last executing test programs: 14.518165554s ago: executing program 0 (id=311): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) set_mempolicy(0x4005, 0x0, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000013c0)=ANY=[@ANYBLOB="5c000000000000000a004e200000000500000000000000000000000000000000040000000000000000000000000000000000000000000000000008bb3154baba6e444dc8a63f270912000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0000000a004e2400000d652001000000000000000000000000000202000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24000000082001000000000000000000000000000240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e220000000200000000000000000000000000000001090000000000000000000000000000000000000000e2fe00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e230000000100000000000000000000000000000000ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22000000cf00000000000000000000ffffac1e020108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300000006fe8000000000000000000000000000bb07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22fffffffffe80000000000000000000000000002506000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22000000062001000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e24000000040000000000000000000000000000000092d7f00d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000005fe8000000000000000000000000000bb00"/1426], 0x590) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = open(0x0, 0x60840, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x40086602, &(0x7f00000000c0)) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f0000000100)="fcb1e7a735484ca92f", 0x9) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000480)=[{0x1, 0x9211, 0x0, 0x0}, {0x9, 0xa200, 0x0, 0x0}, {0x8001, 0x9001, 0x0, 0x0}], 0x3}) 10.79336395s ago: executing program 0 (id=326): socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x200, 0x10000, @private1, 0x1}, 0x1c) socket$rxrpc(0x21, 0x2, 0xa) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x3, 0x0, 0x0) ioctl$COMEDI_LOCK(0xffffffffffffffff, 0x6405) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$OSF_MSG_REMOVE(r3, 0x0, 0x4050) sendmsg$NFT_MSG_GETOBJ(r3, 0x0, 0x0) ioctl$COMEDI_LOCK(0xffffffffffffffff, 0x6405) socket$tipc(0x1e, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) syz_usb_disconnect(r0) write$char_usb(r1, &(0x7f0000000080)="681ad7807b4e", 0x6) syz_emit_ethernet(0x6a, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000eaaaaaaaa084503005cffff0000002f90780cba2914fbe4a4b264d88e8753499021e9000400e0000001248022eb000000000005000110000800000086dd88a888be0800000010fe00000100000000000000080022eb000000002000000002000000f9000009000000000800655800000000000000ca242535be38847a7d086cf7a5a5b7086e139247d772b10f9df43f2a9f3b514118636a833398ff779756597d94252f97040dcede58882f00f2981d065a75a82272da682ca48cb00d2ac2551b19b45b30695300"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', r9, 0x0, 0x0, 0xc, 0x0, 0x34, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000a5", @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf2503000000050005000000000064000180080003000000000008000300030000000800030000000000140002007465616d5f736c6176655f31000000000800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e30000000000000000000000048000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1400020067726574617030000000000000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x20405}, 0x4000010) 8.73143229s ago: executing program 4 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000002bc0)='./file0\x00', 0x351202, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x8}, {{&(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000015c0)=""/174, 0xae}, {&(0x7f0000001680)=""/92, 0x5c}, {&(0x7f0000001700)=""/108, 0x6c}, {&(0x7f0000001780)=""/219, 0xdb}, {&(0x7f0000001880)=""/221, 0xdd}, {&(0x7f0000001980)=""/86, 0x56}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/105, 0x69}], 0x8, &(0x7f0000002b00)=""/14, 0xe}, 0xe6}], 0x2, 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0x8, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x11e, 0x17, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x0, 0x12, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x5a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r4], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='tlb_flush\x00'}, 0x18) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) 8.492418845s ago: executing program 0 (id=339): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x34, &(0x7f000002eff0)={0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0xa8, 0xaa, 0x41, 0x40, 0x572, 0xcb00, 0x1e21, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x40, 0x4, 0x1, 0xb6, 0xc2, 0xae, 0x5, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x9, 0xf, 0x7f}}]}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/vlan/config\x00') preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3fe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r11 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r10) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000000000010000001800000002000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r11) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdff, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0x5}, {0xfff1, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex=r9, 0x7, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) timer_settime(r12, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 8.099921194s ago: executing program 3 (id=340): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0880, 0x0) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 32) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x3c}}, 0x20048010) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) (async, rerun: 32) r6 = socket(0xa, 0x3, 0x87) (rerun: 32) sendto(r6, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) (async) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000280)=0x14) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r9, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) r10 = syz_open_dev$loop(0x0, 0x80000000, 0x10b200) ioctl$BLKPG(r10, 0x1269, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0}) 8.032798692s ago: executing program 3 (id=341): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x121000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) (async, rerun: 32) r5 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 7.644416172s ago: executing program 1 (id=342): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) 7.351590622s ago: executing program 4 (id=343): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) socket(0x1e, 0x4, 0xb) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000180)="a6204ee95cef0919ee0722b89b88ed13b300ad12f983c02a40b86dc8570593ec04a6ebff13b29d9ee17eea0b3f86e99bb73af842a270f4c4048fd111d4f3858d93178201a10cfca5de87676e40d7adbcb40663497d1b2bd17bbcb403970674df4ba3cdad4dc6022f373c405d12bd9c5ee624a2d46de18f6c8400e17f925fd0faf7501642200b02f0db4af667905aa0ec0efa1109e15c96b7211770b5bc3d2f5dfe1e7c3aae8044dc5f0a2b0b6f9e0090d2e1983e8d3bb2af882b530f66aaca11231fbb2bb1416d13e983be", 0xcb) readv(r0, &(0x7f0000000380)=[{&(0x7f00000035c0)=""/52, 0x34}], 0x4e) (async) readv(r0, &(0x7f0000000380)=[{&(0x7f00000035c0)=""/52, 0x34}], 0x4e) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x511540) 7.319645345s ago: executing program 1 (id=344): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x80108907, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0x40c}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, 0x0, 0x0, 0xc}, 0x94) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)}], 0x1}, 0x0) (async) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r3, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x61) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 7.176089371s ago: executing program 3 (id=345): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) sendmsg(0xffffffffffffffff, 0x0, 0x44004) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = fcntl$dupfd(r3, 0x0, r5) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0x80000041) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0xc0) recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 6.035603086s ago: executing program 3 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) r2 = syz_io_uring_setup(0xb7e, &(0x7f0000000180)={0x0, 0x388b, 0x4000, 0x3, 0x1ea}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x1ff, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x2, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f040000"], 0x0, 0x28}, 0x28) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, 0x0, 0x108) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000c9adc71c2a00040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="000000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000010000000000000", @ANYRES32=r12, @ANYBLOB="0000000000000000cc3c4f536f67ccff00000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="000000008000"/20], 0x50) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x40000080) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000130000000030a03000000000000000000030000010900030073797a30000000000900010073797a30000000000400040714000000110001"], 0xa0}}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d4900010073797a300000000057f1532a86623c95ed2e1346a9134f447eca306761e0c9b656f631421de3f6f6538ee069729f8fd910c4c0b997b7422e9e3c6b273dda8f3ab3ae13eb9ab3e994ac"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 5.820419242s ago: executing program 4 (id=348): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1214000084dc052072054100ddd201020301090212000100fc10094ad3c3f7e31c43b508"], 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x7fff, 0x1, 0x4}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x6, 0x5, 0xfffffffd, 0x1, 0x7, 0x0, 0x3, 0x28, 0x6, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x1, 0x45}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x248}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff0000004000"/67], 0x0, 0x56, 0x0, 0x0, 0x3}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890c, 0x0) pipe2(&(0x7f0000000240), 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=@newtaction={0x94c, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x938, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_police={0x8e4, 0x7, 0x0, 0x0, {{0xb}, {0x8b8, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x5, 0x10, 0x1000, {0x9, 0x0, 0x7ff, 0x8001, 0x5, 0x2}, {0x5, 0x1, 0x0, 0xff, 0x3}, 0x8, 0x6, 0x485}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0xedef}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x1, 0x7fff, 0x3, {0xff, 0x2, 0x7, 0x6, 0x4, 0x40}, {0x5, 0x3, 0xb038, 0x8, 0x100, 0x2213d980}, 0xfff, 0x2, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x41e}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfff, 0x8, 0xffffffff, 0x6, 0x8, 0x6, 0xf, 0x5, 0x6, 0x2a, 0x5, 0x4, 0x8, 0xffff11f3, 0x2, 0x1, 0x5, 0x0, 0x7e, 0x1, 0x81, 0x2, 0x7fff, 0x81, 0x4, 0x4f01, 0x1, 0x3e7c, 0x1964a100, 0x7, 0x6, 0x7, 0x1003, 0x3ff, 0x4, 0x0, 0x9, 0x9, 0x3, 0x8, 0x1, 0x8, 0x40000, 0x4, 0xb701, 0xffffffff, 0x3, 0xffff0000, 0x5, 0xfff, 0x7ab, 0x1, 0xd3, 0x7, 0x10000, 0x1, 0x6, 0x3, 0x3, 0x7f, 0xb6, 0x3, 0x7, 0x8, 0xfffffffb, 0x2, 0x8001, 0xd10, 0x3, 0x7fffffff, 0x9, 0x8, 0x6, 0x1, 0x4, 0x0, 0x9, 0x40, 0x5, 0x4, 0x7, 0x4, 0x9, 0xc1, 0x6, 0x4, 0xf, 0x101, 0x6, 0x4, 0x1, 0x1, 0xfff, 0x8de6, 0x800, 0x5, 0x80000001, 0x0, 0x4, 0x7, 0x7, 0xadb3, 0x3, 0x5, 0x7, 0x100, 0x5, 0x6, 0x8, 0x2182, 0x3, 0x0, 0xb, 0x4, 0x7, 0xfff, 0x2, 0x2, 0x800, 0x1000007, 0x0, 0x6, 0x6, 0x6, 0x80000000, 0x0, 0xc0000000, 0x4, 0x2, 0x3, 0x5, 0xb, 0x6, 0x100, 0x7, 0x2, 0x1, 0x5, 0x4, 0x0, 0x1000, 0x67, 0x8, 0x18a9, 0x1, 0xa, 0x48, 0x4, 0x81, 0xe0a, 0x1, 0x8, 0x2, 0x5, 0x9, 0x1, 0x8, 0x7d749fbd, 0xcc, 0x1, 0x1, 0xb294, 0xf8d2, 0x3, 0x4, 0x7, 0x6, 0x3, 0x1000, 0x6, 0x4, 0x56, 0x4, 0x80000000, 0x736, 0xffff, 0x1, 0x4, 0x0, 0x5, 0x7, 0x2, 0x10, 0x3, 0x9, 0x9, 0xf2, 0x3, 0x1, 0x10, 0x6d85, 0x9d5b, 0x0, 0x2, 0x2, 0x0, 0xbb2, 0x0, 0x1, 0x2, 0x7, 0xaf2c, 0x0, 0x10000, 0x3000, 0x7, 0x3, 0xfffffff9, 0xff, 0x3, 0x7fff, 0x6, 0x2173b7db, 0x80, 0x8, 0x4, 0x10000, 0x80, 0x8, 0x7, 0x9, 0x0, 0x400, 0x1000, 0x8, 0x8, 0xffff, 0x9, 0xfffffff8, 0xfffffffe, 0x1000, 0x5, 0x6, 0x99b, 0x5, 0x17, 0x10000, 0xfff, 0x5, 0x400000, 0x80, 0x8, 0x800, 0x8001, 0x1, 0x5, 0x8000, 0x400, 0x4, 0x200, 0x0, 0x8, 0xffffffff, 0xc0, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x7ff, 0x8, 0x2, 0x89, 0xf, 0x6, 0xb964, 0x0, 0xfffffffc, 0x8, 0x9, 0x0, 0x44, 0x2, 0x1000, 0x0, 0x9, 0x23, 0xfffff465, 0x80000001, 0x3, 0x9, 0x5, 0x0, 0x7, 0x5, 0xfffffffa, 0x7, 0x4, 0x40, 0x3, 0x3, 0x9, 0xae, 0x1, 0x76fa, 0x8a28, 0xfffffff7, 0x23ab82a6, 0xe296, 0x4ce475c2, 0x5, 0x7, 0x0, 0x93dd, 0xf66, 0x8, 0x1, 0x2, 0x8, 0x6, 0xfea2, 0x41a, 0x9, 0x7fffffff, 0x7, 0xe6, 0xa, 0x7ff, 0x7, 0x9, 0xf5, 0x1, 0xc3, 0x9, 0x10, 0xd8bf, 0x9b91, 0x4, 0x9, 0x800, 0x8, 0x5, 0x8001, 0x400, 0x6, 0xfffffff8, 0x7f, 0x4, 0x9, 0x4, 0x4, 0x3ff, 0x7, 0x5, 0x6, 0x7fffffff, 0x2, 0x38e5c4, 0x1000, 0xb, 0x8, 0xf8, 0x8, 0x27b3, 0x5, 0x771, 0x9, 0x3ff, 0x2, 0x2, 0xfffffff0, 0x65, 0x6, 0x2, 0xfffffffb, 0x8, 0x9, 0x5, 0x0, 0x9, 0x7ff, 0x3, 0x7f, 0x1, 0x6, 0x8, 0x1, 0xfffffff9, 0x1, 0x368d, 0xfffffff8, 0x9, 0xe0, 0x7ff, 0x7, 0x8, 0x7fff, 0x4, 0x0, 0x80, 0x2, 0x80, 0x200, 0x6, 0xb1, 0x5a6, 0xce7a, 0x7, 0x3579, 0x0, 0x3, 0x7fffffff, 0xdb0, 0x8001, 0xc00, 0x0, 0x7, 0x894, 0x6, 0xffffffff, 0x5, 0x0, 0x5, 0x8, 0x1000, 0x8, 0xe7, 0x9, 0x10, 0x6, 0x1, 0x7, 0x4, 0x7f, 0x5a88, 0xf, 0x8, 0x80, 0x0, 0x81, 0x81, 0xb1, 0xff, 0x8000, 0x8000, 0x3, 0x9, 0x9, 0xe00, 0x4, 0x3, 0x7, 0x2c8, 0x7ff, 0xba9, 0xbafa, 0x80000000, 0x1, 0x2, 0x7ff, 0x8, 0x0, 0x3, 0x4949, 0x9, 0x4, 0x0, 0x4, 0x3, 0x8, 0x80, 0x0, 0x9a, 0x7, 0x7, 0x5, 0x0, 0x9, 0x0, 0x10000, 0x80000001, 0x6, 0xdd9, 0x1, 0x4, 0x6, 0xac50, 0x200, 0x2, 0x3, 0xb7, 0x8, 0x0, 0x9, 0x0, 0x81, 0x7, 0xe3, 0x41, 0x3, 0x4, 0x2, 0x4, 0x4, 0x2, 0x8, 0x0, 0x28, 0xed19, 0x0, 0x100, 0x10001, 0x4, 0x7, 0x9, 0x4, 0x7, 0xa9aa, 0x9, 0x400, 0x7fff, 0x2, 0x596f]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}]}]}, 0x94c}}, 0x2000a804) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x1ff, 0x7f}, {0xe}]}, 0x14, 0x2) 5.44767089s ago: executing program 2 (id=350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000700000006000100000000009980db6e19671f607034b45920fd2ae7cc5c5b4bdd077b15466c47dc0b355bbafb110bf30f4c67de883074d858221a9fb59300e6111e375b30fd7c725f50f17389cf87f9f63deabfdb543923abd4a8bbad312dad3bb5f44664f80614f1ff2023982680a35942dcdfa1495b82e9528e98d10ea6a6cb563e1f976fbd2c1f29a14e8e146a39f708fdcb28ec6622d835065382ac0b0f4aa7eeb69e3a6b709b9b050afc3000b1da9bbc9ab4683d241cec43d630bd6201bd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) r4 = socket$kcm(0x23, 0x5, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000740)=0x8) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x7f) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@multicast2, @empty, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000802}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c991e517d4c0d23c9ab316cc5daa25dc1000000000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250e00000044000180080003000300000008000300010000001400020076657468305f746f5f6873720000000008000100", @ANYRES32=r6, @ANYBLOB="14000200776c616e31000000000000000000000004000280"], 0x5c}, 0x1, 0x0, 0x0, 0x20008081}, 0x8000) r7 = userfaultfd(0x80001) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000100)={0x9, 0x2, 'client0\x00', 0x80000002, "3f4106ff342c5c5d", "551bc17fc80f292a5efb1725e11b4265e5cea3deea7a7051cdd7d307638ae75f", 0x2, 0xfffffff9}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000640)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x1}) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) accept4(r4, 0x0, 0x0, 0x80000) ioctl$BTRFS_IOC_DEFRAG_RANGE(r8, 0x40309410, &(0x7f0000000600)={0x9, 0x140, 0x1, 0x9, 0x0, [0x3, 0x5, 0x4, 0x2]}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000010", @ANYRES16=r3, @ANYBLOB="050029bd7000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0070000400050004000700"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r3], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4.921772175s ago: executing program 2 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x81}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040), 0x9, 0x240) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000340)=0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x7c80, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.600085177s ago: executing program 1 (id=352): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @private0}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xaf4, 0x0) shutdown(r1, 0x0) r3 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r6, 0x0, 0x0, 0x40000001, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_open_dev$MSR(&(0x7f0000000040), 0x2000000009, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$HIDIOCSFEATURE(r8, 0xc0404806, &(0x7f0000000200)) 4.284179763s ago: executing program 0 (id=353): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002d00)={0xffffffffffffffff, 0x58, &(0x7f0000002c80)}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000002d40)={@multicast1, @private}, &(0x7f0000002d80)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000055c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005600)=0x14) getpeername$packet(r0, &(0x7f0000005280), &(0x7f00000052c0)=0x14) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000200)=""/104, &(0x7f0000000800)=""/90}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000980)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x101842, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 3.936998917s ago: executing program 3 (id=354): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0x8000, 0x0, '\x00', {0x0, @bt={0x4ceb, 0x4dc, 0x0, 0x1, 0x0, 0x4, 0x4, 0xdd, 0x1, 0xb90d, 0x8, 0x80, 0x2, 0xffff, 0x4, 0x26, {0x1, 0x6}, 0x0, 0x6}}}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x84, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$qrtrtun(r2, &(0x7f00000000c0)="da653d476974e19e454c6e9bb309ee3f1bfaf2155c31", 0x16) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x1, "0b27e38d"}, @main=@item_012={0x1, 0x0, 0xa, "b6"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x1, "0b27e38d"}, @main=@item_012={0x1, 0x0, 0xa, "b6"}]}}, 0x0}, 0x0) 3.248094487s ago: executing program 0 (id=355): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) writev(r3, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) syz_open_procfs(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002580)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002280)='net/sockstat\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 3.186028563s ago: executing program 1 (id=356): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000feffff0000000000000000850000005300000085000000d000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000feffff0000000000000000850000005300000085000000d000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) 2.92245783s ago: executing program 2 (id=357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x1f, 0x0, "fbb3af793b4b7e9eb2678305defffff9c8035c1990c91e0323ba9217f8055196d089c5eb423436d27c8101f0fd8faec440ec5a21cb006c9f22cdf16907000000000000000000000000009dad00"}, 0xd8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffd}, 0x1c) listen(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x47) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x10000024, 0x4, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x107e00, 0x0) socket(0x22, 0x2, 0x3) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 2.647586474s ago: executing program 4 (id=358): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x99, 0xb, 0xffff, 0x1, 0x5392, 0xc, 0x9, {0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x81, 0x3, 0xc, 0xe, 0x9}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000600)=ANY=[@ANYRES16=r2, @ANYRES32=r0, @ANYBLOB="0600000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8f1ffffb703000008000000b704", @ANYRES64=r4, @ANYRESHEX=r2, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) fchown(0xffffffffffffffff, 0x0, 0xee01) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000000c0)=""/111) (async, rerun: 64) r6 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) (async) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='svcrdma_wc_read\x00', r5, 0x0, 0x800000}, 0x18) (async, rerun: 32) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x1) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x1) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000016080800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r8, 0x0, 0x0}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) (rerun: 64) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) 2.507535853s ago: executing program 4 (id=359): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x84800) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fowner_lt={'fowner<', 0xee01}}, {@obj_user={'obj_user', 0x3d, '-]'}}]}}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0), 0x2, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000200)={0x8, [0x401, 0x4, 0x81, 0x1, 0x4881, 0x3, 0x3ff, 0x8]}, 0x14) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)=0x10001, 0x4) write$selinux_user(r2, &(0x7f0000000280)={'system_u:object_r:xen_device_t:s0', 0x20, 'sysadm_u\x00'}, 0x2b) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000002c0)=0x10, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x12, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2fcddf0e}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000000400)=""/195, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x2, 0x10001, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r2], 0x0, 0x10, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r3, r4, 0x25, 0x1, @val=@perf_event={0x7ff}}, 0x18) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000740)={'syzkaller0\x00', &(0x7f0000000700)=@ethtool_modinfo={0x42, 0x4, 0xc00}}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000780), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000800)=r5, 0x4) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {0xc, 0x6}, {0xffe0}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4054) r9 = openat2(r7, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x40000, 0x8, 0x15}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000a40)={r7, r9}) setxattr$incfs_id(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), &(0x7f0000000b00)={'0000000000000000000000000000000', 0x32}, 0x20, 0x3) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000b40)=0xa61, &(0x7f0000000b80)=0x2) mkdirat(r7, &(0x7f0000000bc0)='./file0/file0\x00', 0x10) r10 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r10, &(0x7f0000000c00)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0xdb1, 0x6, 0x80000000, 0x44841, r2, 0x7, '\x00', r4, r2, 0x4, 0x5, 0x5, 0x7}, 0x50) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r9) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r11, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x18, {0x8, @bearer=@l2={'eth', 0x3a, 'netdevsim0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c041}, 0x4800) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000000e00)={0x14}) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x1e, 0x11, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8fea}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ldst={0x2, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffe0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f00)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @sk_lookup, r7, 0x8, &(0x7f0000000f40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000f80)={0x2, 0xc, 0x123, 0x80}, 0x10, 0x0, r7, 0x7, &(0x7f0000002100)=[0xffffffffffffffff], &(0x7f0000002140)=[{0x2, 0x4, 0xf, 0x1}, {0x1, 0x3, 0x9, 0xc}, {0x2, 0x1, 0x0, 0x5}, {0x5, 0x4, 0x2, 0xa}, {0x5, 0x3, 0xa, 0xa}, {0x5, 0x5, 0x7, 0x1}, {0x1, 0x5, 0x4, 0x8}], 0x10, 0x80000001}, 0x94) 2.463087803s ago: executing program 4 (id=360): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pipe(&(0x7f00000045c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="ec13b696ecaa99ec6e95c5102a61c4a133b2348a3e1e", 0x16}, {&(0x7f0000001180)="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", 0xffc}, {&(0x7f0000000500)}], 0x3, 0x0) r4 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@dontfrag={{0x10, 0x29, 0x43, 0x800}}], 0x10}, 0x40c0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010025bd7000fadbdf2500000000", @ANYRES32=r7, @ANYBLOB="13800000ebd301001c00128009000100626f6e64000000000c00e68008000b00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008080) r9 = socket$alg(0x26, 0x5, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x180000) splice(r3, 0x0, r10, 0x0, 0x2, 0xe) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r11 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r11, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_read(r11, 0x1, 0x12, &(0x7f0000000080)=""/18) pwritev(r12, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)="01", 0x1}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r13, {0x0, 0xfff8}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 2.244080866s ago: executing program 0 (id=361): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x10, 0x3a, 0x1, 0x0, 0x25dfdbff}, 0x10}], 0x1}, 0x20080800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000cc0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3c, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40010) syz_usb_ep_write(r0, 0x8d, 0x6, &(0x7f00000001c0)="d0be166e5e8b") r8 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000180)={0xffffffffffffffff, 0x3, 0x4}) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000013c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r8) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0}) 2.060025216s ago: executing program 2 (id=362): socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x3e, 0x0, 0xa}, 0x28) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x80085665, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000210000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="850000000000000007000000000800009500000000000000811b0140b1fc5ef0d27d51f59a544e3c6a300a8572726394e0e03a4f7fe3647d637003a2d3c7ef8bdb07ba0bca65aeaa051efd615868c30fd983307cef6f566e8ddcf3ed2d2ef78b5273dbb5a8cea91b62d88814a5437782a1a8fc7a3b050000000000005b1479079e5bc4f9d209537b7798f7659f9a7889735689b9bde61c311f17a527500000000000ab3f87a81d75ecf509c32d7b49956d2813859eff2c817def00dfc3680ed0cb2d9ff59d288072ea560cd0f16d6e0a125c0e88d536c6b617b19f8b024ff69b2befef18398c76f61237949129ba1976"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x14, &(0x7f00000000c0)={0x20, 0x11}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6a182, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000001840)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000080)=0x2080483) syz_emit_ethernet(0x53, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000450000000000889078ac1eff01ac1414aa0b009078005c00004a050007006700080108fffdac1414aaffffffff8307030800003200"/83], 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) open(&(0x7f0000000040)='./file0\x00', 0x129842, 0xfe2b713d19bde504) 1.694541396s ago: executing program 1 (id=363): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(r1, 0xd, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x4) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0xe2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000003e00070127bd700000000000017c00000400fc800c00018008000600fb001b3d44e67c694d41ceb9d5128010fb8c01fdade764a1a8c82bca46da50fe1e80ecebafd71dd0711cf18c1a96fd00577f937f1eb13384dea2ef0a210c9281ff7f4b96a245ac1b834028d335218b3514c1c7395f95f94a778d52b0e84004bf77a8f67a19ffc5ae20c4046bf657eba1fb4130d491b2b7980493e8fb8272376aa1fea271c3baa7c1c26a3a702a4214bbfa7e7e29dba33b72756fd8fc4245fe6a2909b49817a7a7c32f87275eafa0dddf6bc2c398c38cc2cd299e33a794c76798bd4eafa3277221a6e490a1a6f049c35c1a8add6adc33d6aa09a2db5ec47246786149ed99a5c1d6f13f919184db243065a4804a40107aa1c74a5cc1f9c6bc6a03772ba74299739482065ec7cb47724c9c6e322b", @ANYRES32=0x0, @ANYBLOB="09000280725eb862ce000000"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 919.75436ms ago: executing program 2 (id=364): prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a00)=[{{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000300)="96844594d8473aeb3582db2861c5286b17f8da487b6e8f673c9c19c9f16bdb815d2695a667a369b88274781f05da4bd17c5b2661505b4b84efc816c39708ce405dd16af0a34544dc93350169f6a5e8f552bbb1b95f682ae93c5f15d890cfc21068bb030ae51c2a97248c3b4dc74d89d799ddc59484440fbbced1897d6499df73da2162897f3d13fa61066d87840be6bf04723c2628948258c6b457e11c058554705470d65d572745a7d3eb86b1b7f816fb3e59", 0xb3}, {&(0x7f00000003c0)="1a74e37c2e5f27a896533af7d54b4f0c205c474c0716bbcc32195537c7929741d0d7f82c96439d2d52b1c21b1a33a0063a463fd884ce5d51c7d249495f77633707f60b1c475b0a37292419c7d77fb8fa319f43054e4eb1bc2ea80ee6903729d6971ca59dd4cf36716e7db60aa08d363211746f20ab6b5b86f0597854f56e2dca32a770fce68d5996a9824a6831a66fd11a0f47d65f4c5e55731a8be173d52073f86b102293e1b21d703b09531c5b22b08b950d7c08c630eed6d028d05959b1b7a04a100c99931a3752633293ad854ee84171ae5c164f9af5fc1bc6", 0xdb}], 0x2, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r2, 0xffffffffffffffff, r1]}}], 0x78, 0x80}}, {{0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000740)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r1, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x38, 0x408c0}}, {{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000800)="d12005e38ea4eabe505ef7c60a6e503969cfd86d74baeaed001f606124b2802e0dd2b9e13f9e9f1041c57586b979b05a4885146ac73d2dc8815f30256d078a613b4939f452b045ed4e5412773140609f7f14", 0x52}, {&(0x7f0000000880)="e11aafee13c20ef312445feebaee4f9f510fa250f62fe284f94c57721ce0060c5ff3fce5b8901a99fcf8a59c3446f2ee33f399d42e5961f8c1661b59ee29a904d5301c8d35aa65abcd081293ec982c3d9bc337f4748fa27dd525ec6ffd45c4e983019183d05e6fbe323b1dd80bc0d441e9a6f218d2e615026cf8542b54cc22d09ccfa35b37db8bfc421bbbfaac0776bc73d38f65533fb40597b76475", 0x9c}, {&(0x7f0000000940)="b3bfdcb333a70cc5c416d07850f907b512b1008f6e1ff91f872d243c2db18c3bcbc02885aa2922fc1df0546dc7ac2474ac28dea464b0f2b5e6afccf4adc5a4de95cd634a892a09d035f448e3ca656e39db9eee669cb3d07ba26b8c8d8d34a51b86ee16e338e11f", 0x67}, {&(0x7f0000001e80)="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", 0x1000}], 0x4, 0x0, 0x0, 0x20004085}}], 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) close(r3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r3, 0x1f, 0x0, @void}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001e00), &(0x7f0000001e40)=0xc) ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x5, 0xffff1000, 0x1, r3, 0xf}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x40010) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 515.032315ms ago: executing program 1 (id=365): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x2c23c0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320090909"], 0x0) poll(0x0, 0x0, 0x7) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x413, 0x69, 0x2, 0x6, 0x6, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000040)='t') syz_usb_ep_read(r1, 0x2, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x75) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x29e2dc1b1880f8dd, 0x7ffa, 0x0, 0x9, 0x9, 0xfffffe0400000003, 0xfa11, 0xffffffff}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 265.753659ms ago: executing program 3 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x400000000000011, 0x43, 0x0) r3 = socket(0x2, 0x80805, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='rxrpc_peer\x00', r7, 0x0, 0xfffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r6}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={0x0, 0xd0}, &(0x7f0000000b00)=0x8) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBENT(r9, 0x4b46, &(0x7f00000000c0)={0x1, 0xd, 0xfff6}) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 0s ago: executing program 2 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="ad0ce79ce05a58c0485ebbe2e55611898dee271424d55f", 0x17}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000280)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000010) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) syz_usb_connect(0x2, 0x58e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r4 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r4, 0x1) flock(r4, 0x2) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x1, r4, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) socket$l2tp6(0xa, 0x2, 0x73) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): xt=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 77.782089][ T30] audit: type=1400 audit(1765869731.342:227): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 77.986239][ T6150] tmpfs: Bad value for 'mpol' [ 78.043582][ T6125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.090562][ T30] audit: type=1400 audit(1765869732.372:228): avc: denied { create } for pid=6149 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 78.138264][ T6125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.420057][ T6056] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.570665][ T6056] usb 1-1: Using ep0 maxpacket: 8 [ 78.585072][ T6056] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 78.596699][ T6056] usb 1-1: config 179 has no interface number 0 [ 78.614416][ T6056] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 78.651698][ T6056] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 78.669824][ T6056] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.683725][ T6056] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 78.698680][ T6056] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 78.700217][ T6168] syzkaller0: entered promiscuous mode [ 78.712224][ T6056] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 78.712247][ T6056] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.714977][ T6150] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 78.743486][ T6168] syzkaller0: entered allmulticast mode [ 78.893585][ T6172] process 'syz.1.68' launched '/dev/fd/3' with NULL argv: empty string added [ 78.988289][ T6056] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 79.148553][ T6177] Cannot find add_set index 0 as target [ 79.162944][ T10] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 79.209988][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.230869][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.316435][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.325047][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.466821][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.475614][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.486340][ T5952] usb 1-1: USB disconnect, device number 3 [ 79.486415][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 79.500642][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 79.550562][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.720551][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 79.726650][ T10] usb 2-1: too many configurations: 191, using maximum allowed: 8 [ 79.735668][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 79.743351][ T10] usb 2-1: can't read configurations, error -61 [ 79.820528][ T5952] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 79.880847][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.973311][ T5952] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.983536][ T5952] usb 3-1: config 0 has no interfaces? [ 79.989111][ T5952] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 80.007973][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.027058][ T5952] usb 3-1: config 0 descriptor?? [ 80.149458][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 80.155578][ T10] usb 2-1: too many configurations: 191, using maximum allowed: 8 [ 80.166507][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 80.174198][ T10] usb 2-1: can't read configurations, error -61 [ 80.181458][ T10] usb usb2-port1: attempt power cycle [ 80.348056][ T5943] usb 3-1: USB disconnect, device number 4 [ 80.600567][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 80.622728][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 80.628752][ T10] usb 2-1: too many configurations: 191, using maximum allowed: 8 [ 80.638681][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 80.646686][ T10] usb 2-1: can't read configurations, error -61 [ 80.738909][ T6193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60016 sclass=netlink_route_socket pid=6193 comm=syz.2.73 [ 80.754830][ T5952] usb 4-1: USB disconnect, device number 2 [ 80.772414][ T5952] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 80.781287][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 80.798716][ T5952] ch341 4-1:0.0: device disconnected [ 80.830997][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 80.840145][ T10] usb 2-1: too many configurations: 191, using maximum allowed: 8 [ 80.862960][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 80.962532][ T10] usb 2-1: can't read configurations, error -61 [ 80.969168][ T10] usb usb2-port1: unable to enumerate USB device [ 81.011895][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 81.011910][ T30] audit: type=1400 audit(1765869735.392:253): avc: denied { read } for pid=6197 comm="syz.4.77" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.059076][ T30] audit: type=1400 audit(1765869735.392:254): avc: denied { open } for pid=6197 comm="syz.4.77" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.085447][ T30] audit: type=1400 audit(1765869735.442:255): avc: denied { ioctl } for pid=6197 comm="syz.4.77" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.112588][ T30] audit: type=1400 audit(1765869735.442:256): avc: denied { set_context_mgr } for pid=6197 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 81.301025][ T30] audit: type=1400 audit(1765869735.502:257): avc: denied { write } for pid=6197 comm="syz.4.77" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.363935][ T30] audit: type=1400 audit(1765869735.502:258): avc: denied { read } for pid=6199 comm="syz.0.78" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 81.409866][ T30] audit: type=1400 audit(1765869735.502:259): avc: denied { open } for pid=6199 comm="syz.0.78" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 81.455517][ T6210] netlink: 'syz.4.81': attribute type 1 has an invalid length. [ 81.468526][ T30] audit: type=1400 audit(1765869735.502:260): avc: denied { map } for pid=6199 comm="syz.0.78" path="socket:[10441]" dev="sockfs" ino=10441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 81.492939][ T30] audit: type=1400 audit(1765869735.502:261): avc: denied { write } for pid=6197 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.513407][ T30] audit: type=1400 audit(1765869735.502:262): avc: denied { nlmsg_write } for pid=6197 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.613496][ T6216] tmpfs: Bad value for 'mpol' [ 81.732196][ T6210] macvlan2: entered promiscuous mode [ 81.744623][ T6210] macvlan2: entered allmulticast mode [ 82.000897][ T5943] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 82.088035][ T6224] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.161930][ T5943] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.180257][ T5943] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 82.197162][ T5943] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 82.212149][ T5943] usb 4-1: Manufacturer: syz [ 82.223244][ T5943] usb 4-1: config 0 descriptor?? [ 82.453153][ T791] usb 4-1: USB disconnect, device number 3 [ 82.856636][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.88'. [ 83.118059][ T6230] capability: warning: `syz.1.89' uses deprecated v2 capabilities in a way that may be insecure [ 83.200688][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 83.354722][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.354751][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.354779][ T24] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 83.354798][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.356842][ T24] usb 3-1: config 0 descriptor?? [ 83.531286][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 83.799461][ T6254] input: syz1 as /devices/virtual/input/input8 [ 84.305302][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 84.312678][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 84.355588][ T24] usb 3-1: USB disconnect, device number 5 [ 84.361772][ T791] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 84.444536][ T6259] delete_channel: no stack [ 84.552021][ T791] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.564752][ T791] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.574721][ T791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 84.586581][ T791] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 84.598737][ T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.619741][ T6250] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 84.642414][ T791] hub 4-1:1.0: bad descriptor, ignoring hub [ 84.658185][ T791] hub 4-1:1.0: probe with driver hub failed with error -5 [ 84.666566][ T791] cdc_wdm 4-1:1.0: skipping garbage [ 84.672549][ T791] cdc_wdm 4-1:1.0: skipping garbage [ 84.683423][ T791] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 84.696403][ T791] cdc_wdm 4-1:1.0: Unknown control protocol [ 85.506121][ T791] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.690632][ T791] usb 5-1: Using ep0 maxpacket: 32 [ 85.765901][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.875567][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.927672][ T791] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 85.937506][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.025392][ T791] usb 5-1: config 0 descriptor?? [ 86.152001][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.351759][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.362782][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.379279][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.597027][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 86.597057][ T30] audit: type=1400 audit(1765869740.972:313): avc: denied { ioctl } for pid=6264 comm="syz.4.100" path="socket:[10647]" dev="sockfs" ino=10647 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 86.880536][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.909431][ T24] usb 2-1: New USB device strings: Mfr=118, Product=2, SerialNumber=3 [ 86.924314][ T24] usb 2-1: Product: syz [ 86.928525][ T24] usb 2-1: Manufacturer: syz [ 86.934866][ T6289] Malformed UNC in devname [ 86.934866][ T6289] [ 86.941803][ T5820] usb 4-1: USB disconnect, device number 4 [ 86.955761][ T6289] CIFS: VFS: Malformed UNC in devname [ 86.964427][ T24] usb 2-1: SerialNumber: syz [ 86.986087][ T24] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 86.996112][ T30] audit: type=1400 audit(1765869741.382:314): avc: denied { append } for pid=6287 comm="syz.0.105" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.024053][ T24] cdc_ncm 2-1:1.0: bind() failure [ 87.179839][ T5952] usb 2-1: USB disconnect, device number 6 [ 87.288801][ T30] audit: type=1400 audit(1765869741.672:315): avc: denied { create } for pid=6301 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 87.333270][ T30] audit: type=1400 audit(1765869741.712:316): avc: denied { connect } for pid=6301 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 87.412346][ T30] audit: type=1400 audit(1765869741.772:317): avc: denied { write } for pid=6301 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 87.812899][ T30] audit: type=1400 audit(1765869742.202:318): avc: denied { create } for pid=6304 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 87.852523][ T30] audit: type=1400 audit(1765869742.202:319): avc: denied { ioctl } for pid=6304 comm="syz.1.110" path="socket:[10680]" dev="sockfs" ino=10680 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.047259][ T791] usbhid 5-1:0.0: can't add hid device: -71 [ 88.053587][ T791] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 88.064847][ T791] usb 5-1: USB disconnect, device number 3 [ 88.840871][ T30] audit: type=1400 audit(1765869743.072:320): avc: denied { create } for pid=6309 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.241789][ T6321] netlink: 'syz.3.113': attribute type 1 has an invalid length. [ 89.257715][ T30] audit: type=1400 audit(1765869743.642:321): avc: denied { bind } for pid=6318 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.303600][ T30] audit: type=1400 audit(1765869743.662:322): avc: denied { write } for pid=6318 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.550508][ T5820] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.700777][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 89.750520][ T791] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 89.861331][ T6330] 9p: Bad value for 'wfdno' [ 89.896816][ T5820] usb 3-1: config 1 has an invalid interface number: 220 but max is 1 [ 89.905841][ T5820] usb 3-1: config 1 has an invalid interface number: 197 but max is 1 [ 89.917754][ T5820] usb 3-1: config 1 has no interface number 0 [ 89.936667][ T5820] usb 3-1: config 1 has no interface number 1 [ 89.950759][ T5820] usb 3-1: config 1 interface 197 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 89.983728][ T5820] usb 3-1: config 1 interface 197 altsetting 9 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 89.995036][ T5820] usb 3-1: config 1 interface 197 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 90.010518][ T5820] usb 3-1: config 1 interface 197 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 90.071198][ T791] usb 4-1: Invalid ep0 maxpacket: 16 [ 90.298368][ T5820] usb 3-1: config 1 interface 220 has no altsetting 0 [ 90.308528][ T5820] usb 3-1: config 1 interface 197 has no altsetting 0 [ 90.380500][ T791] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 90.685300][ T791] usb 4-1: Invalid ep0 maxpacket: 16 [ 90.697330][ T791] usb usb4-port1: attempt power cycle [ 91.060556][ T791] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 91.126908][ T791] usb 4-1: Invalid ep0 maxpacket: 16 [ 91.260925][ T791] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 91.305274][ T791] usb 4-1: Invalid ep0 maxpacket: 16 [ 91.411853][ T6344] usb usb8: usbfs: process 6344 (syz.1.120) did not claim interface 0 before use [ 91.450739][ T791] usb usb4-port1: unable to enumerate USB device [ 91.905522][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 91.905536][ T30] audit: type=1400 audit(1765869746.172:328): avc: denied { read } for pid=6345 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 91.997405][ T30] audit: type=1400 audit(1765869746.382:329): avc: denied { getattr } for pid=6345 comm="syz.0.121" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.355922][ T5820] usb 3-1: New USB device found, idVendor=083a, idProduct=7522, bcdDevice=5b.58 [ 92.365798][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.375614][ T5820] usb 3-1: Product: 壯㇝ꗱ域궀拵⢃刣퓠ᄮ㵵嶁喍㥤灭ᓛౡ鷷횦̋뫡▼᫊㡝蕫段몵睺垉ࡱ蒧秴ᙗ홫ힹ똮แⱐ⼭ᴗਗܱ푔⦡武磻ㅰꁹ至坭ㅇ쥟碶话껭캕 [ 92.635774][ T6354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.122'. [ 92.990927][ T30] audit: type=1400 audit(1765869747.022:330): avc: denied { read } for pid=6351 comm="syz.2.122" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 93.030322][ T5820] usb 3-1: can't set config #1, error -71 [ 93.046652][ T5820] usb 3-1: USB disconnect, device number 6 [ 93.063501][ T30] audit: type=1400 audit(1765869747.022:331): avc: denied { open } for pid=6351 comm="syz.2.122" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 93.090296][ T30] audit: type=1400 audit(1765869747.032:332): avc: denied { ioctl } for pid=6351 comm="syz.2.122" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 93.422353][ T6362] netlink: 'syz.2.125': attribute type 1 has an invalid length. [ 93.604809][ T6366] 9pnet: Found fid 0 not clunked [ 93.820777][ T30] audit: type=1326 audit(1765869748.172:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a978f749 code=0x7ffc0000 [ 93.982487][ T30] audit: type=1326 audit(1765869748.172:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff3a978f749 code=0x7ffc0000 [ 94.171864][ T5820] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 94.216824][ T30] audit: type=1326 audit(1765869748.172:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a978f749 code=0x7ffc0000 [ 94.632089][ T30] audit: type=1326 audit(1765869748.172:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff3a978f749 code=0x7ffc0000 [ 94.655890][ T30] audit: type=1326 audit(1765869748.172:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6360 comm="syz.4.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a978f749 code=0x7ffc0000 [ 94.751702][ T5820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.774230][ T5820] usb 4-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 94.791737][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.815496][ T5820] usb 4-1: config 0 descriptor?? [ 94.825546][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 94.875884][ T5820] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 94.894457][ T6380] bridge0: port 3(syz_tun) entered blocking state [ 94.905606][ T6380] bridge0: port 3(syz_tun) entered disabled state [ 94.912496][ T6380] syz_tun: entered allmulticast mode [ 94.920578][ T6380] syz_tun: entered promiscuous mode [ 94.926493][ T6380] bridge0: port 3(syz_tun) entered blocking state [ 94.933284][ T6380] bridge0: port 3(syz_tun) entered forwarding state [ 95.063762][ T5820] pwc: send_video_command error -71 [ 95.072593][ T5820] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 95.080321][ T5820] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 95.095534][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 95.107151][ T5820] usb 4-1: USB disconnect, device number 9 [ 95.396533][ T5952] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 95.562017][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 95.574754][ T5952] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.584148][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.593714][ T5952] usb 3-1: Product: syz [ 95.600221][ T5952] usb 3-1: Manufacturer: syz [ 95.604832][ T5952] usb 3-1: SerialNumber: syz [ 95.611732][ T5952] usb 3-1: config 0 descriptor?? [ 95.630488][ T5820] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.780594][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 95.787199][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 95.798883][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 95.812506][ T5820] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.822315][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.873286][ T5820] usb 1-1: Product: syz [ 95.877502][ T5820] usb 1-1: Manufacturer: syz [ 95.889549][ T6391] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20001 [ 95.968803][ T5820] usb 1-1: SerialNumber: syz [ 95.989927][ T5820] usb 1-1: config 0 descriptor?? [ 96.023985][ T5820] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 96.041737][ T5820] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 96.607615][ T5820] em28xx 1-1:0.0: chip ID is em2874 [ 96.865857][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.874464][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.905398][ T790] usb 1-1: USB disconnect, device number 4 [ 96.923677][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 96.923691][ T30] audit: type=1400 audit(1765869751.312:364): avc: denied { write } for pid=6398 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.957302][ T790] em28xx 1-1:0.0: Disconnecting em28xx [ 96.971048][ T790] em28xx 1-1:0.0: Freeing device [ 97.367033][ T5952] em28xx 3-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 97.393609][ T5952] em28xx 3-1:0.0: Device initialization failed. [ 97.402177][ T5952] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 97.422938][ T5952] usb 3-1: USB disconnect, device number 7 [ 97.850877][ T6056] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 98.310736][ T6056] usb 4-1: Using ep0 maxpacket: 8 [ 98.317672][ T6056] usb 4-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 98.393299][ T6056] usb 4-1: config 1 interface 0 has no altsetting 0 [ 98.416671][ T6056] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 98.426065][ T30] audit: type=1400 audit(1765869752.812:365): avc: denied { bind } for pid=6425 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.470283][ T6426] netlink: 64 bytes leftover after parsing attributes in process `syz.2.142'. [ 98.479504][ T6426] tipc: Invalid UDP bearer configuration [ 98.479548][ T6426] tipc: Enabling of bearer rejected, failed to enable media [ 98.518464][ T6056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.531810][ T30] audit: type=1400 audit(1765869752.812:366): avc: denied { listen } for pid=6425 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.551961][ T6056] usb 4-1: Product: syz [ 98.556104][ T6056] usb 4-1: Manufacturer: syz [ 98.560727][ T6056] usb 4-1: SerialNumber: syz [ 98.578746][ T6409] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.592863][ T30] audit: type=1400 audit(1765869752.812:367): avc: denied { write } for pid=6425 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.622261][ T30] audit: type=1400 audit(1765869752.812:368): avc: denied { accept } for pid=6425 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.645835][ T30] audit: type=1400 audit(1765869752.842:369): avc: denied { sqpoll } for pid=6425 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.821916][ T6432] netlink: 260 bytes leftover after parsing attributes in process `syz.4.144'. [ 98.870532][ T5952] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.066375][ T30] audit: type=1400 audit(1765869753.452:370): avc: denied { setopt } for pid=6406 comm="syz.3.136" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.125582][ T30] audit: type=1400 audit(1765869753.512:371): avc: denied { mount } for pid=6406 comm="syz.3.136" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 99.157908][ T6056] usb 4-1: USB disconnect, device number 10 [ 99.259506][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 99.270051][ T5952] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 99.283834][ T5952] usb 1-1: config 1 has no interface number 1 [ 99.295196][ T5952] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 99.323080][ T5952] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 99.357300][ T5952] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.372386][ T5952] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.382238][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.390226][ T5952] usb 1-1: Product: syz [ 99.395199][ T5952] usb 1-1: Manufacturer: syz [ 99.399790][ T5952] usb 1-1: SerialNumber: syz [ 99.570869][ T30] audit: type=1326 audit(1765869753.962:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febebb8f749 code=0x7ffc0000 [ 99.600510][ T5943] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.675858][ T30] audit: type=1326 audit(1765869753.962:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6442 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febebb8f749 code=0x7ffc0000 [ 99.770569][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 99.780391][ T5943] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 99.800772][ T5943] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 99.811697][ T5943] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 99.826062][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.836470][ T5952] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 99.866618][ T5943] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.890100][ T5943] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.917676][ T6456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65522 sclass=netlink_route_socket pid=6456 comm=syz.3.151 [ 100.039798][ T5820] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 100.078963][ T5943] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 100.095127][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.508260][ T5943] usb 5-1: config 0 descriptor?? [ 100.560788][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.572207][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.582819][ T5820] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 100.593963][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.606081][ T5820] usb 3-1: config 0 descriptor?? [ 100.670025][ T5952] usb 1-1: failed to read current rate; disabling the check [ 100.812069][ T5943] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 100.871061][ T6429] tmpfs: Bad value for 'mpol' [ 101.002639][ T5952] usb 1-1: USB disconnect, device number 5 [ 101.047062][ T5943] usb 5-1: USB disconnect, device number 4 [ 101.112533][ T5943] usblp0: removed [ 102.031173][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.048535][ T5820] usbhid 3-1:0.0: can't add hid device: -71 [ 102.079972][ T5820] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 102.128247][ T5820] usb 3-1: USB disconnect, device number 8 [ 102.520626][ T5943] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.533666][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 102.533679][ T30] audit: type=1400 audit(1765869756.922:404): avc: denied { create } for pid=6479 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.578709][ T6482] warning: `syz.0.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.606580][ T30] audit: type=1400 audit(1765869756.982:405): avc: denied { setopt } for pid=6479 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.709410][ T6484] netlink: 180 bytes leftover after parsing attributes in process `syz.2.157'. [ 102.718632][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 102.725346][ T5943] usb 5-1: config 230 has an invalid interface number: 71 but max is 0 [ 102.734104][ T5943] usb 5-1: config 230 has no interface number 0 [ 102.740805][ T5943] usb 5-1: config 230 interface 71 has no altsetting 0 [ 102.753100][ T5943] usb 5-1: New USB device found, idVendor=185b, idProduct=d001, bcdDevice=dc.ab [ 102.762771][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.770957][ T5943] usb 5-1: Product: syz [ 102.775447][ T5943] usb 5-1: Manufacturer: syz [ 102.780096][ T5943] usb 5-1: SerialNumber: syz [ 102.791029][ T5943] dvb-usb: found a 'Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb)' in warm state. [ 102.803739][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 102.864247][ T6486] mmap: syz.2.157 (6486) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.030887][ T30] audit: type=1400 audit(1765869757.262:406): avc: denied { write } for pid=6483 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.316441][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.342935][ T5943] dvbdev: DVB: registering new adapter (Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb)) [ 103.385813][ T5943] usb 5-1: media controller created [ 103.423977][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.444385][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 103.450809][ T5943] dvb-usb: no frontend was attached by 'Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb)' [ 103.466067][ T5943] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 103.479965][ T5943] dvb-usb: schedule remote query interval to 150 msecs. [ 103.487624][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 103.510988][ T5943] dvb-usb: Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb) successfully initialized and connected. [ 103.584455][ T5943] usb 5-1: USB disconnect, device number 5 [ 103.673758][ T5943] dvb-usb: Compro Videomate DVB-U2000 - DVB-T USB1 successfully deinitialized and disconnected. [ 104.498816][ T6512] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 104.505474][ T6512] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 104.538112][ T6512] vhci_hcd vhci_hcd.0: Device attached [ 104.546216][ T6513] vhci_hcd: connection closed [ 104.547654][ T3498] vhci_hcd vhci_hcd.3: stop threads [ 104.570323][ T3498] vhci_hcd vhci_hcd.3: release socket [ 104.586931][ T3498] vhci_hcd vhci_hcd.3: disconnect device [ 104.776918][ T30] audit: type=1400 audit(1765869759.122:407): avc: denied { write } for pid=6515 comm="syz.0.165" name="ipv6_route" dev="proc" ino=4026533348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 104.955500][ T6518] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 105.120195][ T30] audit: type=1326 audit(1765869759.472:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a978f749 code=0x7ffc0000 [ 105.240719][ T30] audit: type=1326 audit(1765869759.472:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a978f749 code=0x7ffc0000 [ 105.293535][ T30] audit: type=1326 audit(1765869759.472:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff3a978f749 code=0x7ffc0000 [ 105.411154][ T30] audit: type=1326 audit(1765869759.472:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff3a978f749 code=0x7ffc0000 [ 105.458935][ T30] audit: type=1326 audit(1765869759.472:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a978f749 code=0x7ffc0000 [ 105.545997][ T30] audit: type=1326 audit(1765869759.472:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.4.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a978f749 code=0x7ffc0000 [ 105.950516][ T5892] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.030782][ T5820] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.100676][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 106.110692][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.140501][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.160391][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 106.195469][ T5892] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 106.210650][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 106.223648][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 106.336212][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.361730][ T5892] usb 2-1: config 0 descriptor?? [ 106.411132][ T5820] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.420385][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.433044][ T5820] usb 1-1: Product: syz [ 106.437220][ T5820] usb 1-1: Manufacturer: syz [ 106.480978][ T5820] usb 1-1: SerialNumber: syz [ 106.491709][ T5820] usb 1-1: config 0 descriptor?? [ 106.518193][ T5820] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 106.670081][ T5820] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 106.812353][ T6533] autofs: Bad value for 'fd' [ 106.824713][ T6533] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 106.831758][ T6533] overlayfs: failed to set xattr on upper [ 106.838208][ T6533] overlayfs: ...falling back to redirect_dir=nofollow. [ 106.845084][ T6533] overlayfs: ...falling back to index=off. [ 106.850890][ T6533] overlayfs: ...falling back to uuid=null. [ 106.856687][ T6533] overlayfs: maximum fs stacking depth exceeded [ 106.877619][ T5892] shield 0003:0955:7214.0001: unexpected long global item [ 106.915994][ T5892] shield 0003:0955:7214.0001: Parse failed [ 106.943113][ T5892] shield 0003:0955:7214.0001: probe with driver shield failed with error -22 [ 106.999444][ T6568] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.178'. [ 107.117658][ T5820] em28xx 1-1:0.0: chip ID is em2765 [ 107.165712][ T5919] usb 2-1: USB disconnect, device number 7 [ 107.632201][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 107.632216][ T30] audit: type=1400 audit(1765869762.012:493): avc: denied { execute } for pid=6571 comm="syz.3.179" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 107.772605][ T5820] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 107.780791][ T5820] em28xx 1-1:0.0: board has no eeprom [ 107.880292][ T6580] lo speed is unknown, defaulting to 1000 [ 107.886668][ T6580] lo speed is unknown, defaulting to 1000 [ 107.901784][ T6580] lo speed is unknown, defaulting to 1000 [ 107.932717][ T6580] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.990624][ T6580] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 108.165015][ T6580] lo speed is unknown, defaulting to 1000 [ 108.174521][ T6580] lo speed is unknown, defaulting to 1000 [ 108.182410][ T6580] lo speed is unknown, defaulting to 1000 [ 108.196539][ T6580] lo speed is unknown, defaulting to 1000 [ 108.203536][ T6580] lo speed is unknown, defaulting to 1000 [ 108.224885][ T30] audit: type=1400 audit(1765869762.602:494): avc: denied { connect } for pid=6571 comm="syz.3.179" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.311506][ T5820] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 108.319413][ T30] audit: type=1400 audit(1765869762.602:495): avc: denied { write } for pid=6571 comm="syz.3.179" path="socket:[11326]" dev="sockfs" ino=11326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.392594][ T5820] em28xx 1-1:0.0: dvb set to bulk mode. [ 108.432142][ T6056] em28xx 1-1:0.0: Binding DVB extension [ 108.530507][ T5943] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 108.690518][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 108.702081][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 108.726435][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.759962][ T5943] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.789579][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.804522][ T5943] usb 2-1: Product: syz [ 108.808687][ T5943] usb 2-1: Manufacturer: syz [ 108.820537][ T5943] usb 2-1: SerialNumber: syz [ 108.866144][ T5864] usb 1-1: USB disconnect, device number 6 [ 108.943346][ T5943] usb 2-1: config 0 descriptor?? [ 108.952456][ T5864] em28xx 1-1:0.0: Disconnecting em28xx [ 108.970189][ T5943] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.978418][ T6056] em28xx 1-1:0.0: Registering input extension [ 109.408325][ T5943] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 109.427354][ T5864] em28xx 1-1:0.0: Closing input extension [ 109.452531][ T5864] em28xx 1-1:0.0: Freeing device [ 109.700597][ T6056] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 109.877435][ T5943] em28xx 2-1:0.0: chip ID is em2874 [ 110.040292][ T6056] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 110.040313][ T6056] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.041545][ T6056] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 110.041566][ T6056] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 110.041581][ T6056] usb 3-1: Manufacturer: syz [ 110.048425][ T6056] usb 3-1: config 0 descriptor?? [ 110.166455][ T5943] usb 2-1: USB disconnect, device number 8 [ 110.167143][ T5943] em28xx 2-1:0.0: Disconnecting em28xx [ 110.167816][ T5943] em28xx 2-1:0.0: Freeing device [ 110.171809][ T6056] igorplugusb 3-1:0.0: incorrect number of endpoints [ 110.189878][ T30] audit: type=1400 audit(1765869764.572:496): avc: denied { create } for pid=6609 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.201073][ T30] audit: type=1400 audit(1765869764.582:497): avc: denied { write } for pid=6609 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 110.598187][ T30] audit: type=1400 audit(1765869764.982:498): avc: denied { setopt } for pid=6620 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.651425][ T30] audit: type=1400 audit(1765869765.032:499): avc: denied { create } for pid=6597 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 110.651575][ T30] audit: type=1400 audit(1765869765.032:500): avc: denied { connect } for pid=6597 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 111.382872][ T6632] capability: warning: `syz.0.194' uses 32-bit capabilities (legacy support in use) [ 112.007526][ T6645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.198'. [ 112.127165][ T6626] macvtap0: entered promiscuous mode [ 112.143226][ T6626] macvtap0: left promiscuous mode [ 112.508685][ T5943] usb 3-1: USB disconnect, device number 9 [ 112.601472][ T6656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.608837][ T6656] IPv6: NLM_F_CREATE should be set when creating new route [ 112.656259][ T30] audit: type=1400 audit(1765869767.042:501): avc: denied { write } for pid=6651 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.752358][ T6662] netlink: 112 bytes leftover after parsing attributes in process `syz.3.200'. [ 114.359875][ T6684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6684 comm=syz.4.205 [ 114.372638][ T6684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=6684 comm=syz.4.205 [ 114.385270][ T6684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6684 comm=syz.4.205 [ 114.397909][ T6684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=6684 comm=syz.4.205 [ 114.457157][ T30] audit: type=1400 audit(1765869768.802:502): avc: denied { connect } for pid=6674 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.506528][ T30] audit: type=1400 audit(1765869768.802:503): avc: denied { connect } for pid=6674 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.540501][ T5878] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 114.560636][ T30] audit: type=1400 audit(1765869768.802:504): avc: denied { write } for pid=6674 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.646541][ T6688] bond0: entered promiscuous mode [ 114.663066][ T6688] bond_slave_0: entered promiscuous mode [ 114.685006][ T6688] bond_slave_1: entered promiscuous mode [ 114.700489][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 114.820104][ T5878] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.831827][ T5878] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 114.841470][ T6688] dummy0: entered promiscuous mode [ 114.858451][ T6688] hsr1: entered promiscuous mode [ 114.864373][ T5878] usb 3-1: config 4 has no interface number 0 [ 114.866199][ T6692] raw_sendmsg: syz.3.209 forgot to set AF_INET. Fix it! [ 114.870910][ T6688] hsr1: entered allmulticast mode [ 114.883431][ T5878] usb 3-1: config 4 interface 30 has no altsetting 0 [ 114.890531][ T6688] bond0: entered allmulticast mode [ 114.895878][ T6688] bond_slave_0: entered allmulticast mode [ 114.902022][ T6688] bond_slave_1: entered allmulticast mode [ 114.916108][ T6688] dummy0: entered allmulticast mode [ 114.922194][ T5878] usb 3-1: string descriptor 0 read error: -22 [ 114.929597][ T5878] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 114.979222][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.030234][ T5878] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 115.096900][ T5878] dw2102: su3000_power_ctrl: 1, initialized 0 [ 115.111233][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 115.132525][ T30] audit: type=1400 audit(1765869769.512:505): avc: denied { name_connect } for pid=6694 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 115.219243][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.243950][ T5878] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 115.255746][ T6683] netlink: 96 bytes leftover after parsing attributes in process `syz.2.207'. [ 115.285176][ T5878] usb 3-1: media controller created [ 115.301512][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 115.462086][ T30] audit: type=1400 audit(1765869769.852:506): avc: denied { setopt } for pid=6682 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.910563][ T5878] dw2102: i2c transfer failed. [ 115.921126][ T6705] dvb-usb: bulk message failed: -22 (4/0) [ 115.931304][ T6705] dw2102: i2c transfer failed. [ 115.946645][ T6705] dvb-usb: bulk message failed: -22 (3/0) [ 116.000535][ T6705] dw2102: i2c transfer failed. [ 116.015853][ T6705] dvb-usb: bulk message failed: -22 (4/0) [ 116.026063][ T6705] dw2102: i2c transfer failed. [ 116.031744][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 116.065844][ T5878] dw2102: i2c transfer failed. [ 116.087227][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 116.094801][ T6709] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 116.102471][ T5878] dw2102: i2c transfer failed. [ 116.121031][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 116.129745][ T5878] dw2102: i2c transfer failed. [ 116.134885][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 116.142634][ T5878] dw2102: i2c transfer failed. [ 116.147487][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 116.155218][ T5878] dw2102: i2c transfer failed. [ 116.160037][ T5878] dvb-usb: MAC address: 02:02:02:02:02:02 [ 116.193771][ T6709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.203353][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.225708][ T6712] vlan2: entered allmulticast mode [ 116.231923][ T6712] veth0_to_bond: entered allmulticast mode [ 116.251544][ T6712] bond1: (slave vlan2): making interface the new active one [ 116.300070][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 116.322797][ T6712] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 116.333729][ T5878] dw2102: command 0x0e transfer failed. [ 116.339359][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 116.409705][ T5878] dw2102: command 0x0e transfer failed. [ 116.498381][ T6715] xt_limit: Overflow, try lower: 167772/2147483648 [ 116.782819][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 116.806426][ T5878] dw2102: command 0x0e transfer failed. [ 116.838208][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 116.869420][ T5878] dw2102: command 0x0e transfer failed. [ 116.894622][ T5878] dvb-usb: bulk message failed: -22 (1/0) [ 116.914311][ T5878] dw2102: command 0x51 transfer failed. [ 116.940553][ T5943] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.952657][ T5878] dvb-usb: bulk message failed: -22 (5/0) [ 116.958757][ T5878] dw2102: i2c probe for address 0x68 failed. [ 116.969609][ T5878] dvb-usb: bulk message failed: -22 (5/0) [ 116.979869][ T5878] dw2102: i2c probe for address 0x69 failed. [ 116.988636][ T5878] dvb-usb: bulk message failed: -22 (5/0) [ 117.119071][ T5878] dw2102: i2c probe for address 0x6a failed. [ 117.129893][ T5878] dw2102: probing for demodulator failed. Is the external power switched on? [ 117.129940][ T5943] usb 2-1: device descriptor read/64, error -71 [ 117.138804][ T5878] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 117.360539][ T5892] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 117.380874][ T5878] rc_core: IR keymap rc-tt-1500 not found [ 117.394493][ T5878] Registered IR keymap rc-empty [ 117.421134][ T5878] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 117.440546][ T5943] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 117.476356][ T30] audit: type=1400 audit(1765869771.862:507): avc: denied { read write } for pid=6728 comm="syz.0.219" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 117.502386][ T5878] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input12 [ 117.531565][ T30] audit: type=1400 audit(1765869771.862:508): avc: denied { open } for pid=6728 comm="syz.0.219" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 117.560067][ T5892] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 117.560571][ T5878] dvb-usb: schedule remote query interval to 250 msecs. [ 117.600561][ T5943] usb 2-1: device descriptor read/64, error -71 [ 117.610622][ T5878] dw2102: su3000_power_ctrl: 0, initialized 1 [ 117.616709][ T5878] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 117.633492][ T5878] usb 3-1: USB disconnect, device number 10 [ 117.641276][ T5892] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 117.692487][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.694793][ T30] audit: type=1400 audit(1765869772.082:509): avc: denied { append } for pid=6730 comm="syz.2.220" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.750238][ T5892] usb 4-1: Product: syz [ 117.764628][ T5878] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 117.769766][ T5892] usb 4-1: Manufacturer: syz [ 117.781042][ T5943] usb usb2-port1: attempt power cycle [ 117.830499][ T5892] usb 4-1: SerialNumber: syz [ 117.854243][ T6734] syz.2.220 uses obsolete (PF_INET,SOCK_PACKET) [ 117.873707][ T5892] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 118.166542][ T5943] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 118.206604][ T5943] usb 2-1: device descriptor read/8, error -71 [ 118.303495][ T5892] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 118.325156][ T5892] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 118.348096][ T30] audit: type=1326 audit(1765869772.732:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0deb98f749 code=0x7ffc0000 [ 118.372518][ T5892] usb 4-1: media controller created [ 118.394310][ T6750] ======================================================= [ 118.394310][ T6750] WARNING: The mand mount option has been deprecated and [ 118.394310][ T6750] and is ignored by this kernel. Remove the mand [ 118.394310][ T6750] option from the mount to silence this warning. [ 118.394310][ T6750] ======================================================= [ 118.435229][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.446208][ T6750] lo speed is unknown, defaulting to 1000 [ 118.470591][ T5943] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 118.478274][ T5878] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.528775][ T5943] usb 2-1: device descriptor read/8, error -71 [ 118.554807][ T30] audit: type=1326 audit(1765869772.732:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0deb98f749 code=0x7ffc0000 [ 118.658760][ T5943] usb usb2-port1: unable to enumerate USB device [ 118.678412][ T5878] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 118.696311][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.701586][ T30] audit: type=1326 audit(1765869772.732:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0deb98f749 code=0x7ffc0000 [ 118.758000][ T5878] usb 1-1: config 0 descriptor?? [ 118.768257][ T30] audit: type=1326 audit(1765869772.932:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0deb98f749 code=0x7ffc0000 [ 118.838054][ T5878] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 118.898712][ T30] audit: type=1326 audit(1765869772.932:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0deb98f749 code=0x7ffc0000 [ 119.054488][ T6757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.223'. [ 119.063453][ T6757] netlink: 72 bytes leftover after parsing attributes in process `syz.2.223'. [ 119.129554][ T6758] netlink: 'syz.2.223': attribute type 17 has an invalid length. [ 119.137443][ T6758] netlink: 5 bytes leftover after parsing attributes in process `syz.2.223'. [ 119.146449][ T6758] macvtap0: entered allmulticast mode [ 119.152201][ T6758] veth0_macvtap: entered allmulticast mode [ 119.162855][ T6758] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 119.569656][ T6762] netlink: 'syz.2.224': attribute type 1 has an invalid length. [ 119.604675][ T6762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.639298][ T6762] vlan2: entered allmulticast mode [ 119.650313][ T6762] veth0_to_bond: entered allmulticast mode [ 119.690110][ T6762] bond1: (slave vlan2): making interface the new active one [ 119.727070][ T6762] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 120.078402][ T791] usb 4-1: USB disconnect, device number 11 [ 120.421051][ T30] audit: type=1400 audit(1765869774.772:515): avc: denied { open } for pid=6784 comm="syz.4.229" path="/dev/ttyqd" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 120.533036][ T6789] input: syz0 as /devices/virtual/input/input13 [ 121.125658][ T30] audit: type=1326 audit(1765869775.122:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a978f749 code=0x7ffc0000 [ 121.422670][ T30] audit: type=1326 audit(1765869775.132:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a978f749 code=0x7ffc0000 [ 121.900509][ T5892] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 121.991955][ T791] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 122.060542][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 122.070002][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.113853][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.145833][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 122.154372][ T791] usb 2-1: string descriptor 0 read error: -22 [ 122.172260][ T791] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 122.194806][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.203885][ T5892] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 122.233904][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.275304][ T5892] usb 4-1: config 0 descriptor?? [ 122.515237][ T5943] usb 2-1: USB disconnect, device number 13 [ 122.711725][ T5892] hid (null): unknown global tag 0x70 [ 122.787405][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0002/input/input14 [ 122.899258][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0002/input/input15 [ 123.020553][ T5943] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 123.045661][ T5892] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 123.210512][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 123.222425][ T5943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.252366][ T5878] usb 1-1: USB disconnect, device number 7 [ 123.269994][ T5943] usb 2-1: config 0 has no interfaces? [ 123.298581][ T5943] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 123.335265][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.371089][ T5943] usb 2-1: Product: syz [ 123.387413][ T5943] usb 2-1: Manufacturer: syz [ 123.402993][ T5943] usb 2-1: SerialNumber: syz [ 123.435009][ T5943] usb 2-1: config 0 descriptor?? [ 123.600959][ T6815] x_tables: duplicate underflow at hook 1 [ 123.732483][ T6815] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.193673][ C1] kye 0003:0458:5011.0002: usb_submit_urb(ctrl) failed: -1 [ 124.282872][ T5892] usb 2-1: USB disconnect, device number 14 [ 124.429951][ T30] audit: type=1400 audit(1765869778.812:518): avc: denied { setopt } for pid=6803 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.472611][ T6824] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 124.531612][ T30] audit: type=1400 audit(1765869778.902:519): avc: denied { unlink } for pid=6823 comm="syz.4.238" name="#3" dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.610345][ T30] audit: type=1400 audit(1765869778.912:520): avc: denied { mount } for pid=6823 comm="syz.4.238" name="/" dev="overlay" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 124.650578][ T790] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.679469][ T30] audit: type=1400 audit(1765869778.942:521): avc: denied { watch_reads } for pid=6823 comm="syz.4.238" path="/52/bus" dev="overlay" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 124.709459][ T30] audit: type=1400 audit(1765869778.962:522): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 124.831760][ T790] usb 1-1: Using ep0 maxpacket: 32 [ 124.843093][ T790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.892206][ T790] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.908473][ T790] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.942898][ T790] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 124.993808][ T790] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.000411][ T790] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 125.011702][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.136445][ T790] usb 1-1: config 0 descriptor?? [ 125.176169][ T30] audit: type=1400 audit(1765869779.562:523): avc: denied { getopt } for pid=6833 comm="syz.2.242" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.350971][ T10] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 125.362590][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.376961][ T10] usb 4-1: device reset changed ep0 maxpacket size! [ 125.391339][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.399609][ T5878] usb 4-1: USB disconnect, device number 12 [ 125.588140][ T30] audit: type=1400 audit(1765869779.972:524): avc: denied { mounton } for pid=6836 comm="syz.1.243" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 125.676847][ T790] usbhid 1-1:0.0: can't add hid device: -71 [ 125.692972][ T790] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 125.708164][ T790] usb 1-1: USB disconnect, device number 8 [ 125.830519][ T5878] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 125.991377][ T30] audit: type=1400 audit(1765869780.382:525): avc: denied { ioctl } for pid=6842 comm="syz.2.245" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 126.019394][ T30] audit: type=1400 audit(1765869780.402:526): avc: denied { append } for pid=6842 comm="syz.2.245" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 126.070494][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 126.085338][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 126.110184][ T5878] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 126.130659][ T5878] usb 4-1: config 4 has no interface number 0 [ 126.136778][ T5878] usb 4-1: config 4 interface 30 has no altsetting 0 [ 126.156641][ T6851] netlink: 84 bytes leftover after parsing attributes in process `syz.4.246'. [ 126.159155][ T5878] usb 4-1: string descriptor 0 read error: -22 [ 126.175348][ T5878] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 126.201371][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.267850][ T5878] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 126.285129][ T5878] dw2102: su3000_power_ctrl: 1, initialized 0 [ 126.306947][ T30] audit: type=1400 audit(1765869780.652:527): avc: denied { listen } for pid=6840 comm="syz.1.244" lport=54112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.325686][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 126.351615][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.371197][ T5878] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 126.378866][ T5878] usb 4-1: media controller created [ 126.385114][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 126.391805][ T5878] dw2102: i2c transfer failed. [ 126.398377][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 126.409043][ T5878] dw2102: i2c transfer failed. [ 126.414063][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 126.419949][ T5878] dw2102: i2c transfer failed. [ 126.425144][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 126.431218][ T5878] dw2102: i2c transfer failed. [ 126.436747][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 126.442946][ T6858] netlink: 72 bytes leftover after parsing attributes in process `syz.2.247'. [ 126.454498][ T5878] dw2102: i2c transfer failed. [ 126.459618][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 126.470952][ T5878] dw2102: i2c transfer failed. [ 126.475796][ T5878] dvb-usb: MAC address: 02:02:02:02:02:02 [ 126.521206][ T6831] netlink: 96 bytes leftover after parsing attributes in process `syz.3.241'. [ 126.580948][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.630393][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 126.659740][ T5878] dw2102: command 0x0e transfer failed. [ 126.671316][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 126.689552][ T5878] dw2102: command 0x0e transfer failed. [ 127.064065][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 127.069857][ T5878] dw2102: command 0x0e transfer failed. [ 127.077179][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 127.086789][ T5878] dw2102: command 0x0e transfer failed. [ 127.293923][ T5878] dvb-usb: bulk message failed: -22 (1/0) [ 127.300365][ T5878] dw2102: command 0x51 transfer failed. [ 127.309851][ T5878] dvb-usb: bulk message failed: -22 (5/0) [ 127.345894][ T5878] dw2102: i2c probe for address 0x68 failed. [ 127.353321][ T5878] dvb-usb: bulk message failed: -22 (5/0) [ 127.359087][ T5878] dw2102: i2c probe for address 0x69 failed. [ 127.366823][ T5878] dvb-usb: bulk message failed: -22 (5/0) [ 127.376982][ T5878] dw2102: i2c probe for address 0x6a failed. [ 127.387139][ T5878] dw2102: probing for demodulator failed. Is the external power switched on? [ 127.397277][ T5878] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 127.715552][ T5878] rc_core: IR keymap rc-tt-1500 not found [ 127.736025][ T5878] Registered IR keymap rc-empty [ 127.806032][ T5878] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 127.895933][ T5878] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input16 [ 128.030260][ T5878] dvb-usb: schedule remote query interval to 250 msecs. [ 128.039854][ T5878] dw2102: su3000_power_ctrl: 0, initialized 1 [ 128.206633][ T6876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.223786][ T6056] lo speed is unknown, defaulting to 1000 [ 128.301663][ T6056] dvb-usb: bulk message failed: -22 (1/0) [ 128.336131][ T6056] dw2102: i2c transfer failed. [ 128.526518][ T5878] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 128.605921][ T5878] usb 4-1: USB disconnect, device number 13 [ 128.747002][ T5878] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 129.230489][ T5878] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 129.453628][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 129.464474][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.488613][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.540464][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.581234][ T5878] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.608211][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.645741][ T5878] usb 4-1: config 0 descriptor?? [ 129.903532][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 129.903546][ T30] audit: type=1400 audit(1765869784.292:558): avc: denied { bind } for pid=6911 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.022252][ T5878] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 130.030697][ T5878] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 130.037991][ T5878] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 130.045794][ T5878] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 130.053271][ T5878] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 130.062664][ T5878] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 130.072616][ T5878] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 130.079966][ T5878] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 130.088718][ T5878] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 130.089151][ T30] audit: type=1400 audit(1765869784.472:559): avc: denied { ioctl } for pid=6922 comm="syz.2.267" path="socket:[13399]" dev="sockfs" ino=13399 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 130.096150][ T5878] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 130.147999][ T6923] delete_channel: no stack [ 130.202613][ T5878] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input17 [ 130.209138][ T30] audit: type=1400 audit(1765869784.512:560): avc: denied { ioctl } for pid=6922 comm="syz.2.267" path="socket:[13404]" dev="sockfs" ino=13404 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 130.271102][ T5820] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 130.302453][ T5878] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 130.345511][ T5878] usb 4-1: USB disconnect, device number 14 [ 130.471779][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 130.480252][ T5820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.488919][ T5820] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 130.500881][ T5892] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.512557][ T5820] usb 2-1: config 4 has no interface number 0 [ 130.540068][ T5820] usb 2-1: config 4 interface 30 has no altsetting 0 [ 130.540611][ T6931] fido_id[6931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 130.553050][ T5820] usb 2-1: string descriptor 0 read error: -22 [ 130.567735][ T5820] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 130.584588][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.625468][ T5820] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 130.637190][ T5820] dw2102: su3000_power_ctrl: 1, initialized 0 [ 130.672836][ T5820] dvb-usb: bulk message failed: -22 (2/0) [ 130.680602][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 130.686678][ T5820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.688196][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 130.698236][ T5820] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 130.711486][ T5820] usb 2-1: media controller created [ 130.729599][ T5820] dvb-usb: bulk message failed: -22 (6/0) [ 130.737478][ T5820] dw2102: i2c transfer failed. [ 130.748361][ T5820] dvb-usb: bulk message failed: -22 (6/0) [ 130.754407][ T5820] dw2102: i2c transfer failed. [ 130.758770][ T5892] usb 3-1: can't read configurations, error -61 [ 130.773210][ T5820] dvb-usb: bulk message failed: -22 (6/0) [ 130.788205][ T5820] dw2102: i2c transfer failed. [ 130.794036][ T5820] dvb-usb: bulk message failed: -22 (6/0) [ 130.804627][ T5820] dw2102: i2c transfer failed. [ 130.809446][ T5820] dvb-usb: bulk message failed: -22 (6/0) [ 130.816086][ T5820] dw2102: i2c transfer failed. [ 130.820896][ T5820] dvb-usb: bulk message failed: -22 (6/0) [ 130.828434][ T5820] dw2102: i2c transfer failed. [ 130.835969][ T5820] dvb-usb: MAC address: 02:02:02:02:02:02 [ 130.841800][ T6920] netlink: 96 bytes leftover after parsing attributes in process `syz.1.266'. [ 130.915581][ T6942] dvb-usb: bulk message failed: -22 (4/0) [ 130.921528][ T6942] dw2102: i2c transfer failed. [ 130.922005][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.930635][ T6942] dvb-usb: bulk message failed: -22 (3/0) [ 130.940408][ T6942] dw2102: i2c transfer failed. [ 130.960561][ T5892] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 130.960634][ T6349] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 131.070159][ T6942] dvb-usb: bulk message failed: -22 (4/0) [ 131.089604][ T6942] dw2102: i2c transfer failed. [ 131.097007][ T5820] dvb-usb: bulk message failed: -22 (3/0) [ 131.119047][ T5820] dw2102: command 0x0e transfer failed. [ 131.545235][ T30] audit: type=1400 audit(1765869785.562:561): avc: denied { bind } for pid=6943 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.569701][ T5820] dvb-usb: bulk message failed: -22 (3/0) [ 131.576652][ T5820] dw2102: command 0x0e transfer failed. [ 131.588407][ T30] audit: type=1400 audit(1765869785.572:562): avc: denied { setopt } for pid=6943 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.630535][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 131.638859][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 131.649903][ T5892] usb 3-1: can't read configurations, error -61 [ 131.657666][ T5892] usb usb3-port1: attempt power cycle [ 131.732439][ T6349] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.742812][ T6349] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 131.755288][ T6349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.889147][ T6349] usb 1-1: config 0 descriptor?? [ 131.896404][ T5820] dvb-usb: bulk message failed: -22 (3/0) [ 131.915696][ T5820] dw2102: command 0x0e transfer failed. [ 131.922880][ T6349] pwc: Askey VC010 type 2 USB webcam detected. [ 131.930157][ T5820] dvb-usb: bulk message failed: -22 (3/0) [ 131.942646][ T5820] dw2102: command 0x0e transfer failed. [ 131.948699][ T5820] dvb-usb: bulk message failed: -22 (1/0) [ 131.968945][ T5820] dw2102: command 0x51 transfer failed. [ 131.975038][ T5820] dvb-usb: bulk message failed: -22 (5/0) [ 131.986913][ T5820] dw2102: i2c probe for address 0x68 failed. [ 131.995061][ T5820] dvb-usb: bulk message failed: -22 (5/0) [ 132.003575][ T5820] dw2102: i2c probe for address 0x69 failed. [ 132.010233][ T5820] dvb-usb: bulk message failed: -22 (5/0) [ 132.010536][ T5892] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 132.016398][ T5820] dw2102: i2c probe for address 0x6a failed. [ 132.087012][ T6949] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.275'. [ 132.344115][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.363445][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.371715][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 132.386976][ T5820] dw2102: probing for demodulator failed. Is the external power switched on? [ 132.397456][ T5820] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 132.397524][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 132.447090][ T5892] usb 3-1: can't read configurations, error -61 [ 132.553218][ T5820] rc_core: IR keymap rc-tt-1500 not found [ 132.563804][ T5820] Registered IR keymap rc-empty [ 132.569247][ T5820] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 132.580058][ T6349] pwc: recv_control_msg error -32 req 02 val 2b00 [ 132.590354][ T6349] pwc: recv_control_msg error -32 req 02 val 2700 [ 132.602082][ T5892] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 132.605935][ T6349] pwc: recv_control_msg error -32 req 02 val 2c00 [ 132.695883][ T5820] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input18 [ 132.706524][ T6349] pwc: recv_control_msg error -32 req 04 val 1000 [ 132.714596][ T6349] pwc: recv_control_msg error -32 req 04 val 1300 [ 132.722029][ T5820] dvb-usb: schedule remote query interval to 250 msecs. [ 132.730000][ T5820] dw2102: su3000_power_ctrl: 0, initialized 1 [ 132.730977][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 132.736433][ T5820] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 132.751790][ T6349] pwc: recv_control_msg error -32 req 04 val 1400 [ 132.759108][ T6349] pwc: recv_control_msg error -32 req 02 val 2000 [ 132.766433][ T30] audit: type=1326 audit(1765869787.142:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e518f749 code=0x7ffc0000 [ 132.767966][ T5892] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 132.792250][ T5820] usb 2-1: USB disconnect, device number 15 [ 132.809006][ T6349] pwc: recv_control_msg error -32 req 02 val 2100 [ 132.821034][ T30] audit: type=1326 audit(1765869787.142:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ff8e518f749 code=0x7ffc0000 [ 132.846248][ T5892] usb 3-1: can't read configurations, error -61 [ 132.850360][ T6349] pwc: recv_control_msg error -32 req 04 val 1500 [ 132.858426][ T5892] usb usb3-port1: unable to enumerate USB device [ 132.875446][ T30] audit: type=1326 audit(1765869787.152:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8e518f749 code=0x7ffc0000 [ 132.900510][ T6349] pwc: recv_control_msg error -32 req 02 val 2500 [ 132.911762][ T30] audit: type=1326 audit(1765869787.152:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8e518f34b code=0x7ffc0000 [ 132.936898][ T6349] pwc: recv_control_msg error -32 req 02 val 2400 [ 132.953976][ T5820] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 132.963589][ T30] audit: type=1326 audit(1765869787.192:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8e518f34b code=0x7ffc0000 [ 133.150315][ T6939] netlink: 140 bytes leftover after parsing attributes in process `syz.0.272'. [ 133.164708][ T6349] pwc: recv_control_msg error -71 req 02 val 2900 [ 133.172082][ T6349] pwc: recv_control_msg error -71 req 02 val 2800 [ 133.181706][ T6349] pwc: recv_control_msg error -71 req 04 val 1100 [ 133.199194][ T6349] pwc: recv_control_msg error -71 req 04 val 1200 [ 133.215539][ T6349] pwc: Registered as video103. [ 133.256674][ T6349] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 133.290656][ T5892] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.334426][ T6349] usb 1-1: USB disconnect, device number 9 [ 133.471906][ T5892] usb 5-1: config 0 has no interfaces? [ 133.477418][ T5892] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 133.495993][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.522713][ T5892] usb 5-1: config 0 descriptor?? [ 133.645380][ T5820] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 133.705202][ T6977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.729584][ T5892] usb 5-1: USB disconnect, device number 6 [ 133.810508][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 133.832092][ T5820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.845577][ T5820] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 133.856536][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.865065][ T5820] usb 3-1: Product: syz [ 133.870280][ T5820] usb 3-1: Manufacturer: syz [ 133.875183][ T5820] usb 3-1: SerialNumber: syz [ 133.921620][ T5820] usb 3-1: config 0 descriptor?? [ 133.936338][ T5820] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 133.943401][ T5820] usb 3-1: selecting invalid altsetting 1 [ 134.054164][ T6349] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 134.129037][ T5820] gspca_stk014: reg_r err -71 [ 134.150504][ T5820] stk014 3-1:0.0: probe with driver stk014 failed with error -71 [ 134.168131][ T5820] usb 3-1: USB disconnect, device number 15 [ 134.201546][ T6349] usb 4-1: device descriptor read/64, error -71 [ 134.244534][ T5943] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 134.442293][ T5943] usb 2-1: unable to get BOS descriptor or descriptor too short [ 134.450779][ T5943] usb 2-1: not running at top speed; connect to a high speed hub [ 134.459506][ T5943] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 134.467988][ T5943] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 134.478273][ T5943] usb 2-1: config 4 has no interface number 0 [ 134.487136][ T5943] usb 2-1: Dual-Role OTG device on HNP port [ 134.493602][ T5943] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 134.502812][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 134.515260][ T5943] usb 2-1: Product: syz [ 134.519441][ T5943] usb 2-1: Manufacturer: syz [ 134.524246][ T5943] usb 2-1: SerialNumber: syz [ 134.577078][ T6349] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 134.847964][ T5820] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 134.911439][ T6349] usb 4-1: device descriptor read/64, error -71 [ 134.915838][ T5943] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 134.929191][ T6998] autofs4:pid:6998:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 134.940809][ T5943] uvcvideo 2-1:4.147: No valid video chain found. [ 135.020490][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 135.026107][ T6349] usb usb4-port1: attempt power cycle [ 135.042165][ T5820] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 135.052664][ T5820] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 135.064743][ T5820] usb 1-1: config 8 has no interface number 0 [ 135.077878][ T5943] usb 2-1: USB disconnect, device number 16 [ 135.083121][ T5820] usb 1-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 135.121373][ T7002] netlink: 780 bytes leftover after parsing attributes in process `syz.4.290'. [ 135.130366][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 135.130366][ T5820] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 135.130378][ T30] audit: type=1400 audit(1765869789.512:593): avc: denied { nlmsg_read } for pid=7001 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.169799][ T5820] usb 1-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.233534][ T5820] usb 1-1: config 8 interface 206 has no altsetting 0 [ 135.264479][ T5820] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 135.279779][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.296079][ T5820] usb 1-1: Product: syz [ 135.306495][ T5820] usb 1-1: Manufacturer: syz [ 135.315284][ T5820] usb 1-1: SerialNumber: syz [ 135.390498][ T6349] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 135.417165][ T6349] usb 4-1: device descriptor read/8, error -71 [ 135.460492][ T5943] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 135.690571][ T6349] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 135.700522][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 135.707604][ T5943] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.717666][ T5943] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 135.734021][ T6349] usb 4-1: device descriptor read/8, error -71 [ 135.740213][ T5943] usb 2-1: config 4 has no interface number 0 [ 135.753265][ T5943] usb 2-1: config 4 interface 30 has no altsetting 0 [ 135.767810][ T5943] usb 2-1: string descriptor 0 read error: -22 [ 135.788467][ T5943] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 135.830486][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.850833][ T6349] usb usb4-port1: unable to enumerate USB device [ 135.855114][ T5943] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 135.934627][ T5943] dw2102: su3000_power_ctrl: 1, initialized 0 [ 135.940748][ T5943] dvb-usb: bulk message failed: -22 (2/0) [ 135.957624][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.967517][ T5943] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 135.975093][ T5943] usb 2-1: media controller created [ 135.981889][ T30] audit: type=1400 audit(1765869790.372:594): avc: denied { watch } for pid=7012 comm="syz.4.293" path="/67" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.010179][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 136.024294][ T30] audit: type=1400 audit(1765869790.392:595): avc: denied { watch_sb } for pid=7012 comm="syz.4.293" path="/67" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 136.046275][ T5943] dw2102: i2c transfer failed. [ 136.052940][ T30] audit: type=1400 audit(1765869790.392:596): avc: denied { watch_sb watch_reads } for pid=7012 comm="syz.4.293" path="/67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 136.062597][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 136.124045][ T5943] dw2102: i2c transfer failed. [ 136.128902][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 136.135930][ T5943] dw2102: i2c transfer failed. [ 136.140796][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 136.146583][ T5943] dw2102: i2c transfer failed. [ 136.151552][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 136.161749][ T5943] dw2102: i2c transfer failed. [ 136.166571][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 136.172496][ T5943] dw2102: i2c transfer failed. [ 136.177256][ T5943] dvb-usb: MAC address: 02:02:02:02:02:02 [ 136.194853][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.259254][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 136.274771][ T5943] dw2102: command 0x0e transfer failed. [ 136.283680][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 136.303329][ T5820] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 136.310816][ T5943] dw2102: command 0x0e transfer failed. [ 136.330781][ T7005] netlink: 96 bytes leftover after parsing attributes in process `syz.1.291'. [ 136.340296][ T5820] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 136.356678][ T5820] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 136.372716][ T5820] usb 1-1: USB disconnect, device number 10 [ 136.381782][ T5820] garmin_gps 1-1:8.206: device disconnected [ 136.487571][ T30] audit: type=1400 audit(1765869790.872:597): avc: denied { ioctl } for pid=7023 comm="syz.2.295" path="socket:[13819]" dev="sockfs" ino=13819 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.520899][ T7024] could not allocate digest TFM handle sha384-generic [ 136.620475][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 136.628346][ T5943] dw2102: command 0x0e transfer failed. [ 136.642413][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 136.648155][ T5943] dw2102: command 0x0e transfer failed. [ 136.660106][ T5943] dvb-usb: bulk message failed: -22 (1/0) [ 136.666763][ T5943] dw2102: command 0x51 transfer failed. [ 136.675075][ T5943] dvb-usb: bulk message failed: -22 (5/0) [ 136.682522][ T5943] dw2102: i2c probe for address 0x68 failed. [ 136.688689][ T5943] dvb-usb: bulk message failed: -22 (5/0) [ 136.694608][ T5943] dw2102: i2c probe for address 0x69 failed. [ 136.700680][ T5943] dvb-usb: bulk message failed: -22 (5/0) [ 136.706482][ T5943] dw2102: i2c probe for address 0x6a failed. [ 136.712571][ T5943] dw2102: probing for demodulator failed. Is the external power switched on? [ 136.721536][ T5943] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 136.846574][ T5943] rc_core: IR keymap rc-tt-1500 not found [ 137.263580][ T5892] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 137.271931][ T5943] Registered IR keymap rc-empty [ 137.279272][ T5943] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 137.298374][ T5943] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input20 [ 137.338457][ T5943] dvb-usb: schedule remote query interval to 250 msecs. [ 137.373929][ T5943] dw2102: su3000_power_ctrl: 0, initialized 1 [ 137.418869][ T5943] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 137.446557][ T5892] usb 3-1: No LPM exit latency info found, disabling LPM. [ 137.477858][ T5892] usb 3-1: config 1 has an invalid interface number: 69 but max is 2 [ 137.493120][ T5892] usb 3-1: config 1 has an invalid interface number: 71 but max is 2 [ 137.510281][ T30] audit: type=1400 audit(1765869791.892:598): avc: denied { read } for pid=7045 comm="syz.3.299" path="socket:[14508]" dev="sockfs" ino=14508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.534719][ T5943] usb 2-1: USB disconnect, device number 17 [ 137.560500][ T5892] usb 3-1: config 1 has an invalid interface number: 132 but max is 2 [ 137.570491][ T5892] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 137.589345][ T5892] usb 3-1: config 1 has no interface number 0 [ 137.643309][ T7047] sp0: Synchronizing with TNC [ 137.648145][ T5892] usb 3-1: config 1 has no interface number 1 [ 137.685140][ T30] audit: type=1400 audit(1765869792.072:599): avc: denied { search } for pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.698238][ T5892] usb 3-1: config 1 has no interface number 2 [ 137.762061][ T5943] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 137.762373][ T30] audit: type=1400 audit(1765869792.072:600): avc: denied { search } for pid=5481 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.873692][ T5892] usb 3-1: config 1 interface 69 altsetting 7 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 137.873916][ T30] audit: type=1400 audit(1765869792.072:601): avc: denied { search } for pid=5481 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.920274][ T5892] usb 3-1: config 1 interface 69 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 137.937992][ T30] audit: type=1400 audit(1765869792.072:602): avc: denied { read } for pid=5481 comm="dhcpcd" name="n100" dev="tmpfs" ino=3528 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 138.002807][ T5892] usb 3-1: config 1 interface 69 altsetting 7 endpoint 0xD has invalid maxpacket 1023, setting to 8 [ 138.120732][ T5878] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.187176][ T5892] usb 3-1: config 1 interface 69 altsetting 7 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 138.210842][ T5892] usb 3-1: config 1 interface 71 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 8 [ 138.259626][ T5892] usb 3-1: config 1 interface 71 altsetting 255 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 138.290616][ T5892] usb 3-1: config 1 interface 71 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 138.326771][ T5892] usb 3-1: config 1 interface 71 altsetting 255 has a duplicate endpoint with address 0x82, skipping [ 138.339095][ T5878] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 138.365585][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.369886][ T5892] usb 3-1: config 1 interface 71 altsetting 255 endpoint 0x3 has invalid maxpacket 16, setting to 8 [ 138.404726][ T5878] usb 5-1: config 0 has no interface number 0 [ 138.415070][ T5892] usb 3-1: config 1 interface 71 altsetting 255 endpoint 0x1 has invalid maxpacket 1023, setting to 8 [ 138.430601][ T5878] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 138.447805][ T5892] usb 3-1: config 1 interface 71 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 138.470489][ T5878] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.478174][ T5892] usb 3-1: config 1 interface 71 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 138.525120][ T5892] usb 3-1: config 1 interface 71 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 138.538487][ T5878] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 138.550561][ T5892] usb 3-1: config 1 interface 132 altsetting 9 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 138.560918][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.569799][ T5878] usb 5-1: Product: syz [ 138.578756][ T5892] usb 3-1: config 1 interface 132 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 138.590262][ T5892] usb 3-1: config 1 interface 132 altsetting 9 endpoint 0x6 has invalid maxpacket 16, setting to 8 [ 138.600472][ T5878] usb 5-1: Manufacturer: syz [ 138.605569][ T5878] usb 5-1: SerialNumber: syz [ 138.613590][ T5878] usb 5-1: config 0 descriptor?? [ 138.647725][ T5892] usb 3-1: config 1 interface 132 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 138.686449][ T5892] usb 3-1: config 1 interface 132 altsetting 9 endpoint 0x9 has invalid maxpacket 16, setting to 8 [ 138.713540][ T5892] usb 3-1: config 1 interface 132 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 138.731087][ T5892] usb 3-1: config 1 interface 132 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 138.742229][ T5892] usb 3-1: config 1 interface 132 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 138.964673][ T5952] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 139.015277][ T5892] usb 3-1: config 1 interface 132 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 139.086527][ T5892] usb 3-1: config 1 interface 132 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 139.098001][ T5892] usb 3-1: config 1 interface 132 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 139.117731][ T5892] usb 3-1: config 1 interface 132 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 8 [ 139.129301][ T5892] usb 3-1: config 1 interface 132 altsetting 9 endpoint 0x8 has invalid maxpacket 16, setting to 0 [ 139.154072][ T5892] usb 3-1: config 1 interface 132 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 139.164973][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 139.171695][ T5892] usb 3-1: config 1 interface 69 has no altsetting 0 [ 139.171957][ T5952] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.190028][ T5952] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 139.199569][ T5892] usb 3-1: config 1 interface 71 has no altsetting 0 [ 139.210513][ T5952] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 139.222291][ T5892] usb 3-1: config 1 interface 132 has no altsetting 0 [ 139.229574][ T5952] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 139.242628][ T5892] usb 3-1: New USB device found, idVendor=03ee, idProduct=6906, bcdDevice= 0.03 [ 139.251794][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.259836][ T5892] usb 3-1: Product: ӿ [ 139.278098][ T5892] usb 3-1: Manufacturer: ᰊ [ 139.286803][ T5952] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 139.301355][ T5892] usb 3-1: SerialNumber: 㠊 [ 139.307700][ T5952] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 139.323479][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.363732][ T5952] hub 2-1:1.0: bad descriptor, ignoring hub [ 139.371258][ T5952] hub 2-1:1.0: probe with driver hub failed with error -5 [ 139.388805][ T5952] cdc_wdm 2-1:1.0: skipping garbage [ 139.403291][ T5952] cdc_wdm 2-1:1.0: skipping garbage [ 139.408698][ T5952] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 139.531007][ T5878] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 139.531667][ T5892] usb-storage 3-1:1.69: USB Mass Storage device detected [ 139.603174][ T5952] usb 5-1: USB disconnect, device number 7 [ 139.622736][ T5892] usb-storage 3-1:1.69: Quirks match for vid 03ee pid 6906: 20 [ 139.670387][ T7099] tipc: Enabling not permitted [ 139.696326][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 139.698487][ T5892] usb-storage 3-1:1.71: USB Mass Storage device detected [ 139.712718][ T5878] usb 1-1: unable to get BOS descriptor or descriptor too short [ 139.740381][ T5892] usb-storage 3-1:1.71: Quirks match for vid 03ee pid 6906: 20 [ 139.750554][ T7099] tipc: Enabling of bearer rejected, failed to enable media [ 139.752242][ T5961] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.770221][ T5961] Bluetooth: hci5: Frame reassembly failed (-84) [ 139.778467][ T5878] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 139.787797][ T5878] usb 1-1: config 4 has no interface number 0 [ 139.795055][ T5878] usb 1-1: config 4 interface 30 has no altsetting 0 [ 139.805164][ T5878] usb 1-1: string descriptor 0 read error: -22 [ 139.814727][ T5878] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 139.823914][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.838416][ T5878] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 139.847879][ T5878] dw2102: su3000_power_ctrl: 1, initialized 0 [ 139.854627][ T5892] usb-storage 3-1:1.132: USB Mass Storage device detected [ 139.862018][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 139.898490][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.916612][ T5892] usb-storage 3-1:1.132: Quirks match for vid 03ee pid 6906: 20 [ 139.936302][ T5878] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 139.992371][ T5878] usb 1-1: media controller created [ 140.000056][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 140.008674][ T5878] dw2102: i2c transfer failed. [ 140.015412][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 140.022452][ T5878] dw2102: i2c transfer failed. [ 140.054020][ T7092] netlink: 96 bytes leftover after parsing attributes in process `syz.0.311'. [ 140.075356][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 140.088946][ T7114] kAFS: No cell specified [ 140.092344][ T5878] dw2102: i2c transfer failed. [ 140.111332][ T5892] usb 3-1: USB disconnect, device number 16 [ 140.146705][ T7115] dvb-usb: bulk message failed: -22 (4/0) [ 140.160935][ T7115] dw2102: i2c transfer failed. [ 140.165915][ T7115] dvb-usb: bulk message failed: -22 (3/0) [ 140.176180][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 140.176190][ T30] audit: type=1400 audit(1765869794.562:610): avc: denied { lock } for pid=7113 comm="syz.2.316" path="/dev/ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.238029][ T7115] dw2102: i2c transfer failed. [ 140.249257][ T7115] dvb-usb: bulk message failed: -22 (4/0) [ 140.259323][ T7115] dw2102: i2c transfer failed. [ 140.274220][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 140.289625][ T5878] dw2102: i2c transfer failed. [ 140.376892][ T5919] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 140.401772][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 140.416613][ T5878] dw2102: i2c transfer failed. [ 140.429374][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 140.445737][ T5878] dw2102: i2c transfer failed. [ 140.468468][ T5878] dvb-usb: MAC address: 02:02:02:02:02:02 [ 140.631031][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 140.636771][ T30] audit: type=1400 audit(1765869795.012:611): avc: denied { mount } for pid=7121 comm="syz.2.318" name="/" dev="autofs" ino=14050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 140.818744][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.841622][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.842405][ T30] audit: type=1400 audit(1765869795.232:612): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 140.876949][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 140.965462][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 141.001935][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 141.016649][ T5878] dw2102: command 0x0e transfer failed. [ 141.026351][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 141.033166][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 141.043000][ T5878] dw2102: command 0x0e transfer failed. [ 141.056723][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.085340][ T5919] usb 4-1: config 0 descriptor?? [ 141.130391][ T7112] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.150878][ T5919] hub 4-1:0.0: USB hub found [ 141.290802][ T30] audit: type=1400 audit(1765869795.672:613): avc: denied { execute } for pid=7130 comm="syz.2.321" dev="tmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.334744][ T30] audit: type=1400 audit(1765869795.702:614): avc: denied { execute_no_trans } for pid=7130 comm="syz.2.321" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.378181][ T7112] Bluetooth: MGMT ver 1.23 [ 141.386460][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 141.414128][ T5878] dw2102: command 0x0e transfer failed. [ 141.426253][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 141.440957][ T5892] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.456535][ T5878] dw2102: command 0x0e transfer failed. [ 141.468896][ T5878] dvb-usb: bulk message failed: -22 (1/0) [ 141.517346][ T5878] dw2102: command 0x51 transfer failed. [ 141.530842][ T5878] dvb-usb: bulk message failed: -22 (5/0) [ 141.549653][ T5878] dw2102: i2c probe for address 0x68 failed. [ 141.571941][ T5878] dvb-usb: bulk message failed: -22 (5/0) [ 141.586985][ T5878] dw2102: i2c probe for address 0x69 failed. [ 141.598157][ T5919] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 141.608629][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 141.618086][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.632195][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.647469][ T5892] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 141.648416][ T5878] dvb-usb: bulk message failed: -22 (5/0) [ 141.682305][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 141.703391][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 141.737552][ T5878] dw2102: i2c probe for address 0x6a failed. [ 141.739041][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.764078][ T5878] dw2102: probing for demodulator failed. Is the external power switched on? [ 141.776448][ T5878] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 141.800533][ T5817] Bluetooth: hci5: command 0x1003 tx timeout [ 141.800705][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 141.848677][ T5892] usb 5-1: config 0 descriptor?? [ 141.871562][ T5919] usb 4-1: USB disconnect, device number 19 [ 141.927698][ T5892] hub 5-1:0.0: USB hub found [ 141.990607][ T5878] rc_core: IR keymap rc-tt-1500 not found [ 141.996367][ T5878] Registered IR keymap rc-empty [ 142.002183][ T5820] usb 2-1: USB disconnect, device number 18 [ 142.042649][ T5878] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 142.083715][ T5878] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input22 [ 142.093422][ T5892] hub 5-1:0.0: 1 port detected [ 142.217287][ T30] audit: type=1400 audit(1765869796.602:615): avc: denied { read } for pid=5171 comm="acpid" name="event4" dev="devtmpfs" ino=3073 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.218449][ T5878] dvb-usb: schedule remote query interval to 250 msecs. [ 142.239898][ T30] audit: type=1400 audit(1765869796.602:616): avc: denied { open } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3073 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.668393][ T5878] dw2102: su3000_power_ctrl: 0, initialized 1 [ 142.686084][ T5878] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 142.703328][ T30] audit: type=1400 audit(1765869796.602:617): avc: denied { ioctl } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3073 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.820862][ T5878] usb 1-1: USB disconnect, device number 11 [ 142.928858][ T5892] usb 5-1: USB disconnect, device number 8 [ 143.015160][ T7145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=7145 comm=syz.3.323 [ 143.030298][ T7145] netlink: 'syz.3.323': attribute type 29 has an invalid length. [ 143.120817][ T5864] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 143.143091][ T5878] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 143.294897][ T5864] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 143.304153][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.312513][ T5864] usb 3-1: Product: syz [ 143.316764][ T5864] usb 3-1: Manufacturer: syz [ 143.321576][ T5864] usb 3-1: SerialNumber: syz [ 143.327510][ T5864] usb 3-1: config 0 descriptor?? [ 143.335300][ T5864] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 143.480596][ T5878] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 143.520495][ T5892] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 143.631620][ T5878] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 143.640238][ T5878] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.649266][ T5878] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.660265][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.667739][ T5878] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.671587][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 143.677472][ T5878] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.694949][ T5892] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 143.703483][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.722604][ T5878] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.731505][ T5892] usb 2-1: config 1 has no interface number 0 [ 143.731558][ T5892] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 143.742732][ T5878] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.763255][ T5864] sonixb 3-1:0.0: Error writing register 01: -71 [ 143.769689][ T5864] sonixb 3-1:0.0: probe with driver sonixb failed with error -71 [ 143.776003][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.845154][ T5892] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 143.856507][ T5878] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.870645][ T5864] usb 3-1: USB disconnect, device number 17 [ 143.876605][ T5878] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.890482][ T5892] usb 2-1: config 1 interface 105 has no altsetting 0 [ 143.915628][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.918636][ T5892] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 143.944212][ T5878] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.965496][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.973789][ T5878] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.985738][ T5892] usb 2-1: Product: syz [ 143.989906][ T5892] usb 2-1: Manufacturer: syz [ 143.996087][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0 [ 143.999211][ T5892] usb 2-1: SerialNumber: syz [ 144.027406][ T5878] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.038289][ T5878] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.049660][ T7154] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 144.057665][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.066260][ T5878] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.069482][ T7154] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 144.083099][ T5878] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.098029][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.111818][ T5878] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.123777][ T5878] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.134981][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.146329][ T5878] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 144.156633][ T5878] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 144.174405][ T5878] usb 1-1: Product: syz [ 144.179183][ T5878] usb 1-1: Manufacturer: syz [ 144.184688][ T5878] usb 1-1: SerialNumber: syz [ 144.206577][ T5878] usb 1-1: config 0 descriptor?? [ 144.214697][ T30] audit: type=1400 audit(1765869798.602:618): avc: denied { create } for pid=7164 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.235059][ T30] audit: type=1400 audit(1765869798.622:619): avc: denied { setopt } for pid=7164 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.238206][ T5878] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 144.301764][ T7169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.320094][ T7169] bond0: (slave rose0): Enslaving as an active interface with an up link [ 144.458101][ T7175] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 144.484748][ T5878] usb 1-1: USB disconnect, device number 12 [ 144.503980][ T5878] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 144.513194][ T7154] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 144.523331][ T7154] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 144.781142][ T7185] vlan3: entered allmulticast mode [ 144.791883][ T7185] dummy0: entered allmulticast mode [ 144.877442][ T7185] vlan3: entered allmulticast mode [ 145.196286][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 145.196297][ T30] audit: type=1400 audit(1765869799.582:632): avc: denied { getopt } for pid=7193 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.239923][ T7202] lo speed is unknown, defaulting to 1000 [ 145.389135][ T5892] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 145.483360][ T5892] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2e:ef:ad:a6:44:c6 [ 145.528852][ T5892] usb 2-1: USB disconnect, device number 19 [ 145.677811][ T5892] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 145.762085][ T5892] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 145.790610][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 145.803168][ T5892] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 145.816087][ T5892] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 146.102269][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.125900][ T10] usb 1-1: config 9 has an invalid interface number: 64 but max is 0 [ 146.146232][ T10] usb 1-1: config 9 has no interface number 0 [ 146.180708][ T10] usb 1-1: config 9 interface 64 has no altsetting 0 [ 146.353951][ T10] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=1e.21 [ 146.373440][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.388157][ T10] usb 1-1: Product: syz [ 146.398344][ T10] usb 1-1: Manufacturer: syz [ 146.411145][ T10] usb 1-1: SerialNumber: syz [ 147.770588][ T30] audit: type=1400 audit(1765869801.652:633): avc: denied { ioctl } for pid=7248 comm="syz.3.345" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 147.772449][ T7249] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 147.939056][ T30] audit: type=1400 audit(1765869801.662:634): avc: denied { read } for pid=7248 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.131858][ T7264] Cannot find add_set index 0 as target [ 148.307885][ T7249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.341023][ T5945] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 148.381725][ T7256] bond1: entered allmulticast mode [ 148.560736][ T5945] usb 5-1: device descriptor read/64, error -71 [ 148.681035][ T30] audit: type=1400 audit(1765869803.072:635): avc: denied { setopt } for pid=7271 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.774650][ T30] audit: type=1400 audit(1765869803.072:636): avc: denied { accept } for pid=7271 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.816619][ T5945] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 148.963098][ T7276] tipc: Started in network mode [ 148.969121][ T7276] tipc: Node identity , cluster identity 4711 [ 149.096742][ T5945] usb 5-1: device descriptor read/64, error -71 [ 149.115435][ T7276] tipc: Failed to set node id, please configure manually [ 149.152395][ T7276] tipc: Enabling of bearer rejected, failed to enable media [ 149.241169][ T5945] usb usb5-port1: attempt power cycle [ 149.242041][ T5878] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 149.278826][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 149.342792][ T30] audit: type=1400 audit(1765869803.682:637): avc: denied { read } for pid=7280 comm="syz.1.352" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.487144][ T10] cxacru 1-1:9.64: cxacru_bind: interface has incorrect endpoints [ 149.493842][ T5878] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 149.510739][ T10] cxacru 1-1:9.64: usbatm_usb_probe: bind failed: -19! [ 149.522358][ T10] usb 1-1: USB disconnect, device number 13 [ 149.651165][ T5945] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 149.667508][ T7286] netlink: 'syz.0.353': attribute type 2 has an invalid length. [ 149.714636][ T5945] usb 5-1: device descriptor read/8, error -71 [ 150.070645][ T5945] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.112533][ T5945] usb 5-1: device descriptor read/8, error -71 [ 150.326197][ T5945] usb usb5-port1: unable to enumerate USB device [ 150.370497][ T10] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 150.580689][ T10] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.612466][ T10] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 150.662473][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 150.676187][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 150.693285][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.713932][ T10] usb 4-1: config 0 descriptor?? [ 150.733334][ T7292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.757958][ T7298] netlink: 111 bytes leftover after parsing attributes in process `syz.0.355'. [ 150.930547][ T5945] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 151.100521][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 151.107382][ T5945] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 151.118986][ T5945] usb 2-1: config 0 has no interface number 0 [ 151.130495][ T5945] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 151.143320][ T5945] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 151.158864][ T10] logitech 0003:046D:C24F.0005: unbalanced collection at end of report description [ 151.173774][ T10] logitech 0003:046D:C24F.0005: parse failed [ 151.180001][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 151.188451][ T10] logitech 0003:046D:C24F.0005: probe with driver logitech failed with error -22 [ 151.198900][ T5945] usb 2-1: Product: syz [ 151.204741][ T5945] usb 2-1: SerialNumber: syz [ 151.226260][ T5945] usb 2-1: config 0 descriptor?? [ 151.245100][ T5945] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 151.443705][ T7297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.456691][ T7297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.465718][ T6056] usb 2-1: USB disconnect, device number 20 [ 151.620555][ T5945] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 151.750799][ T5878] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 151.803864][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 151.827468][ T5945] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 151.839381][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.849718][ T5945] usb 5-1: Product: syz [ 151.854492][ T5945] usb 5-1: Manufacturer: syz [ 151.861282][ T5945] usb 5-1: SerialNumber: syz [ 151.988339][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 152.061632][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 152.074485][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.085637][ T5878] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.100077][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 152.111554][ T5878] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 152.123301][ T5878] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 152.132680][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.144332][ T5878] usb 1-1: config 0 descriptor?? [ 152.154077][ T7314] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 152.306290][ T5945] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 152.477851][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'. [ 152.678129][ T30] audit: type=1400 audit(1765869807.032:638): avc: denied { create } for pid=7320 comm="syz.1.363" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.702928][ T30] audit: type=1400 audit(1765869807.032:639): avc: denied { link } for pid=7320 comm="syz.1.363" name="#9" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 152.763968][ T30] audit: type=1400 audit(1765869807.032:640): avc: denied { rename } for pid=7320 comm="syz.1.363" name="#a" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 153.499121][ T5945] usb 4-1: USB disconnect, device number 20 [ 153.784734][ T5878] usb 1-1: USB disconnect, device number 14 [ 153.790933][ T5824] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 153.810597][ T5920] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 153.970652][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 153.976998][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.987283][ T5920] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.000356][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 154.007138][ T5920] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 154.017203][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.026727][ T5920] usb 2-1: config 0 descriptor?? [ 154.030946][ T5820] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 154.191943][ T5820] usb 3-1: config 0 has an invalid interface number: 82 but max is 0 [ 154.200185][ T5820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.210602][ T5820] usb 3-1: config 0 has no interface number 0 [ 154.216751][ T5820] usb 3-1: config 0 interface 82 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 154.227679][ T5820] usb 3-1: config 0 interface 82 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 154.237534][ T5820] usb 3-1: config 0 interface 82 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 154.253419][ T5820] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=11.9e [ 154.262648][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.270712][ T5820] usb 3-1: Product: syz [ 154.274911][ T5820] usb 3-1: Manufacturer: syz [ 154.279522][ T5820] usb 3-1: SerialNumber: syz [ 154.286821][ T5820] usb 3-1: config 0 descriptor?? [ 154.293350][ T7334] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 259.300391][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 259.307008][ C1] rcu: 1-...!: (10499 ticks this GP) idle=1c6c/1/0x4000000000000000 softirq=24029/34336 fqs=0 [ 259.318109][ C1] rcu: (t=10500 jiffies g=17241 q=134 ncpus=2) [ 259.324351][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g17241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 259.336747][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=11052 [ 259.344620][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g17241 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 259.355975][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 259.365932][ C1] rcu: RCU grace-period kthread stack dump: [ 259.371804][ C1] task:rcu_preempt state:I stack:28504 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 259.383725][ C1] Call Trace: [ 259.386997][ C1] [ 259.389925][ C1] ? __schedule+0x10b9/0x6150 [ 259.394609][ C1] __schedule+0x1139/0x6150 [ 259.399107][ C1] ? __lock_acquire+0x436/0x2890 [ 259.404044][ C1] ? __mod_timer+0x8f2/0xd30 [ 259.408642][ C1] ? __pfx___schedule+0x10/0x10 [ 259.413490][ C1] ? find_held_lock+0x2b/0x80 [ 259.418165][ C1] ? schedule+0x2d7/0x3a0 [ 259.422491][ C1] schedule+0xe7/0x3a0 [ 259.426561][ C1] schedule_timeout+0x123/0x290 [ 259.431414][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 259.436779][ C1] ? __pfx_process_timeout+0x10/0x10 [ 259.442064][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 259.448039][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 259.453497][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 259.458265][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 259.463639][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 259.468586][ C1] ? rcu_is_watching+0x12/0xc0 [ 259.473370][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 259.479206][ C1] rcu_gp_kthread+0x26d/0x380 [ 259.483895][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 259.489091][ C1] ? rcu_is_watching+0x12/0xc0 [ 259.493846][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 259.499057][ C1] ? __kthread_parkme+0x19e/0x250 [ 259.504100][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 259.509313][ C1] kthread+0x3c5/0x780 [ 259.513385][ C1] ? __pfx_kthread+0x10/0x10 [ 259.517968][ C1] ? rcu_is_watching+0x12/0xc0 [ 259.522721][ C1] ? __pfx_kthread+0x10/0x10 [ 259.527311][ C1] ret_from_fork+0x983/0xb10 [ 259.531893][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 259.536998][ C1] ? __switch_to+0x7af/0x10d0 [ 259.541669][ C1] ? __pfx_kthread+0x10/0x10 [ 259.546257][ C1] ret_from_fork_asm+0x1a/0x30 [ 259.551036][ C1] [ 259.554071][ C1] Sending NMI from CPU 1 to CPUs 0: [ 259.554095][ C0] NMI backtrace for cpu 0 [ 259.554110][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.554128][ C0] Tainted: [L]=SOFTLOCKUP [ 259.554132][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.554139][ C0] RIP: 0010:preempt_count_sub+0xe/0x160 [ 259.554155][ C0] Code: 48 c7 c7 60 4c b9 93 e9 00 ea 6b 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c0 80 22 c2 9a 53 89 fb <48> ba 00 00 00 00 00 fc ff df 48 89 c1 83 e0 07 48 c1 e9 03 83 c0 [ 259.554166][ C0] RSP: 0018:ffffc90000007cf8 EFLAGS: 00000046 [ 259.554177][ C0] RAX: ffffffff9ac22280 RBX: 0000000000000001 RCX: ffffffff819a45a3 [ 259.554185][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 259.554193][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: fffffbfff35cf1d9 [ 259.554201][ C0] R10: ffffffff9ae78ecb R11: ffffffff9ae78ec8 R12: 0000000000000002 [ 259.554209][ C0] R13: ffff88802f0e1300 R14: dffffc0000000000 R15: 1ffff92000000fa8 [ 259.554217][ C0] FS: 0000000000000000(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 259.554230][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.554238][ C0] CR2: 00007febec985d58 CR3: 0000000034adb000 CR4: 00000000003526f0 [ 259.554246][ C0] Call Trace: [ 259.554252][ C0] [ 259.554257][ C0] _raw_spin_unlock_irqrestore+0x3b/0x80 [ 259.554278][ C0] debug_object_activate+0x2ec/0x4c0 [ 259.554295][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 259.554311][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 259.554329][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 259.554346][ C0] enqueue_hrtimer+0x23/0x380 [ 259.554364][ C0] __hrtimer_run_queues+0xa31/0xc40 [ 259.554384][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 259.554402][ C0] ? read_tsc+0x9/0x20 [ 259.554418][ C0] ? rcu_is_watching+0x12/0xc0 [ 259.554432][ C0] hrtimer_interrupt+0x397/0x8e0 [ 259.554448][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 259.554470][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 259.554484][ C0] [ 259.554489][ C0] [ 259.554493][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 259.554507][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 259.554522][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 259.554533][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 259.554543][ C0] RAX: 000000000067ea61 RBX: 0000000000000000 RCX: ffffffff8b7806d9 [ 259.554550][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdb2d RDI: ffffffff8bf2b300 [ 259.554558][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 259.554566][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 259.554574][ C0] R13: ffffffff8e097b40 R14: ffffffff9088aed0 R15: 0000000000000000 [ 259.554585][ C0] ? ct_kernel_exit+0x139/0x190 [ 259.554603][ C0] default_idle+0x13/0x20 [ 259.554618][ C0] default_idle_call+0x6c/0xb0 [ 259.554634][ C0] do_idle+0x38d/0x510 [ 259.554654][ C0] ? __pfx_do_idle+0x10/0x10 [ 259.554673][ C0] cpu_startup_entry+0x4f/0x60 [ 259.554690][ C0] rest_init+0x16b/0x2b0 [ 259.554706][ C0] ? acpi_subsystem_init+0x133/0x180 [ 259.554719][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 259.554732][ C0] start_kernel+0x3ef/0x4d0 [ 259.554751][ C0] x86_64_start_reservations+0x18/0x30 [ 259.554770][ C0] x86_64_start_kernel+0x130/0x190 [ 259.554788][ C0] common_startup_64+0x13e/0x148 [ 259.554808][ C0] [ 259.555093][ C1] CPU: 1 UID: 0 PID: 7338 Comm: syz.1.365 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.555116][ C1] Tainted: [L]=SOFTLOCKUP [ 259.555122][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.555130][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 259.555149][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 1b 1f f6 48 89 df e8 6e 6e 1f f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 75 71 0f f6 65 8b 05 2e c9 37 08 85 c0 74 16 5b [ 259.555163][ C1] RSP: 0018:ffffc90000a08bd8 EFLAGS: 00000246 [ 259.555177][ C1] RAX: 0000000000000016 RBX: ffff8880298dc000 RCX: 0000000000000003 [ 259.555187][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdb2d RDI: ffffffff8bf2b300 [ 259.555197][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001 [ 259.555207][ C1] R10: ffffffff9088aed7 R11: ffffffff9ae2ea38 R12: 0000000000000000 [ 259.555216][ C1] R13: dffffc0000000000 R14: 1ffff920001411ad R15: ffff8881443b4418 [ 259.555227][ C1] FS: 00007febec9856c0(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 259.555242][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.555252][ C1] CR2: 00007febec984f98 CR3: 0000000035bcc000 CR4: 00000000003526f0 [ 259.555263][ C1] Call Trace: [ 259.555267][ C1] [ 259.555274][ C1] dummy_timer+0x1e8b/0x3ad0 [ 259.555303][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 259.555337][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 259.555359][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 259.555382][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 259.555402][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 259.555421][ C1] ? mark_held_locks+0x49/0x80 [ 259.555438][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 259.555457][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 259.555475][ C1] __hrtimer_run_queues+0x202/0xc40 [ 259.555506][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 259.555527][ C1] ? read_tsc+0x9/0x20 [ 259.555557][ C1] hrtimer_run_softirq+0x17d/0x350 [ 259.555583][ C1] handle_softirqs+0x219/0x950 [ 259.555613][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 259.555642][ C1] __irq_exit_rcu+0x109/0x170 [ 259.555664][ C1] irq_exit_rcu+0x9/0x30 [ 259.555684][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 259.555702][ C1] [ 259.555712][ C1] [ 259.555719][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 259.555736][ C1] RIP: 0010:write_comp_data+0x18/0x90 [ 259.555752][ C1] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 27 c3 f3 11 65 8b 05 38 c3 f3 11 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 [ 259.555766][ C1] RSP: 0018:ffffc90003367a10 EFLAGS: 00000202 [ 259.555779][ C1] RAX: 0000000000000001 RBX: ffff8880b84431e0 RCX: ffffffff81b28971 [ 259.555789][ C1] RDX: ffff88802b72c980 RSI: 0000000000000000 RDI: 0000000000000005 [ 259.555798][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 259.555807][ C1] R10: 0000000000000001 R11: ffff88802b72d4b0 R12: dffffc0000000000 [ 259.555817][ C1] R13: ffffed101708863d R14: 0000000000000001 R15: 0000000000000000 [ 259.555835][ C1] ? smp_call_function_many_cond+0xe21/0x15e0 [ 259.555860][ C1] smp_call_function_many_cond+0xe21/0x15e0 [ 259.555883][ C1] ? __pfx_retrigger_next_event+0x10/0x10 [ 259.555915][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 259.555932][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 259.555954][ C1] ? find_held_lock+0x2b/0x80 [ 259.555980][ C1] ? mark_held_locks+0x49/0x80 [ 259.555997][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 259.556018][ C1] clock_was_set+0x642/0x870 [ 259.556041][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 259.556065][ C1] do_adjtimex+0x221/0x330 [ 259.556086][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 259.556125][ C1] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 259.556147][ C1] __do_sys_clock_adjtime+0x175/0x290 [ 259.556169][ C1] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 259.556191][ C1] ? find_held_lock+0x2b/0x80 [ 259.556233][ C1] ? do_user_addr_fault+0x843/0x1370 [ 259.556257][ C1] ? rcu_is_watching+0x12/0xc0 [ 259.556275][ C1] do_syscall_64+0xcd/0xf80 [ 259.556312][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.556327][ C1] RIP: 0033:0x7febebb8f749 [ 259.556342][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.556356][ C1] RSP: 002b:00007febec985038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 259.556369][ C1] RAX: ffffffffffffffda RBX: 00007febebde6090 RCX: 00007febebb8f749 [ 259.556379][ C1] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 259.556389][ C1] RBP: 00007febebc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 259.556398][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.556407][ C1] R13: 00007febebde6128 R14: 00007febebde6090 R15: 00007fffa11a2918 [ 259.556435][ C1]