 [ 911.027372][T17760] print_report+0x156/0x4c9 [ 911.027390][T17760] ? __virt_addr_valid+0x81/0x620 [ 911.027415][T17760] ? __phys_addr+0xe8/0x180 [ 911.027438][T17760] ? v4l2_fh_init+0x27d/0x2c0 [ 911.027459][T17760] kasan_report+0xdf/0x1e0 [ 911.027475][T17760] ? v4l2_fh_init+0x27d/0x2c0 [ 911.027492][T17760] v4l2_fh_init+0x27d/0x2c0 [ 911.027507][T17760] v4l2_fh_open+0x64/0xa0 [ 911.027523][T17760] em28xx_v4l2_open+0x11e/0x570 [ 911.027548][T17760] v4l2_open+0x1d2/0x490 [ 911.027572][T17760] ? __pfx_v4l2_open+0x10/0x10 [ 911.027593][T17760] chrdev_open+0x234/0x6a0 [ 911.027610][T17760] ? __pfx_chrdev_open+0x10/0x10 [ 911.027624][T17760] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 911.027639][T17760] do_dentry_open+0x6d8/0x1660 [ 911.027649][T17760] ? __pfx_chrdev_open+0x10/0x10 [ 911.027662][T17760] vfs_open+0x82/0x3f0 [ 911.027678][T17760] path_openat+0x208c/0x31a0 [ 911.027700][T17760] ? __pfx_path_openat+0x10/0x10 [ 911.027720][T17760] do_file_open+0x20e/0x430 [ 911.027738][T17760] ? __pfx_do_file_open+0x10/0x10 [ 911.027760][T17760] ? alloc_fd+0x476/0x790 [ 911.027773][T17760] ? do_getname+0x191/0x390 [ 911.027789][T17760] do_sys_openat2+0x10d/0x1e0 [ 911.027803][T17760] ? __pfx_do_sys_openat2+0x10/0x10 [ 911.027821][T17760] __x64_sys_openat+0x12d/0x210 [ 911.027842][T17760] ? __pfx___x64_sys_openat+0x10/0x10 [ 911.027864][T17760] ? do_user_addr_fault+0x8d6/0x12f0 [ 911.027883][T17760] do_syscall_64+0x106/0xf80 [ 911.027903][T17760] ? clear_bhb_loop+0x40/0x90 [ 911.027921][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.027939][T17760] RIP: 0033:0x7fa4baaa7407 [ 911.027954][T17760] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 911.027970][T17760] RSP: 002b:00007ffd96c9ca70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 911.027986][T17760] RAX: ffffffffffffffda RBX: 00007fa4bb19b880 RCX: 00007fa4baaa7407 [ 911.027999][T17760] RDX: 0000000000000000 RSI: 00007ffd96c9df1c RDI: ffffffffffffff9c [ 911.028010][T17760] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 911.028019][T17760] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 911.028028][T17760] R13: 00007ffd96c9ccc0 R14: 00007fa4bb2a0000 R15: 000056204fa2b4d8 [ 911.028044][T17760] [ 911.028050][T17760] [ 911.288180][T17760] Allocated by task 3091: [ 911.292486][T17760] kasan_save_stack+0x30/0x50 [ 911.297158][T17760] kasan_save_track+0x14/0x30 [ 911.301821][T17760] __kasan_kmalloc+0xaa/0xb0 [ 911.306394][T17760] em28xx_v4l2_init.cold+0x94/0x3503 [ 911.311654][T17760] em28xx_init_extension+0x13a/0x200 [ 911.316926][T17760] request_module_async+0x61/0x80 [ 911.321930][T17760] process_one_work+0xa23/0x19a0 [ 911.326846][T17760] worker_thread+0x5ef/0xe50 [ 911.331414][T17760] kthread+0x370/0x450 [ 911.335460][T17760] ret_from_fork+0x754/0xd80 [ 911.340028][T17760] ret_from_fork_asm+0x1a/0x30 [ 911.344773][T17760] [ 911.347073][T17760] Freed by task 3091: [ 911.351028][T17760] kasan_save_stack+0x30/0x50 [ 911.355698][T17760] kasan_save_track+0x14/0x30 [ 911.360355][T17760] kasan_save_free_info+0x3b/0x70 [ 911.365358][T17760] __kasan_slab_free+0x5f/0x80 [ 911.370104][T17760] kfree+0x1f6/0x6b0 [ 911.373978][T17760] kref_put.isra.0+0x56/0x90 [ 911.378545][T17760] em28xx_v4l2_init.cold+0x280/0x3503 [ 911.383890][T17760] em28xx_init_extension+0x13a/0x200 [ 911.389159][T17760] request_module_async+0x61/0x80 [ 911.394156][T17760] process_one_work+0xa23/0x19a0 [ 911.399069][T17760] worker_thread+0x5ef/0xe50 [ 911.403636][T17760] kthread+0x370/0x450 [ 911.407682][T17760] ret_from_fork+0x754/0xd80 [ 911.412248][T17760] ret_from_fork_asm+0x1a/0x30 [ 911.417006][T17760] [ 911.419306][T17760] The buggy address belongs to the object at ffff888078eb4000 [ 911.419306][T17760] which belongs to the cache kmalloc-8k of size 8192 [ 911.433333][T17760] The buggy address is located 1864 bytes inside of [ 911.433333][T17760] freed 8192-byte region [ffff888078eb4000, ffff888078eb6000) [ 911.447278][T17760] [ 911.449580][T17760] The buggy address belongs to the physical page: [ 911.455963][T17760] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78eb0 [ 911.464695][T17760] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 911.473170][T17760] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 911.480691][T17760] page_type: f5(slab) [ 911.484649][T17760] raw: 00fff00000000040 ffff88813fe40280 dead000000000100 dead000000000122 [ 911.493209][T17760] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 911.501769][T17760] head: 00fff00000000040 ffff88813fe40280 dead000000000100 dead000000000122 [ 911.510415][T17760] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 911.519060][T17760] head: 00fff00000000003 ffffea0001e3ac01 00000000ffffffff 00000000ffffffff [ 911.527705][T17760] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 911.536346][T17760] page dumped because: kasan: bad access detected [ 911.542730][T17760] page_owner tracks the page as allocated [ 911.548416][T17760] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8528, tgid 8528 (syz-executor), ts 260298038889, free_ts 260135756208 [ 911.569748][T17760] post_alloc_hook+0x153/0x170 [ 911.574496][T17760] get_page_from_freelist+0x111d/0x3140 [ 911.580026][T17760] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 911.585901][T17760] new_slab+0xa6/0x6b0 [ 911.589948][T17760] refill_objects+0x26b/0x400 [ 911.594605][T17760] __pcs_replace_empty_main+0x1ab/0x660 [ 911.600133][T17760] __kvmalloc_node_noprof+0x7da/0xa00 [ 911.605488][T17760] wg_packet_queue_init+0x9a/0x360 [ 911.610589][T17760] wg_newlink+0x332/0x7a0 [ 911.614897][T17760] rtnl_newlink+0x1494/0x2380 [ 911.619555][T17760] rtnetlink_rcv_msg+0x95e/0xe90 [ 911.624474][T17760] netlink_rcv_skb+0x159/0x420 [ 911.629219][T17760] netlink_unicast+0x5aa/0x870 [ 911.633969][T17760] netlink_sendmsg+0x8b0/0xda0 [ 911.638716][T17760] __sys_sendto+0x468/0x4b0 [ 911.643198][T17760] __x64_sys_sendto+0xe0/0x1c0 [ 911.647954][T17760] page last free pid 8528 tgid 8528 stack trace: [ 911.654256][T17760] __free_frozen_pages+0x7e1/0x10d0 [ 911.659435][T17760] qlist_free_all+0x47/0xe0 [ 911.663919][T17760] kasan_quarantine_reduce+0x1a0/0x1f0 [ 911.669362][T17760] __kasan_kmalloc+0x8a/0xb0 [ 911.673935][T17760] __kmalloc_node_track_caller_noprof+0x304/0x850 [ 911.680332][T17760] kvasprintf+0xbc/0x150 [ 911.684553][T17760] kasprintf+0xc7/0x100 [ 911.688687][T17760] alloc_workqueue_noprof+0x114/0x200 [ 911.694046][T17760] wg_newlink+0x29e/0x7a0 [ 911.698364][T17760] rtnl_newlink+0x1494/0x2380 [ 911.703021][T17760] rtnetlink_rcv_msg+0x95e/0xe90 [ 911.707939][T17760] netlink_rcv_skb+0x159/0x420 [ 911.712687][T17760] netlink_unicast+0x5aa/0x870 [ 911.717432][T17760] netlink_sendmsg+0x8b0/0xda0 [ 911.722178][T17760] __sys_sendto+0x468/0x4b0 [ 911.726659][T17760] __x64_sys_sendto+0xe0/0x1c0 [ 911.731402][T17760] [ 911.733703][T17760] Memory state around the buggy address: [ 911.739305][T17760] ffff888078eb4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 911.747339][T17760] ffff888078eb4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 911.755383][T17760] >ffff888078eb4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 911.763431][T17760] ^ [ 911.769815][T17760] ffff888078eb4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 911.777865][T17760] ffff888078eb4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 911.785899][T17760] ================================================================== [ 911.802498][ T3091] em28xx 3-1:0.132: Remote control support is not available for this card. [ 911.985821][T13595] wlan0: Trigger new scan to find an IBSS to join SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 912.058577][T17762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.069646][T17762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.243995][T12920] uclogic 0003:28BD:0042.001D: failed retrieving string descriptor #100: -71 [ 912.252843][T12920] uclogic 0003:28BD:0042.001D: failed retrieving pen parameters: -71 [ 912.261053][T12920] uclogic 0003:28BD:0042.001D: pen probing failed: -71 [ 912.267967][T12920] uclogic 0003:28BD:0042.001D: failed probing parameters: -71 [ 912.276019][T12920] uclogic 0003:28BD:0042.001D: probe with driver uclogic failed with error -71 [ 912.303186][T12920] usb 6-1: USB disconnect, device number 60 [ 912.443246][ T30] audit: type=1400 audit(1774147600.644:1038): avc: denied { read } for pid=5160 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 912.447480][T17760] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 912.447499][T17760] CPU: 1 UID: 0 PID: 17760 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 912.447527][T17760] Tainted: [L]=SOFTLOCKUP [ 912.447534][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 912.447544][T17760] Call Trace: [ 912.447550][T17760] [ 912.447557][T17760] dump_stack_lvl+0x100/0x190 [ 912.447587][T17760] vpanic+0x552/0x970 [ 912.447603][T17760] ? __pfx_vpanic+0x10/0x10 [ 912.447621][T17760] ? v4l2_fh_init+0x27d/0x2c0 [ 912.447642][T17760] panic+0xd1/0xe0 [ 912.447657][T17760] ? __pfx_panic+0x10/0x10 [ 912.447673][T17760] ? v4l2_fh_init+0x27d/0x2c0 [ 912.447693][T17760] ? preempt_schedule_common+0x42/0xc0 [ 912.447716][T17760] ? check_panic_on_warn+0x1f/0x90 [ 912.447733][T17760] check_panic_on_warn.cold+0x19/0x34 [ 912.447750][T17760] end_report.part.0+0x3a/0x90 [ 912.447772][T17760] kasan_report.cold+0xe/0x18 [ 912.447794][T17760] ? v4l2_fh_init+0x27d/0x2c0 [ 912.447818][T17760] v4l2_fh_init+0x27d/0x2c0 [ 912.447840][T17760] v4l2_fh_open+0x64/0xa0 [ 912.447861][T17760] em28xx_v4l2_open+0x11e/0x570 [ 912.447883][T17760] v4l2_open+0x1d2/0x490 [ 912.447906][T17760] ? __pfx_v4l2_open+0x10/0x10 [ 912.447927][T17760] chrdev_open+0x234/0x6a0 [ 912.447945][T17760] ? __pfx_chrdev_open+0x10/0x10 [ 912.447962][T17760] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 912.447984][T17760] do_dentry_open+0x6d8/0x1660 [ 912.448000][T17760] ? __pfx_chrdev_open+0x10/0x10 [ 912.448019][T17760] vfs_open+0x82/0x3f0 [ 912.448038][T17760] path_openat+0x208c/0x31a0 [ 912.448059][T17760] ? __pfx_path_openat+0x10/0x10 [ 912.448079][T17760] do_file_open+0x20e/0x430 [ 912.448098][T17760] ? __pfx_do_file_open+0x10/0x10 [ 912.448122][T17760] ? alloc_fd+0x476/0x790 [ 912.448140][T17760] ? do_getname+0x191/0x390 [ 912.448161][T17760] do_sys_openat2+0x10d/0x1e0 [ 912.448181][T17760] ? __pfx_do_sys_openat2+0x10/0x10 [ 912.448204][T17760] __x64_sys_openat+0x12d/0x210 [ 912.448224][T17760] ? __pfx___x64_sys_openat+0x10/0x10 [ 912.448246][T17760] ? do_user_addr_fault+0x8d6/0x12f0 [ 912.448267][T17760] do_syscall_64+0x106/0xf80 [ 912.448288][T17760] ? clear_bhb_loop+0x40/0x90 [ 912.448306][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.448322][T17760] RIP: 0033:0x7fa4baaa7407 [ 912.448337][T17760] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 912.448352][T17760] RSP: 002b:00007ffd96c9ca70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 912.448368][T17760] RAX: ffffffffffffffda RBX: 00007fa4bb19b880 RCX: 00007fa4baaa7407 [ 912.448380][T17760] RDX: 0000000000000000 RSI: 00007ffd96c9df1c RDI: ffffffffffffff9c [ 912.448390][T17760] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 912.448400][T17760] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 912.448411][T17760] R13: 00007ffd96c9ccc0 R14: 00007fa4bb2a0000 R15: 000056204fa2b4d8 [ 912.448427][T17760] [ 912.465480][T17760] Kernel Offset: disabled