last executing test programs: 8.547922331s ago: executing program 3 (id=480): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x0, 0x8}) setresuid(0xee01, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x0, r3}) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) getuid() r6 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000440)='<', 0x1, r4) keyctl$unlink(0x9, r6, r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x13) r7 = socket(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0xa, 0x9, 0x77, 0x500000000000000, 0x3]}, &(0x7f0000000140)=0x78) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@rand_addr=0xfeffffff}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r9, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x64, 0x0, 0x0, 0x804c040}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.481604673s ago: executing program 2 (id=481): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e2ff000000000000faffffff00000000000001000000000aa58173efb4656eec055f80abe300801362b578da507a7907d69db2c19701aa9d2d4ac748356e77207a1672d3d09bed2b1bfed94fa7fd114831bfd499e3333e10a88161bb0e02777e5b08acd30a6765bab6dc99ffcc070263b71e5ed5fd4e7a"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000000d06010400000000000000000000000516000300686173683a6e65742c706f72742c6e65740000000500010007000000ded794dd29a60f42a18d1a7c99af6ccaf9a5528e100e109c0fab99d9986779711cb840b25a0000"], 0x34}}, 0x4000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, &(0x7f0000000100), &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 8.224662782s ago: executing program 2 (id=484): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x4, 0xfd}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000003c0)) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) (async) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) (async) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffb, 0x0, 0x28, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) (async) syz_pidfd_open(0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) fsopen(&(0x7f00000000c0)='omfs\x00', 0x0) (async) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 7.719293501s ago: executing program 1 (id=486): keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7, 0x80000001, 0x4, 0x20, 0x5, 0xff}, 0x9c) fsmount(0xffffffffffffffff, 0x1, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$link(0x8, r3, r3) prlimit64(0x0, 0xd, &(0x7f0000000080)={0x5, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40010040, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r8, 0x1, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000023c0)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_macvtap\x00', {}, 'pim6reg1\x00', {}, 0x1c, 0x18}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xfffc, 0x0, 0x7fffffbf, 0x3d8, 'snmp_trap\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) close(r7) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x8, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}, 0x1, 0x0, 0x0, 0x4004081}, 0x0) execve(&(0x7f0000019140)='./file0\x00', 0x0, &(0x7f0000000040)={[&(0x7f0000000200)=' ']}) 7.264600297s ago: executing program 3 (id=489): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0xffff, 0xffffffde, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x4, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f00000001c0)="0b08b212f35e64e1f7e54bb820fc75ee92fc684c205a68dd5fdb2c91352542865fb177f494c0596acf5e2e0f69bfea59499fb056530999aa661f397e51b6299f05aae304b5aabda2cbb7a76bdfb7e5afa1b5f66f5b368c6637a0a8b204e4984d7e2dc94c8418e5fd02c8db5586f9fc3d8425ee100f4e924bdc785bebe41ae7d779014ef6e48d0068ca40434b5e3927651b4223fe6dfe8a9785f22189ba785adb902f65371ecbdacb197b57f3bd6d8176f0ffd349", 0xb4) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000180)=0x4, 0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f0000000640)=0x13) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x15, &(0x7f0000000140)=0x3, 0x4) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ftruncate(r4, 0x8000000000000001) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r9, 0x701, 0x0, 0x25dfdbfc, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4c000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) ioctl$TCSETA(r4, 0x5406, 0x0) 7.261318721s ago: executing program 4 (id=490): open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x0) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="7ce4", 0x2}], 0x1, 0x0, 0x0, 0x40011}, 0x20048000) r6 = accept4(r5, 0x0, 0x0, 0x0) socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4040005) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async, rerun: 32) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='dyn']) (async) r7 = memfd_secret(0x80000) ftruncate(r7, 0x3) (async) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f000079e000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r7, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r8, 0x118, &(0x7f0000000a00)=0x1, 0x0, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200600, 0x121, 0x1}, 0x18) 6.948406022s ago: executing program 3 (id=491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r0}, 0x18) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fdd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48d0}, 0x24004045) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x20000000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000007440), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r6 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xc}, {0xf, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2fc5890}, @TCA_INGRESS_BLOCK={0x8}]}, 0x34}}, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x10, r10, 0x100000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x5, @val=@tracing={0x0, 0x7}}, 0x20) 6.883967082s ago: executing program 4 (id=492): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.316640186s ago: executing program 1 (id=493): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000009f000/0x2000)=nil, 0x2000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00007000fcdbdf250a0014070000000810000000"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000003d0001071000"], 0x18}}, 0x880) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2, 0x0, r6}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000040)={@private2, r6}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x200000000000000c, &(0x7f00000000c0)}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x91ee, 0x1, 0x1, 0x0, 0x2, 0x80}, &(0x7f00000002c0)=0x20) 6.135169645s ago: executing program 2 (id=494): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000000000008000500", @ANYRES32=r1, @ANYBLOB="0c000880050004000100000008000600f200000008200500", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) fallocate(0xffffffffffffffff, 0x0, 0x7, 0x81) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}, 0xfffffffa}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0xa15, @dev={0xfe, 0x80, '\x00', 0x24}, 0x3}], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000142bf82b30b5e2116d6857d7"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000a40)={@remote, @multicast, @void, {@llc={0x4, {@snap={0xaa, 0x1, 'p', "c50517", 0x86dd}}}}}, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 6.106836732s ago: executing program 3 (id=496): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) r4 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, 0x0, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x48080) keyctl$get_persistent(0x16, 0xffffffffffffffff, r4) (async) keyctl$get_persistent(0x16, 0xffffffffffffffff, r4) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x2fe, 0xe5, 0x0, 0xfe, 0x0}) unshare(0x42000000) 5.668079841s ago: executing program 3 (id=497): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x6, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4080c2, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r8, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac", 0x79}], 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r9, &(0x7f00000051c0)={0x2020}, 0x2020) 5.411473825s ago: executing program 1 (id=498): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc824, 0x5, 0xe3, 0x6, 0x0, 0xe, 0xd, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7ff, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0x2, 0x8, 0xfffffffa, 0xfffffff7, 0x1, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x3, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0x0, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x4, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0xc0002, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x800, 0x6, 0x9, 0x7, 0x3ff, 0x3, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x2, 0x7, 0x200, 0x2, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x7, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0x7f, 0x4, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x0, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x8, 0x4, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10000, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x0, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0x4ebe3ccc, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x3, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 5.363075989s ago: executing program 1 (id=499): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYRES8], 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x11, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xf57, 0x0, 0x0, 0x1f00, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec601d}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) getpid() (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYRES8=r1], 0x18}, 0x40) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0xfffffffd, 0x9}, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x1, 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) (async) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x400, 0x8) (async) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000003c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x0, 0x7e3875a1, 0x40, 0x2, 0x1, 0x5}}) r8 = socket$kcm(0x10, 0x2, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_trie\x00') read$FUSE(r9, &(0x7f0000003680)={0x2020}, 0x2020) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000000440)="ced6bc13b12a9bd967d078208050b801100b0a5969e651b6c348881e46019c822b91cee5a487c035ae490ebcd000a67ab1a9ef122ecbd77923aa6e853ac51bc90c08173cb4dd544f7bee7f90318e7a7e18dee4b39051bf4bf2f5ee5801102fae7b721d6370718eaf81ef", 0x6a}], 0x4}, 0x40) (async) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.283122956s ago: executing program 1 (id=501): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) setitimer(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="c892b6bc436a00"/16, 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmsg$can_raw(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002880)=""/4112, 0x1010}], 0x1}, 0x10000) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000061c0)=@deltfilter={0x107c, 0x2d, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0xb, 0x3}, {0x4, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x104c, 0x2, [@TCA_FLOW_POLICE={0x80c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x7, 0x1ff, 0x24, 0x7f800000, 0xdd0, 0x8001, 0x9, 0x4, 0x8, 0x3, 0x5, 0x6, 0x7f, 0x81, 0x40000000, 0x6, 0x3, 0x9, 0x3, 0x5, 0xebe, 0x4, 0x2, 0x7fff, 0x3, 0x3, 0x0, 0xb, 0x80, 0x9, 0x4, 0x8, 0x1ff, 0x4f, 0x4, 0x7, 0x9, 0xe025, 0xc, 0x2, 0x8a6, 0x5, 0x8, 0x80, 0x8, 0x25e, 0x8, 0x1, 0x1, 0x55ea429a, 0x5, 0x0, 0x8, 0x7, 0x7, 0x80000000, 0x1ff, 0xfffffff3, 0x8, 0x4, 0x9, 0x1, 0x3, 0x4, 0x7fff, 0xee, 0x5d93, 0x4963, 0x2, 0x7, 0x0, 0x8, 0x4, 0x5, 0x1, 0xfffffff9, 0x7, 0x56, 0x1000, 0x0, 0x0, 0xffff0001, 0x6, 0x2, 0x206, 0xa, 0x5, 0x75fba843, 0xfffffffb, 0xb, 0x6, 0x734, 0x7ff, 0xba3, 0x6, 0x2, 0x80000001, 0xf6, 0x1, 0x4, 0x5, 0x47c82681, 0x7fffffff, 0x40, 0x8001, 0x2, 0x7f, 0x6f, 0x3f896bdc, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x3, 0x9, 0xd, 0x1, 0x804, 0x99, 0x5, 0x8, 0x401, 0x1, 0x2, 0x6, 0x7, 0x6, 0xfffffffa, 0x3, 0xff, 0xff, 0x3, 0x8, 0x9, 0x1, 0x7, 0x8, 0x0, 0x5, 0x1, 0x22, 0x10ab, 0xfffffff8, 0xb, 0x8, 0x2, 0x3, 0x100, 0x7ba, 0xcdf, 0xfffff296, 0x3, 0x9, 0x9, 0xff, 0x8, 0x10, 0x8, 0x0, 0x6, 0x6, 0x200, 0x7, 0x6, 0x3, 0x9, 0x4, 0x401, 0x0, 0x0, 0x4, 0x0, 0x80000000, 0x400, 0x80000000, 0x6, 0x9, 0x2, 0x2, 0xe, 0x7, 0x7f, 0x800, 0x7fffffff, 0x2, 0x5, 0x7ff, 0x7f, 0x6, 0xffff, 0x9, 0x2, 0xa, 0x0, 0xb, 0x1, 0x7, 0x4, 0x3, 0x3, 0x6, 0xabb, 0x401, 0xf7b1, 0x3, 0x1, 0x8, 0x75, 0x6, 0x2, 0x1, 0x6, 0x7, 0x8, 0x4, 0x7, 0x8, 0x8, 0xfffffff7, 0x81, 0xe4, 0x2, 0xde, 0xf, 0x7ff, 0x488, 0x3, 0x0, 0x3, 0x5, 0x41, 0xfff, 0x8, 0xa237, 0xff, 0xc3b, 0x7, 0x4, 0x0, 0x4, 0x0, 0xb0, 0x9, 0x6, 0x0, 0xfffffffc, 0x10, 0x64, 0x5, 0x6, 0x8000, 0x8, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1a16, 0x5, 0x8, 0x3, 0x8, 0x7b, 0x7df, 0x6, 0x8, 0x5, 0x800, 0xfff, 0x9318, 0x3, 0x167, 0xfffffffd, 0x5, 0xe6e, 0x0, 0x4, 0x6, 0x9, 0x3, 0x8, 0x9, 0x80000001, 0x8, 0x9, 0x8, 0x6214, 0x200, 0x14, 0x4, 0x168ac436, 0xc00000, 0x7, 0x0, 0x7f, 0x3, 0x4, 0xffff, 0xf, 0x6, 0x7fff, 0xfffffff8, 0x9, 0x9, 0x579a, 0x401, 0x6, 0x1, 0x8, 0x8, 0x9, 0x56b1, 0xd9, 0x80000000, 0xcf, 0x2e, 0x4, 0x24c, 0xffff, 0x5, 0x6, 0xb7a, 0x9, 0x721, 0x5, 0x2, 0x0, 0x6, 0xff, 0xa, 0x10, 0x280, 0x0, 0xfffffffe, 0x1a00000, 0xe, 0x6, 0x200, 0xfffffaf0, 0x3, 0x44a, 0x1, 0x3, 0x4, 0x6, 0x2, 0x8, 0xb81, 0x8000, 0x3, 0x4, 0x10, 0x1, 0x0, 0xde6, 0x2, 0x6, 0x10, 0x50e, 0x5, 0x1000, 0x8, 0x9, 0x1b1, 0x2, 0x4, 0x7, 0x1, 0x8, 0xfe0, 0x7, 0x7, 0x8, 0x1, 0x3, 0xfffffff7, 0x2, 0x7fffffff, 0x80, 0x1, 0xdf6c, 0x5, 0x3, 0x7, 0x4, 0x1ff, 0xfff, 0xfffffffe, 0x7, 0x2f5, 0x0, 0x5, 0x2, 0x7, 0x8, 0xd8c, 0x0, 0x5, 0x4, 0xf6b, 0x50b, 0x2, 0x2, 0x0, 0x3, 0x401, 0x8, 0x68f, 0x3, 0x9, 0x1, 0x5, 0x6, 0xf, 0xc, 0x0, 0x5, 0x4, 0xfffff355, 0x81, 0x6, 0x2, 0xfff, 0x4, 0x9, 0x3, 0xfffffffa, 0x40, 0xa0, 0x3, 0x9, 0x26, 0x8d4, 0x9, 0x2, 0x89, 0x8001, 0x2, 0xec9, 0x5, 0x2000000, 0x8, 0x0, 0x2, 0x5, 0x3, 0x9, 0x9bfb, 0x6, 0x5, 0xb, 0x0, 0xffffffff, 0x3, 0x800, 0x6, 0x2d7a, 0x4, 0x9, 0x5, 0xfffff000, 0x9, 0x6, 0x1, 0x100, 0x2, 0x1, 0x40, 0xb71, 0x8000, 0xfffffffd, 0x5, 0x7fffffff, 0x679b6d7, 0x5, 0x6, 0x1, 0xfffffffd, 0x8, 0xff, 0x14838efb, 0x9, 0x9, 0x7f, 0xc6ea, 0x6, 0x4, 0x5, 0x5, 0x2, 0x1, 0x7, 0x55, 0x8, 0x8, 0x5, 0x7, 0x84, 0x3, 0x0, 0x10000, 0xfffff65a, 0x0, 0x4, 0x9, 0x2, 0x2, 0x62b5, 0x3ff, 0x2, 0x5, 0x1, 0x4]}]}, @TCA_FLOW_ACT={0x83c, 0x9, 0x0, 0x1, [@m_police={0x838, 0x10, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x9, 0x3, 0x0, 0x78db, 0x9, 0x1, 0x2a5, 0x10, 0xa, 0x7, 0x0, 0x9, 0xfffffff8, 0x2, 0x1, 0x5, 0x7, 0x1, 0x400, 0x8000, 0x9, 0x9, 0x5c6, 0x8, 0xca, 0xa, 0x8, 0x80000001, 0xb, 0xfffff625, 0x4, 0x80000000, 0xfff, 0x3800000, 0x478b, 0x2, 0x8, 0x6, 0x55a, 0x1, 0x26416728, 0xff, 0x5, 0x0, 0x7f, 0x7, 0x4, 0x2, 0xfffffffc, 0x1, 0x24, 0xffff, 0x2, 0x3, 0x9, 0xc9, 0x9, 0x9, 0x8b48, 0x6, 0x7, 0x6, 0x1, 0x1, 0x7, 0x8, 0x81, 0x2, 0x7, 0x1, 0xc5, 0x4, 0x5, 0x2, 0x8, 0x2, 0xbde, 0x6, 0x488, 0x1, 0x3, 0x6, 0x3, 0xb5, 0x6, 0x2, 0x5, 0x5, 0x0, 0x5, 0x2, 0x9, 0x10001, 0x0, 0x1000, 0x9, 0x8, 0x8, 0x4, 0x4f50, 0x401, 0xe, 0x42, 0x2, 0x1, 0x7f, 0x800, 0x7, 0x4, 0x1, 0x3, 0x0, 0x7, 0x8, 0x3, 0x0, 0x200, 0x3, 0x5, 0x178000, 0x80000001, 0xfffffff7, 0x7, 0x9, 0x3, 0x7ff, 0x0, 0x461, 0x3c7, 0x8000000, 0xffff, 0x400, 0xfffff38d, 0x6, 0x0, 0x1, 0x2, 0x7, 0x2, 0x0, 0xb, 0x9, 0x3, 0x1, 0x0, 0x10001, 0x4, 0x1, 0x7fff, 0x81, 0x5, 0x7, 0xe, 0x6, 0x0, 0xe36, 0x9782, 0x7, 0x9, 0x0, 0x2a2d, 0x9, 0x8, 0x2, 0x6, 0x7, 0x6, 0x8, 0x9353, 0x81, 0x7, 0x3ff, 0x2, 0x4, 0x8ca, 0x6, 0x7, 0x0, 0x1, 0x100, 0xee0, 0xad, 0x8001, 0x2, 0x9, 0x9, 0x4, 0x5, 0x3, 0xa00, 0x2, 0x1000, 0x4, 0x81, 0x0, 0x0, 0x9, 0xffffffff, 0x8, 0x9, 0xa, 0xa, 0x4, 0x401, 0xf, 0x4f, 0xfffff000, 0x4, 0x9, 0x0, 0xa, 0x7ff, 0x0, 0x7fffffff, 0x200, 0x0, 0xffffff7f, 0x3, 0xc, 0x3, 0x2, 0x0, 0x7, 0x8, 0x2, 0x400, 0x4, 0x1ff, 0xb, 0x1, 0x6a74, 0x7fff, 0x8, 0x2, 0x9d, 0x5, 0x8, 0x8001, 0x2, 0x4, 0x40, 0x4, 0xffff, 0x0, 0x7, 0x3, 0xfffff000, 0x0, 0x95b, 0xfffffff0, 0x65c, 0x6f1, 0x0, 0x2, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x5, 0x4, 0x2, 0x9, 0xfffffff7, 0x24, 0xbf55, 0x10000, 0xd, 0x8138, 0x2, 0x7, 0xfff, 0x0, 0x0, 0x0, 0x8, 0xe, 0x7f, 0x5, 0x4, 0x9, 0x8, 0xbf, 0xc, 0x8, 0x1, 0xe7, 0x7, 0x8, 0x71b2, 0x3, 0x2, 0x9, 0x6da2, 0x2, 0x3, 0x5, 0x5, 0x0, 0x1a, 0x3, 0xdc, 0x6, 0x3, 0x3fe00000, 0x7fffffff, 0x8, 0x7ff, 0x8d, 0xe5, 0xffffffc3, 0x2, 0xa, 0x9, 0x7c35, 0x4, 0x1, 0xbd3, 0x776f, 0x3, 0x73, 0x1, 0xaa, 0xf, 0x9, 0x200, 0x7, 0x700, 0x3, 0xfffffff8, 0xfffffffb, 0x200, 0x5, 0x8, 0x400, 0xb46, 0x8, 0x6322216e, 0x5, 0x62, 0x8, 0x5, 0x5, 0x4, 0x8, 0xff, 0x2, 0x6, 0x2, 0x3ff, 0x2, 0x5, 0x8000, 0x400, 0xae, 0xfffffffb, 0x80000001, 0x4, 0x9, 0x2, 0x3, 0x7, 0x7, 0x0, 0x6, 0x5, 0x0, 0x5e, 0x12, 0xc9, 0x5, 0x97f, 0x26, 0x4, 0x8, 0x0, 0x800, 0x78e, 0x6, 0x9, 0x4, 0x7, 0xc447, 0xa387, 0x5, 0x58, 0x7, 0xffffffff, 0x4, 0x7f, 0x6, 0xffff7fff, 0x1, 0xfffffff8, 0x8, 0x540, 0x80000000, 0x3ff, 0x0, 0xc9, 0xe5b, 0xab, 0xfffffff3, 0x5, 0xfffffffa, 0x3, 0x0, 0x3, 0x81, 0x5, 0x0, 0xefb, 0x4, 0x2, 0x6, 0x3, 0x2458, 0x1, 0x6, 0xc, 0x1ff, 0x4e67, 0xffff, 0xfff, 0x7081, 0x3b4e, 0xd38d, 0x10000, 0x3, 0x0, 0x63a2, 0x7fffffff, 0x7, 0x401, 0x3, 0x400, 0x6, 0x43e70000, 0x7, 0x9, 0x2, 0x8f2a, 0xda16, 0x925, 0x0, 0x7, 0x9, 0x5, 0x1, 0x4140, 0xa4000000, 0x1, 0x9, 0x101, 0x7, 0x8, 0x10001, 0xfffffff7, 0xfffffffc, 0x2, 0x180, 0x7, 0x7f, 0x7, 0x1, 0x8000, 0xf86c, 0x2, 0x9, 0x5, 0xc, 0x4, 0xb1c, 0x5, 0x2, 0x8cf0000, 0x947, 0x5, 0x4, 0x8, 0x10, 0x5, 0x40000000, 0x0, 0xaaf8, 0x8a1, 0x8, 0x7fff, 0x6cc, 0x0, 0x6, 0x9, 0x5, 0xfffffffb, 0xee0, 0x4, 0x6, 0x2, 0x7, 0x10001, 0x7, 0xfffffffd, 0x4, 0x5, 0x4, 0x44, 0x400, 0xd, 0xf, 0x8, 0xb3f4, 0x8, 0x0, 0x3]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x107c}, 0x1, 0x0, 0x0, 0xd816451b076636a9}, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$inet_udp(0x2, 0x2, 0x0) 5.189284084s ago: executing program 2 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r5, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 5.100955924s ago: executing program 0 (id=503): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8971000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 5.000046284s ago: executing program 0 (id=504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000580)=""/78, 0x4e}, 0x7f}, {{0x0, 0x0, 0x0}, 0xfffffff8}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000003080), 0x0, 0x140, &(0x7f0000003140)) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = mq_open(0x0, 0x42, 0x0, 0x0) mq_notify(r4, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) ioctl$TIOCSETD(r5, 0x5423, 0x0) readv(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0xca6a, 0x40, 0x3, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000480), 0x66) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) 3.835415101s ago: executing program 2 (id=505): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d1}, 0x404c800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x2000, [{0x0, 0x1}]}]}}, &(0x7f0000000100)=""/226, 0x3e, 0xe2, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r6 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\"\xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x5) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.47819935s ago: executing program 0 (id=506): syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x100) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000180), 0x4) madvise(&(0x7f000030f000/0x3000)=nil, 0x3000, 0x15) gettid() prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r5 = socket(0x26, 0x800, 0xffffffff) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000140)=r1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 3.392518225s ago: executing program 4 (id=507): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r6 = dup(r5) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x8800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 2.230710984s ago: executing program 2 (id=508): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc2000000000001090224000100000003090400000103000300092130b4000122060009058103"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x4, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000380)="6466f081af9c6b000000000f9251780f01c3c744240025000000c7442402fd9a0000c7442406000000000f011c2466baa00066b83bfb66efb9da090000b80b000000ba000000000f30400f2212c401b4586eba66baf80cb8648df680ef66bafc0cb862f80000ef470f01cf", 0x6b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(r1, 0x4068aea3, &(0x7f0000000140)) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x7) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001100)={0x2, 0x8000}, 0x4) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x6, 0x6, @remote}, 0x14) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r8, 0x3, &(0x7f00000000c0)=0x7ff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r11 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r11, 0xc0105502, &(0x7f0000002a40)) 1.441444379s ago: executing program 4 (id=509): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = getpgid(0x0) getpgid(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r4, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(r3, 0x7, &(0x7f00000000c0)={0x401}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local, {[@end]}}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x800}}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000440)={0x3, 0x6572, 0x1ff}) mmap(&(0x7f0000c00000/0x2000)=nil, 0x2000, 0x1, 0x13, r5, 0x100000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) 1.224324554s ago: executing program 0 (id=510): getpid() sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r0, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f00000004c0)={0x4, 0xfffffffc, 0x8, 0x16, 0x100, &(0x7f0000000a00)="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"}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0xb8, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x86dd, @udp={{0x10, 0x4, 0x0, 0x5, 0xaa, 0x64, 0x0, 0x5, 0x11, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x2c, 0xa6, 0x3, 0x6, [{@empty, 0x4}, {@multicast2, 0x9}, {@empty, 0xfffffffc}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x721}]}]}}, {0x4e20, 0x4e21, 0x6a, 0x0, @gue={{0x1, 0x1, 0x0, 0xf8, 0x100, @void}, "54d9d0f7a5e19dd595f5c3b2f8676d9d8446ac7a2db301f68b1a61bc91b97c44c02d7741f2fade3c13f53f1bd948cd655e630dff42c24aab1fa09d4e76af5a6d7c91362f22cd05f12f88e8306469516e8d0c2863015f63a76f6d0c2fec71"}}}}}}, 0x0) 1.080674848s ago: executing program 0 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 316.937242ms ago: executing program 0 (id=512): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000001c0)={0x5, 0x1, 0x7, 0xfc, 0x2, 0x174f}) r4 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000140)={0x6, 0x1, 0x9, 0x3, &(0x7f0000000780)=[{}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x228, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x1fc, 0x2, [@TCA_U32_SEL={0x1e4, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x2, 0x400000, 0x0, 0x2}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x2}, {0x401, 0xffffffff, 0x6, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x2, 0x5b61, 0x0, 0xe37}, {0xfffffffe, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x2, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0xa, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0xa}, {0x7fffffff, 0x54, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0x6, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}]}}]}, 0x228}}, 0x40040c5) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4606, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034001680300001802c000c801400010003000000dd07000037bf000081000000140001"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) 248.531996ms ago: executing program 4 (id=513): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000000, 0x2010, 0xffffffffffffffff, 0xa5b06000) (async) read$midi(0xffffffffffffffff, &(0x7f0000000000)=""/215, 0xd7) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r1 = fsopen(&(0x7f0000000200)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) (async, rerun: 64) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async, rerun: 64) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000000)={{@host}, @host, 0x0, 0x0, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x4}, @any, 0x8, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x8, 0x1}) (async, rerun: 64) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000001c0)={{@my=0x1, 0x3}, @host, 0x4, 0x10000, 0x1, 0x0, 0xfffffffffffffffb, 0xfff, 0x4b87}) (async, rerun: 64) fanotify_init(0xf00, 0x0) (async, rerun: 64) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) unshare(0x22020400) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac, 0xfffffffffffffff9, 0x0, 0x0, 0x4}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) r4 = userfaultfd(0x80001) (async, rerun: 64) getpeername$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@bridge_setlink={0x24, 0x13, 0x400, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r5, 0x421, 0x10010}, [@IFLA_IFALIASn={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) poll(&(0x7f0000000280)=[{r4, 0x1092}], 0x1, 0x7fff) (async) migrate_pages(0x0, 0x3, &(0x7f0000000200)=0x7f, &(0x7f0000000300)=0xa) (async) openat$null(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) 206.162374ms ago: executing program 3 (id=514): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30}, 0x31) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x4004743a, &(0x7f0000000300)) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x209b, 0x4, 0x0, 0x7096}, 0x10) write(r6, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) 158.4083ms ago: executing program 1 (id=515): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x3a, 0x1, 0x0, &(0x7f0000000100)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) write$binfmt_register(r5, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) socket(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_FLUSH(r4, 0x0, 0x480c4) r6 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r6) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8, @broadcast}}]}]}]}, 0x64}}, 0x0) 0s ago: executing program 4 (id=516): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000001a0000de00000000000014000780080006400000000005001500010000000500010006000000050005000200000005000400030000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) io_uring_setup(0x1234, &(0x7f0000000080)={0x0, 0x893f, 0x800, 0x2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800100b, r3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r5, 0x0, 0x4) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045009, &(0x7f0000000040)) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xfffffe5c) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r6, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r9, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x20) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): RNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 79.651594][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 80.076186][ T6036] Attempt to restore checkpoint with obsolete wellknown handles [ 80.971062][ T6051] bridge0: port 3(gretap0) entered blocking state [ 80.977988][ T6051] bridge0: port 3(gretap0) entered disabled state [ 80.985088][ T6051] gretap0: entered allmulticast mode [ 80.998441][ T6051] gretap0: entered promiscuous mode [ 81.007696][ T6051] bridge0: port 3(gretap0) entered blocking state [ 81.014356][ T6051] bridge0: port 3(gretap0) entered forwarding state [ 81.776487][ T9] cfg80211: failed to load regulatory.db [ 83.088538][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 83.088553][ T30] audit: type=1400 audit(1767348775.360:195): avc: denied { create } for pid=6054 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.156529][ T30] audit: type=1400 audit(1767348775.380:196): avc: denied { allowed } for pid=6054 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.229152][ T30] audit: type=1400 audit(1767348775.390:197): avc: denied { cmd } for pid=6054 comm="syz.3.27" path="socket:[9430]" dev="sockfs" ino=9430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.274101][ T9] usb 5-1: USB disconnect, device number 3 [ 84.358868][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 84.368292][ T30] audit: type=1400 audit(1767348775.390:198): avc: denied { bind } for pid=6054 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.399933][ T30] audit: type=1400 audit(1767348775.390:199): avc: denied { accept } for pid=6054 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.480337][ T30] audit: type=1400 audit(1767348775.390:200): avc: denied { setopt } for pid=6054 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.714135][ T30] audit: type=1400 audit(1767348775.390:201): avc: denied { write } for pid=6054 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.733620][ T30] audit: type=1400 audit(1767348775.440:202): avc: denied { write } for pid=6054 comm="syz.3.27" path="socket:[9435]" dev="sockfs" ino=9435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.770901][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 84.835579][ T10] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 84.848565][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.875661][ T10] usb 4-1: Product: syz [ 84.881207][ T30] audit: type=1400 audit(1767348777.150:203): avc: denied { shutdown } for pid=6071 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.916106][ T10] usb 4-1: Manufacturer: syz [ 84.931107][ T10] usb 4-1: SerialNumber: syz [ 84.943968][ T10] usb 4-1: config 0 descriptor?? [ 85.812884][ T30] audit: type=1400 audit(1767348777.660:204): avc: denied { read } for pid=6075 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.836065][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 85.844117][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 85.855043][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 85.970840][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.002872][ T6083] Attempt to restore checkpoint with obsolete wellknown handles [ 86.037289][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.058844][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.109041][ T24] usb 5-1: device descriptor read/64, error -71 [ 86.616692][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.841473][ T24] usb 5-1: device descriptor read/64, error -71 [ 86.899516][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 86.948991][ T6101] netlink: 'syz.2.35': attribute type 7 has an invalid length. [ 87.052813][ T24] usb usb5-port1: attempt power cycle [ 87.458069][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 87.537724][ T5883] usb 4-1: USB disconnect, device number 3 [ 87.559938][ T24] usb 5-1: device descriptor read/8, error -71 [ 87.847989][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 88.098467][ T24] usb 5-1: device not accepting address 7, error -71 [ 88.106211][ T24] usb usb5-port1: unable to enumerate USB device [ 88.136810][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 88.136824][ T30] audit: type=1400 audit(1767348780.400:257): avc: denied { name_bind } for pid=6120 comm="syz.4.40" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 88.176390][ T5896] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 88.187305][ T30] audit: type=1400 audit(1767348780.440:258): avc: denied { node_bind } for pid=6120 comm="syz.4.40" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 88.330296][ T5896] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 88.338498][ T5896] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 88.354421][ T5896] usb 4-1: config 0 has no interface number 1 [ 88.366040][ T5896] usb 4-1: config 0 has no interface number 2 [ 88.380245][ T5896] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 88.390071][ T30] audit: type=1400 audit(1767348780.660:259): avc: denied { map_create } for pid=6126 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.432950][ T30] audit: type=1400 audit(1767348780.690:260): avc: denied { perfmon } for pid=6126 comm="syz.0.42" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.455735][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.601400][ T30] audit: type=1400 audit(1767348780.690:261): avc: denied { map_read map_write } for pid=6126 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.644722][ T5896] usb 4-1: config 0 descriptor?? [ 88.684293][ T30] audit: type=1400 audit(1767348780.950:262): avc: denied { create } for pid=6128 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 88.997420][ T30] audit: type=1400 audit(1767348780.980:263): avc: denied { write } for pid=6128 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.017582][ T5896] qcserial 4-1:0.3: Qualcomm USB modem converter detected [ 89.102770][ T30] audit: type=1400 audit(1767348780.990:264): avc: denied { read } for pid=6128 comm="syz.1.43" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 89.127607][ T30] audit: type=1400 audit(1767348780.990:265): avc: denied { open } for pid=6128 comm="syz.1.43" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 89.201637][ T6081] usb 4-1: USB disconnect, device number 4 [ 89.240457][ T6081] qcserial 4-1:0.3: device disconnected [ 89.248430][ T30] audit: type=1400 audit(1767348781.140:266): avc: denied { prog_run } for pid=6128 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.384825][ T6133] wg2: entered promiscuous mode [ 89.419760][ T6133] wg2: entered allmulticast mode [ 89.642808][ T6154] warning: `syz.2.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.162542][ T6178] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 91.259422][ T6183] netlink: 48 bytes leftover after parsing attributes in process `syz.3.55'. [ 91.529754][ T6181] bond1 (unregistering): Released all slaves [ 91.774123][ T6199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.861368][ T6214] IPVS: ip_vs_add_dest(): server weight less than zero [ 93.778661][ T50] IPVS: starting estimator thread 0... [ 94.228081][ T6215] IPVS: using max 52 ests per chain, 124800 per kthread [ 94.388711][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 94.388726][ T30] audit: type=1400 audit(1767348786.660:327): avc: denied { create } for pid=6225 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.460933][ T30] audit: type=1400 audit(1767348786.690:328): avc: denied { create } for pid=6222 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.241029][ T6237] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 95.340617][ T30] audit: type=1400 audit(1767348787.610:329): avc: denied { name_connect } for pid=6236 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 95.371037][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.69'. [ 95.404902][ T30] audit: type=1400 audit(1767348787.630:330): avc: denied { listen } for pid=6236 comm="syz.3.68" lport=33754 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.451865][ T6238] overlayfs: missing 'lowerdir' [ 95.462586][ T30] audit: type=1400 audit(1767348787.630:331): avc: denied { accept } for pid=6236 comm="syz.3.68" lport=33754 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.495645][ T30] audit: type=1400 audit(1767348787.630:332): avc: denied { write } for pid=6236 comm="syz.3.68" lport=33754 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 95.539955][ T30] audit: type=1400 audit(1767348787.640:333): avc: denied { setopt } for pid=6236 comm="syz.3.68" lport=33754 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 95.765323][ T6256] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 95.772057][ T30] audit: type=1400 audit(1767348787.680:334): avc: denied { write } for pid=6236 comm="syz.3.68" name="icmp6" dev="proc" ino=4026533477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 95.801648][ T6237] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 95.926227][ T30] audit: type=1400 audit(1767348788.010:335): avc: denied { read write } for pid=6257 comm="syz.3.73" name="vbi2" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 96.017616][ T5896] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.097530][ T30] audit: type=1400 audit(1767348788.010:336): avc: denied { open } for pid=6257 comm="syz.3.73" path="/dev/vbi2" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 96.296009][ T5896] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 96.327992][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.531884][ T5896] usb 4-1: Product: syz [ 96.536144][ T5896] usb 4-1: Manufacturer: syz [ 96.903885][ T5896] usb 4-1: SerialNumber: syz [ 96.933723][ T5896] usb 4-1: config 0 descriptor?? [ 97.193095][ T5896] hso 4-1:0.0: Failed to find BULK IN ep [ 97.259456][ T5896] usb-storage 4-1:0.0: USB Mass Storage device detected [ 97.446472][ T5896] usb 4-1: USB disconnect, device number 5 [ 98.820762][ T50] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.930596][ T6310] ======================================================= [ 98.930596][ T6310] WARNING: The mand mount option has been deprecated and [ 98.930596][ T6310] and is ignored by this kernel. Remove the mand [ 98.930596][ T6310] option from the mount to silence this warning. [ 98.930596][ T6310] ======================================================= [ 98.972608][ T6310] 9p: Bad value for 'rfdno' [ 99.008835][ T5944] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.026121][ T50] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.057822][ T5944] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.084144][ T50] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.104449][ T50] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 99.122805][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.167867][ T50] usb 2-1: SerialNumber: syz [ 99.487583][ T50] usb 2-1: 0:2 : does not exist [ 99.522913][ T6316] fido_id[6316]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.552648][ T50] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 99.675601][ T50] usb 2-1: USB disconnect, device number 3 [ 99.717066][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 99.717082][ T30] audit: type=1400 audit(1767348791.980:354): avc: denied { read write } for pid=6325 comm="syz.2.87" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 99.793139][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.818281][ T30] audit: type=1400 audit(1767348791.980:355): avc: denied { open } for pid=6325 comm="syz.2.87" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 99.876662][ T30] audit: type=1400 audit(1767348792.050:356): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 99.909846][ T6328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.88'. [ 99.920151][ T6328] bond0: ARP target 170.170.170.170 is already present [ 99.926996][ T6328] bond0: option arp_ip_target: invalid value (2863311530) [ 99.944457][ T30] audit: type=1400 audit(1767348792.090:357): avc: denied { mount } for pid=6325 comm="syz.2.87" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 100.148049][ T5896] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.165436][ T30] audit: type=1400 audit(1767348792.140:358): avc: denied { write } for pid=6325 comm="syz.2.87" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 100.298326][ T30] audit: type=1400 audit(1767348792.140:359): avc: denied { open } for pid=6325 comm="syz.2.87" path="/19/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 100.324430][ T6337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6337 comm=syz.1.92 [ 100.358016][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 100.373027][ T5896] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 100.388504][ T6345] SELinux: security_context_str_to_sid (3) failed with errno=-22 [ 100.481490][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 100.500588][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.508882][ T30] audit: type=1400 audit(1767348792.660:360): avc: denied { mounton } for pid=6341 comm="syz.0.91" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.535901][ T6346] fuse: Bad value for 'group_id' [ 100.540920][ T6346] fuse: Bad value for 'group_id' [ 100.584736][ T5896] usb 3-1: Product: syz [ 100.593529][ T5896] usb 3-1: Manufacturer: syz [ 100.602302][ T5896] usb 3-1: SerialNumber: syz [ 100.672189][ T5896] r8152-cfgselector 3-1: Unknown version 0x0000 [ 100.692936][ T30] audit: type=1400 audit(1767348792.750:361): avc: denied { read write } for pid=6341 comm="syz.0.91" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 100.727447][ T5896] r8152-cfgselector 3-1: config 0 descriptor?? [ 100.840906][ T30] audit: type=1400 audit(1767348792.750:362): avc: denied { ioctl open } for pid=6341 comm="syz.0.91" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 100.869206][ T30] audit: type=1400 audit(1767348792.800:363): avc: denied { mounton } for pid=6341 comm="syz.0.91" path="/21/file0" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.023126][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.94'. [ 101.146019][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 101.348550][ T9] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 102.341301][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.688017][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 102.788296][ T9] usb 5-1: config 2 has an invalid interface number: 13 but max is 0 [ 102.846434][ T9] usb 5-1: config 2 has no interface number 0 [ 102.865543][ T9] usb 5-1: config 2 interface 13 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.897993][ T9] usb 5-1: config 2 interface 13 has no altsetting 0 [ 103.060953][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=52.92 [ 103.122648][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.135254][ T9] usb 5-1: Product: syz [ 103.145397][ T9] usb 5-1: Manufacturer: syz [ 103.263540][ T9] usb 5-1: SerialNumber: syz [ 104.539582][ T6403] vivid-001: disconnect [ 104.545370][ T6403] vivid-001: reconnect [ 105.091062][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'. [ 105.100852][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 105.100861][ T30] audit: type=1400 audit(1767348797.370:369): avc: denied { write } for pid=6407 comm="syz.3.106" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.194337][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.265663][ T6413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6413 comm=syz.1.108 [ 105.480691][ T5883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.603364][ T9] usb 5-1: USB disconnect, device number 8 [ 105.740417][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.13/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.865796][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 105.881432][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.898910][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.909059][ T5883] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 105.919288][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.950058][ T5883] usb 1-1: config 0 descriptor?? [ 106.009660][ T5896] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.168417][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 106.177323][ T5896] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 106.196630][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.213405][ T5896] usb 2-1: Product: syz [ 106.224903][ T5896] usb 2-1: Manufacturer: syz [ 106.233814][ T5896] usb 2-1: SerialNumber: syz [ 106.254190][ T5896] usb 2-1: config 0 descriptor?? [ 106.274622][ T5896] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 106.390318][ T5883] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 106.579761][ T5883] ft260 0003:0403:6030.0002: failed to retrieve chip version [ 106.820720][ T5883] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -71 [ 106.848280][ T5883] usb 1-1: USB disconnect, device number 4 [ 106.909808][ T6438] xt_bpf: check failed: parse error [ 106.924493][ T30] audit: type=1400 audit(1767348799.170:370): avc: denied { mount } for pid=6431 comm="syz.3.114" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 107.224046][ T30] audit: type=1400 audit(1767348799.490:371): avc: denied { read } for pid=6439 comm="syz.4.115" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.338024][ T30] audit: type=1400 audit(1767348799.490:372): avc: denied { open } for pid=6439 comm="syz.4.115" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.538221][ T30] audit: type=1400 audit(1767348799.490:373): avc: denied { ioctl } for pid=6439 comm="syz.4.115" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.130590][ T30] audit: type=1400 audit(1767348799.970:374): avc: denied { setattr } for pid=6440 comm="syz.2.116" name="SCTPv6" dev="sockfs" ino=10675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.212449][ T6459] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 109.214228][ T6081] usb 2-1: USB disconnect, device number 4 [ 109.219191][ T6459] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 109.250413][ T6459] vhci_hcd vhci_hcd.0: Device attached [ 109.379185][ T6461] vhci_hcd: connection closed [ 109.396570][ T36] vhci_hcd vhci_hcd.3: stop threads [ 109.777174][ T36] vhci_hcd vhci_hcd.3: release socket [ 109.803248][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 109.984860][ T30] audit: type=1400 audit(1767348802.250:375): avc: denied { ioctl } for pid=6471 comm="syz.0.122" path="socket:[10899]" dev="sockfs" ino=10899 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.064990][ T30] audit: type=1400 audit(1767348802.310:376): avc: denied { nlmsg_write } for pid=6471 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.086375][ T6081] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.270861][ T6081] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.281193][ T6081] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.292789][ T5927] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 110.300592][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'. [ 110.302129][ T6081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 110.309937][ T30] audit: type=1400 audit(1767348802.570:377): avc: denied { mount } for pid=6480 comm="syz.4.121" name="/" dev="hugetlbfs" ino=11398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 110.320615][ T6081] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 110.401317][ T6081] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 110.476444][ T6081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.568039][ T5927] usb 1-1: not running at top speed; connect to a high speed hub [ 110.569560][ T30] audit: type=1400 audit(1767348802.660:378): avc: denied { accept } for pid=6480 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.577432][ T5927] usb 1-1: config 255 has an invalid interface number: 4 but max is 2 [ 110.753977][ T6081] usb 2-1: Product: syz [ 110.785163][ T6081] usb 2-1: Manufacturer: syz [ 110.835954][ T5927] usb 1-1: config 255 has an invalid descriptor of length 1, skipping remainder of the config [ 110.836087][ T6081] usb 2-1: SerialNumber: syz [ 110.855295][ T5927] usb 1-1: config 255 has 1 interface, different from the descriptor's value: 3 [ 111.078057][ T5927] usb 1-1: config 255 has no interface number 0 [ 111.086428][ T5927] usb 1-1: config 255 interface 4 altsetting 1 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 111.086725][ T30] audit: type=1400 audit(1767348802.660:379): avc: denied { write } for pid=6480 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.098111][ T6081] usb 2-1: config 0 descriptor?? [ 111.118370][ T30] audit: type=1400 audit(1767348802.700:380): avc: denied { read } for pid=6480 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.166910][ T5927] usb 1-1: config 255 interface 4 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 111.186220][ T5927] usb 1-1: config 255 interface 4 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 111.202792][ T6081] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 111.230161][ T5927] usb 1-1: config 255 interface 4 altsetting 1 endpoint 0x7 has invalid maxpacket 511, setting to 64 [ 111.241931][ T30] audit: type=1400 audit(1767348802.870:381): avc: denied { bind } for pid=6479 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.262852][ T6081] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 111.281574][ T5927] usb 1-1: config 255 interface 4 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 111.296040][ T6081] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 111.314757][ T5927] usb 1-1: config 255 interface 4 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 10 [ 111.359111][ T5927] usb 1-1: config 255 interface 4 has no altsetting 0 [ 111.377604][ T5927] usb 1-1: New USB device found, idVendor=2001, idProduct=7e19, bcdDevice=43.f9 [ 111.387125][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.397645][ T5927] usb 1-1: Product: Ѝ [ 111.432283][ T5927] usb 1-1: Manufacturer: а [ 111.436913][ T5927] usb 1-1: SerialNumber: ఇ [ 111.538011][ T5896] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.748006][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 112.056189][ T5927] usb 1-1: USB disconnect, device number 5 [ 112.067045][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.082057][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.092252][ T5896] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 112.101968][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.116572][ T5896] usb 4-1: config 0 descriptor?? [ 112.139216][ T5896] hub 4-1:0.0: USB hub found [ 112.345783][ T5896] hub 4-1:0.0: 1 port detected [ 112.541429][ T5927] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 112.562122][ T5928] usb 2-1: USB disconnect, device number 5 [ 112.577426][ T5928] garmin_gps 2-1:0.0: device disconnected [ 112.682885][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.698418][ T5927] usb 5-1: device descriptor read/64, error -71 [ 112.798141][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.806605][ T30] audit: type=1400 audit(1767348805.070:382): avc: denied { create } for pid=6501 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 112.988381][ T5927] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.999414][ T6494] overlayfs: missing 'lowerdir' [ 113.048194][ T5928] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 113.123722][ T30] audit: type=1400 audit(1767348805.100:383): avc: denied { listen } for pid=6501 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 113.236539][ T5927] usb 5-1: device descriptor read/64, error -71 [ 113.424942][ T30] audit: type=1400 audit(1767348805.100:384): avc: denied { accept } for pid=6501 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 113.469540][ T5927] usb usb5-port1: attempt power cycle [ 113.772137][ T6512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.955400][ T5927] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 114.383928][ T5927] usb 5-1: device descriptor read/8, error -71 [ 114.720163][ T30] audit: type=1400 audit(1767348806.990:385): avc: denied { create } for pid=6521 comm="syz.1.136" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.762187][ T10] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 114.769545][ T5927] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 114.801151][ T5927] usb 5-1: device descriptor read/8, error -71 [ 114.928480][ T30] audit: type=1400 audit(1767348807.050:386): avc: denied { write } for pid=6521 comm="syz.1.136" name="file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.999114][ T5927] usb usb5-port1: unable to enumerate USB device [ 115.120793][ T6533] process 'syz.2.139' launched './file0' with NULL argv: empty string added [ 115.764675][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 115.764689][ T30] audit: type=1400 audit(1767348808.030:400): avc: denied { unlink } for pid=5819 comm="syz-executor" name="file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.824461][ T6535] syzkaller0: entered promiscuous mode [ 115.854122][ T6535] syzkaller0: entered allmulticast mode [ 115.857311][ T30] audit: type=1400 audit(1767348808.120:401): avc: denied { connect } for pid=6542 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.157761][ T30] audit: type=1400 audit(1767348808.420:402): avc: denied { create } for pid=6545 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.218568][ T30] audit: type=1400 audit(1767348808.490:403): avc: denied { write } for pid=6545 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.242689][ T30] audit: type=1400 audit(1767348808.510:404): avc: denied { getopt } for pid=6545 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.561654][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.659145][ T5927] usb 4-1: USB disconnect, device number 6 [ 116.739376][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.750571][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.767447][ T10] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 116.779610][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.792848][ T10] usb 2-1: config 0 descriptor?? [ 117.042856][ T10] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x1 [ 117.052553][ T10] greenasia 0003:0E8F:0012.0003: item fetching failed at offset 3/7 [ 117.062864][ T10] greenasia 0003:0E8F:0012.0003: parse failed [ 117.069235][ T10] greenasia 0003:0E8F:0012.0003: probe with driver greenasia failed with error -22 [ 117.236377][ T10] usb 2-1: USB disconnect, device number 7 [ 117.737583][ T30] audit: type=1400 audit(1767348810.000:405): avc: denied { append } for pid=6572 comm="syz.2.152" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 117.958156][ T5927] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.110489][ T5927] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 32 [ 118.120317][ T5927] usb 4-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.133543][ T5927] usb 4-1: config 1 interface 0 has no altsetting 0 [ 118.141992][ T5927] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 118.151730][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.158026][ T943] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.160544][ T5927] usb 4-1: Product: 怡嚸ꥴ䪘猚窝ᩤ듖碴逇末᪔魯暁ឹ祉諭」淙甤ᭅꜨ䊴슿즯碠衍᡼슳ᛋ᧵눦ᴾ㟰ﲆ῁Ɪ얺䣺ꆚ符㙽ुꑙᢨ挱㦔꬛圇愖嘧밶ㄼる鲾䛡죇蹡 [ 118.199285][ T5927] usb 4-1: Manufacturer: Ъ [ 118.204717][ T5927] usb 4-1: SerialNumber: 辯ե᳘혳囃㓭攗ዩⷬᕢ⭽쨪顋摯ﶏㇱ멫瘸ﭡ㡗컐탣詔띚ꪈ땶㴾袛轶龦牏꽱Ω䫎튅鲐큸ꃛ熏퍜뺢婋夎ⲩ畷⼵꓆吁륈ᇈЦඌ舑釒菩짟㧬⻹↡鐚ꩆ㟻„ԗ䔌躘Ⴢ炻쨠恛뾜삥궡ʂ曀 [ 118.234458][ T6571] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 118.244228][ T6571] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 118.420963][ T6592] program syz.0.157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.487956][ T30] audit: type=1400 audit(1767348810.680:406): avc: denied { read } for pid=6590 comm="syz.0.157" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.514476][ T943] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 118.522503][ T943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.650793][ T943] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 118.663814][ T943] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 118.689835][ T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.707452][ T30] audit: type=1400 audit(1767348810.680:407): avc: denied { open } for pid=6590 comm="syz.0.157" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.749497][ T943] usb 3-1: config 0 descriptor?? [ 118.777224][ T943] usbhid 3-1:0.0: can't add hid device: -22 [ 118.793813][ T943] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 119.086019][ T6588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.096056][ T30] audit: type=1400 audit(1767348811.360:408): avc: denied { create } for pid=6570 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.151175][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.159880][ T6588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.219658][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.228727][ T30] audit: type=1400 audit(1767348811.360:409): avc: denied { ioctl } for pid=6570 comm="syz.3.151" path="socket:[11180]" dev="sockfs" ino=11180 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.289570][ T6608] syz_tun: entered allmulticast mode [ 119.304130][ T5896] usb 4-1: USB disconnect, device number 7 [ 119.355737][ T6607] 9p: Bad value for 'wfdno' [ 119.405767][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 119.462963][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 119.475176][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 119.484216][ T6232] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.511041][ T6232] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.582521][ T6232] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.592177][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 119.601376][ T6232] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.774045][ T6622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.164'. [ 119.786056][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 119.801903][ T6622] netlink: 'syz.4.164': attribute type 20 has an invalid length. [ 119.818063][ T6622] netlink: 'syz.4.164': attribute type 21 has an invalid length. [ 119.945570][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 119.978427][ T5927] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.207969][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 120.224938][ T5927] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 120.237048][ T5927] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.255698][ T5927] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.266570][ T5927] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.314288][ T5927] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.329326][ T5927] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.338663][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.584041][ T5927] usb 1-1: GET_CAPABILITIES returned 0 [ 120.589993][ T5927] usbtmc 1-1:16.0: can't read capabilities [ 120.663999][ T6635] syzkaller0: entered promiscuous mode [ 120.669605][ T6635] syzkaller0: entered allmulticast mode [ 121.054462][ T943] usb 1-1: USB disconnect, device number 6 [ 121.270191][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 121.442811][ T9] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 121.451463][ T9] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 121.461954][ T9] usb 4-1: config 0 has no interface number 1 [ 121.468146][ T9] usb 4-1: config 0 has no interface number 2 [ 121.474299][ T9] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 121.483536][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.498799][ T9] usb 4-1: config 0 descriptor?? [ 121.712259][ T9] qcserial 4-1:0.3: Qualcomm USB modem converter detected [ 121.717313][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 121.717326][ T30] audit: type=1400 audit(1767348813.980:414): avc: denied { ioctl } for pid=6643 comm="syz.0.169" path="socket:[11681]" dev="sockfs" ino=11681 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.971365][ T5927] usb 4-1: USB disconnect, device number 8 [ 121.979759][ T5927] qcserial 4-1:0.3: device disconnected [ 122.049923][ T6647] netlink: 36 bytes leftover after parsing attributes in process `syz.0.169'. [ 122.060533][ T6647] overlayfs: missing 'lowerdir' [ 122.112616][ T50] usb 3-1: USB disconnect, device number 4 [ 122.227315][ T30] audit: type=1400 audit(1767348814.490:415): avc: denied { ioctl } for pid=6650 comm="syz.2.170" path="socket:[11695]" dev="sockfs" ino=11695 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 122.260919][ T30] audit: type=1400 audit(1767348814.520:416): avc: denied { create } for pid=6650 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.320305][ T30] audit: type=1400 audit(1767348814.590:417): avc: denied { module_load } for pid=6653 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 122.341582][ T6654] Invalid ELF header type: 2 != 1 [ 122.534244][ T30] audit: type=1400 audit(1767348814.800:418): avc: denied { execute } for pid=6659 comm="syz.3.173" path="/dev/dsp" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 122.761658][ T6664] capability: warning: `syz.3.173' uses 32-bit capabilities (legacy support in use) [ 122.841130][ T30] audit: type=1400 audit(1767348815.030:419): avc: denied { read } for pid=6659 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.958109][ T50] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 123.178003][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 123.185363][ T50] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 123.196410][ T50] usb 5-1: config 0 has no interface number 0 [ 123.206050][ T50] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 123.248778][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.268433][ T50] usb 5-1: Product: syz [ 123.277117][ T50] usb 5-1: Manufacturer: syz [ 123.303567][ T50] usb 5-1: SerialNumber: syz [ 123.316467][ T50] usb 5-1: config 0 descriptor?? [ 123.355008][ T50] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 123.591000][ T50] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 123.612614][ T50] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 123.861740][ T6679] netlink: 44 bytes leftover after parsing attributes in process `syz.3.178'. [ 124.024412][ T6663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.058361][ T6663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.300334][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 124.328333][ T9] usb 5-1: USB disconnect, device number 13 [ 124.408761][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 124.466156][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 124.505267][ T9] quatech2 5-1:0.51: device disconnected [ 124.691199][ T30] audit: type=1400 audit(1767348816.960:420): avc: denied { ioctl } for pid=6674 comm="syz.1.177" path="socket:[11764]" dev="sockfs" ino=11764 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.771017][ T30] audit: type=1400 audit(1767348817.040:421): avc: denied { create } for pid=6694 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 125.079038][ T6701] syzkaller0: entered promiscuous mode [ 125.091254][ T6701] syzkaller0: entered allmulticast mode [ 125.168856][ T30] audit: type=1400 audit(1767348817.440:422): avc: denied { shutdown } for pid=6703 comm="syz.4.187" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.190969][ T30] audit: type=1400 audit(1767348817.440:423): avc: denied { read } for pid=6703 comm="syz.4.187" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.628618][ T943] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.795814][ T943] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.804071][ T943] usb 2-1: config 0 has no interface number 0 [ 125.810986][ T943] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.849243][ T943] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.891213][ T943] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.938518][ T943] usb 2-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 125.954499][ T943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.979510][ T943] usb 2-1: config 0 descriptor?? [ 126.577497][ T6740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.633518][ T6740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.927066][ T943] holtek_mouse 0003:04D9:A0C2.0004: unknown main item tag 0x0 [ 126.936594][ T943] holtek_mouse 0003:04D9:A0C2.0004: unknown main item tag 0x0 [ 126.948550][ T943] holtek_mouse 0003:04D9:A0C2.0004: unknown main item tag 0x0 [ 126.956566][ T943] holtek_mouse 0003:04D9:A0C2.0004: unknown main item tag 0x0 [ 126.964753][ T943] holtek_mouse 0003:04D9:A0C2.0004: unknown main item tag 0x0 [ 127.000369][ T943] holtek_mouse 0003:04D9:A0C2.0004: unknown main item tag 0x0 [ 127.020795][ T943] holtek_mouse 0003:04D9:A0C2.0004: unknown main item tag 0x0 [ 127.039559][ T943] holtek_mouse 0003:04D9:A0C2.0004: unknown main item tag 0x0 [ 127.056461][ T943] holtek_mouse 0003:04D9:A0C2.0004: unknown main item tag 0x0 [ 127.065030][ T943] holtek_mouse 0003:04D9:A0C2.0004: unknown main item tag 0x0 [ 127.103225][ T943] holtek_mouse 0003:04D9:A0C2.0004: hidraw0: USB HID v0.03 Device [HID 04d9:a0c2] on usb-dummy_hcd.1-1/input1 [ 127.859859][ T6756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.194'. [ 127.869332][ T6756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.194'. [ 127.878898][ T6756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.194'. [ 127.897484][ T6756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.194'. [ 127.961518][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 127.961533][ T30] audit: type=1400 audit(1767348820.230:430): avc: denied { bind } for pid=6758 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.995512][ T30] audit: type=1400 audit(1767348820.260:431): avc: denied { read write } for pid=6757 comm="syz.3.195" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 128.028289][ T30] audit: type=1400 audit(1767348820.260:432): avc: denied { open } for pid=6757 comm="syz.3.195" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 128.052435][ T30] audit: type=1400 audit(1767348820.260:433): avc: denied { shutdown } for pid=6757 comm="syz.3.195" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.253565][ T5929] usb 2-1: USB disconnect, device number 8 [ 129.338041][ T5927] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 129.418478][ T30] audit: type=1400 audit(1767348821.660:434): avc: denied { append } for pid=6771 comm="syz.4.198" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 129.518069][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 129.524809][ T5927] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 129.533089][ T5927] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 129.576168][ T5927] usb 4-1: config 0 has no interface number 0 [ 129.588046][ T5927] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 129.608210][ T5927] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 129.614038][ T6777] netlink: 172 bytes leftover after parsing attributes in process `syz.4.200'. [ 129.668056][ T5927] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 129.698016][ T5927] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 129.717828][ T30] audit: type=1400 audit(1767348821.970:435): avc: denied { write } for pid=6774 comm="syz.1.199" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.744675][ T5927] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 129.768071][ T30] audit: type=1400 audit(1767348821.970:436): avc: denied { accept } for pid=6774 comm="syz.1.199" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.828510][ T5927] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 129.837569][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.960248][ T5927] usb 4-1: config 0 descriptor?? [ 129.979850][ T6765] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 130.021115][ T5927] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.032945][ T30] audit: type=1400 audit(1767348822.300:437): avc: denied { mount } for pid=6781 comm="syz.4.201" name="/" dev="autofs" ino=11905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 130.127068][ T30] audit: type=1400 audit(1767348822.390:438): avc: denied { read } for pid=6781 comm="syz.4.201" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 130.184771][ T30] audit: type=1400 audit(1767348822.420:439): avc: denied { open } for pid=6781 comm="syz.4.201" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 130.358499][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.518359][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 130.578265][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 130.587003][ T10] usb 1-1: config 241 has an invalid interface number: 213 but max is 0 [ 130.595548][ T10] usb 1-1: config 241 has no interface number 0 [ 130.608027][ T10] usb 1-1: config 241 interface 213 has no altsetting 0 [ 130.619032][ T10] usb 1-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=15.61 [ 130.633488][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.649382][ T10] usb 1-1: Product: syz [ 130.654012][ T10] usb 1-1: Manufacturer: syz [ 130.744731][ T10] usb 1-1: SerialNumber: syz [ 130.774787][ T6796] syzkaller0: entered promiscuous mode [ 130.781271][ T6796] syzkaller0: entered allmulticast mode [ 130.963197][ T6807] Illegal XDP return value 4294967282 on prog (id 43) dev N/A, expect packet loss! [ 131.184393][ T10] uvcvideo 1-1:241.213: Found UVC 0.00 device syz (0408:3090) [ 131.194315][ T10] uvcvideo 1-1:241.213: No valid video chain found. [ 131.215975][ T6814] netlink: 'syz.2.210': attribute type 21 has an invalid length. [ 131.233188][ T10] usb 1-1: USB disconnect, device number 7 [ 131.239211][ T6814] netlink: 128 bytes leftover after parsing attributes in process `syz.2.210'. [ 131.272034][ T9] usb 4-1: USB disconnect, device number 9 [ 132.560444][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.567406][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.008826][ T6814] netlink: 'syz.2.210': attribute type 4 has an invalid length. [ 133.017395][ T6814] netlink: 'syz.2.210': attribute type 3 has an invalid length. [ 133.026852][ T6814] netlink: 3 bytes leftover after parsing attributes in process `syz.2.210'. [ 133.036426][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'. [ 133.182341][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 133.182364][ T30] audit: type=1400 audit(1767348825.450:443): avc: denied { create } for pid=6833 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.232832][ T6837] tipc: Enabling of bearer rejected, failed to enable media [ 133.246390][ T6842] use of bytesused == 0 is deprecated and will be removed in the future, [ 133.268237][ T30] audit: type=1400 audit(1767348825.490:444): avc: denied { connect } for pid=6835 comm="syz.0.217" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.279198][ T6837] trusted_key: syz.0.217 sent an empty control message without MSG_MORE. [ 133.311962][ T6842] use the actual size instead. [ 133.380333][ T30] audit: type=1400 audit(1767348825.640:445): avc: denied { sqpoll } for pid=6833 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 133.496213][ T6844] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 133.583516][ T30] audit: type=1400 audit(1767348825.790:446): avc: denied { connect } for pid=6833 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.719436][ T30] audit: type=1400 audit(1767348825.970:447): avc: denied { write } for pid=6833 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.018046][ T5941] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 134.147407][ T6858] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.388344][ T5941] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.420544][ T5941] usb 1-1: config 0 has no interface number 0 [ 134.427237][ T5941] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 134.473269][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.523535][ T5941] usb 1-1: config 0 descriptor?? [ 134.566484][ T5941] usb 1-1: selecting invalid altsetting 1 [ 134.628657][ T5941] dvb_ttusb_budget: ttusb_init_controller: error [ 134.661260][ T5941] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 134.742536][ T6861] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 134.772314][ T6855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.220'. [ 134.892219][ T5941] DVB: Unable to find symbol cx22700_attach() [ 134.999371][ T6875] netlink: 'syz.4.226': attribute type 1 has an invalid length. [ 135.029504][ T6875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.164942][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.226'. [ 135.174260][ T6875] bond1: entered promiscuous mode [ 135.179336][ T6875] bond1: entered allmulticast mode [ 135.189249][ T30] audit: type=1326 audit(1767348827.460:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464458f749 code=0x7ffc0000 [ 135.197820][ T6875] bond1: (slave dummy0): making interface the new active one [ 135.212638][ T5927] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 135.220053][ T6875] dummy0: entered promiscuous mode [ 135.220274][ T6875] dummy0: entered allmulticast mode [ 135.239500][ T6875] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 135.302232][ T5941] DVB: Unable to find symbol tda10046_attach() [ 135.313744][ T5941] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 135.385457][ T6875] bond1 (unregistering): (slave dummy0): Releasing active interface [ 135.393688][ T6875] dummy0: left promiscuous mode [ 135.398725][ T6875] dummy0: left allmulticast mode [ 135.404867][ T6875] bond1 (unregistering): Released all slaves [ 135.421390][ T5927] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 135.602995][ T5927] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 135.618407][ T30] audit: type=1326 audit(1767348827.460:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464458f749 code=0x7ffc0000 [ 135.647164][ T5927] usb 4-1: config 0 has no interface number 1 [ 135.664509][ T5927] usb 4-1: config 0 has no interface number 2 [ 135.685385][ T5927] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 135.685426][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 135.694887][ T30] audit: type=1326 audit(1767348827.460:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f464458f749 code=0x7ffc0000 [ 135.854143][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.867031][ T5927] usb 4-1: config 0 descriptor?? [ 135.907808][ T30] audit: type=1326 audit(1767348827.460:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464458f749 code=0x7ffc0000 [ 135.932138][ T30] audit: type=1326 audit(1767348827.460:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464458f749 code=0x7ffc0000 [ 136.094555][ T5927] qcserial 4-1:0.3: Qualcomm USB modem converter detected [ 136.105498][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 136.117218][ T6885] futex_wake_op: syz.1.229 tries to shift op by 32; fix this program [ 136.129678][ T6886] netlink: 'syz.4.227': attribute type 2 has an invalid length. [ 136.143816][ T6886] : entered promiscuous mode [ 136.515226][ T6881] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.521593][ T6881] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.534438][ T6881] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 136.544271][ T6881] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.550386][ T6881] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 136.559885][ T6881] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 136.568478][ T6881] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.574514][ T6881] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.581686][ T6881] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 136.589973][ T6881] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.596053][ T6881] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.604023][ T6881] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.613576][ T6881] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.619943][ T6881] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 136.627628][ T6881] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 136.656579][ T5927] usb 4-1: USB disconnect, device number 10 [ 136.670402][ T5927] qcserial 4-1:0.3: device disconnected [ 136.703065][ T50] usb 1-1: USB disconnect, device number 8 [ 136.983488][ T6901] overlay: Unknown parameter 'subj_type' [ 137.720246][ T6910] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.033613][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.568100][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.638047][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 138.638065][ T5820] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.638078][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.868696][ T6936] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6936 comm=syz.4.242 [ 139.380420][ T6932] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.397637][ T6932] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.408089][ T6932] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.424752][ T6932] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.445941][ T6932] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 139.708314][ T5941] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 139.822842][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 139.822870][ T30] audit: type=1400 audit(1767348832.092:468): avc: denied { read write } for pid=6938 comm="syz.3.243" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 140.798827][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.808027][ T5941] usb 5-1: device descriptor read/64, error -71 [ 140.828409][ T30] audit: type=1400 audit(1767348832.352:469): avc: denied { ioctl } for pid=6946 comm="syz.2.245" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.485398][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.491520][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.497558][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.516770][ T30] audit: type=1400 audit(1767348833.092:470): avc: denied { open } for pid=6938 comm="syz.3.243" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 141.548020][ T5820] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.658480][ T5941] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 141.678021][ T30] audit: type=1400 audit(1767348833.932:471): avc: denied { create } for pid=6938 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.828029][ T5941] usb 5-1: device descriptor read/64, error -71 [ 141.879542][ T30] audit: type=1400 audit(1767348834.152:472): avc: denied { accept } for pid=6964 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 141.953988][ T5941] usb usb5-port1: attempt power cycle [ 142.888209][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.982286][ T30] audit: type=1400 audit(1767348835.252:473): avc: denied { bind } for pid=6974 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.026237][ T6975] netlink: 48 bytes leftover after parsing attributes in process `syz.1.248'. [ 143.164242][ T30] audit: type=1400 audit(1767348835.272:474): avc: denied { mount } for pid=6974 comm="syz.1.248" name="/" dev="ramfs" ino=13420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 143.293148][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 143.335396][ T30] audit: type=1400 audit(1767348835.602:475): avc: denied { accept } for pid=6976 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.414322][ T30] audit: type=1400 audit(1767348835.602:476): avc: denied { read } for pid=6976 comm="syz.1.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.528049][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.528147][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.545045][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.619933][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.754224][ T30] audit: type=1400 audit(1767348836.022:477): avc: denied { mount } for pid=6980 comm="syz.4.253" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 144.058002][ T5896] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 144.198005][ T5896] usb 5-1: device descriptor read/64, error -71 [ 144.459111][ T5896] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 144.738035][ T5896] usb 5-1: device descriptor read/64, error -71 [ 144.994361][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 145.003889][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 145.014028][ T7005] netlink: 'syz.1.260': attribute type 13 has an invalid length. [ 145.021803][ T7005] netlink: 'syz.1.260': attribute type 12 has an invalid length. [ 145.241797][ T5896] usb usb5-port1: attempt power cycle [ 145.322284][ T30] audit: type=1400 audit(1767348837.582:478): avc: denied { create } for pid=6999 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 145.363483][ T7010] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 145.570953][ T7013] netlink: 48 bytes leftover after parsing attributes in process `syz.2.261'. [ 145.628798][ T5896] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 145.797248][ T5896] usb 5-1: device descriptor read/8, error -71 [ 145.950587][ T30] audit: type=1804 audit(1767348838.212:479): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.258" name="/newroot/58/file0" dev="tmpfs" ino=322 res=1 errno=0 [ 146.952482][ T5896] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 146.972096][ T7017] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 146.990646][ T7017] ref_ctr increment failed for inode: 0x142 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802f113d40 [ 147.088580][ T30] audit: type=1800 audit(1767348839.352:480): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.263" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 147.310646][ T7004] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 147.319735][ T7004] ref_ctr decrement failed for inode: 0x142 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802f113d40 [ 147.384958][ T7004] uprobe: syz.0.258:7004 failed to unregister, leaking uprobe [ 147.414491][ T30] audit: type=1400 audit(1767348839.682:481): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 147.416683][ T5896] usb 5-1: device descriptor read/8, error -71 [ 147.608302][ T5896] usb usb5-port1: unable to enumerate USB device [ 147.641948][ T7035] mmap: syz.1.264 (7035) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 147.670659][ T7034] netlink: 148 bytes leftover after parsing attributes in process `syz.4.266'. [ 147.854647][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.265'. [ 147.865761][ T30] audit: type=1400 audit(1767348840.062:482): avc: denied { kexec_image_load } for pid=7027 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 147.900901][ T30] audit: type=1400 audit(1767348840.112:483): avc: denied { connect } for pid=7027 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 149.504103][ T30] audit: type=1400 audit(1767348841.772:484): avc: denied { write } for pid=7048 comm="syz.3.269" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 149.752627][ T30] audit: type=1400 audit(1767348841.992:485): avc: denied { ioctl } for pid=7048 comm="syz.3.269" path="/dev/sg0" dev="devtmpfs" ino=767 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 150.016199][ T7063] netlink: 48 bytes leftover after parsing attributes in process `syz.2.273'. [ 150.178836][ T30] audit: type=1326 audit(1767348842.452:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ff78f749 code=0x7ffc0000 [ 150.308115][ T50] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.345179][ T30] audit: type=1326 audit(1767348842.452:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ff78f749 code=0x7ffc0000 [ 150.569615][ T30] audit: type=1326 audit(1767348842.472:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f29ff78f749 code=0x7ffc0000 [ 150.613289][ T30] audit: type=1326 audit(1767348842.472:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ff78f749 code=0x7ffc0000 [ 150.638878][ T30] audit: type=1326 audit(1767348842.472:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29ff78f749 code=0x7ffc0000 [ 150.683889][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 150.719264][ T50] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 150.733784][ T50] usb 1-1: config 0 has no interface number 0 [ 150.750669][ T30] audit: type=1326 audit(1767348842.472:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ff78f749 code=0x7ffc0000 [ 150.774138][ T50] usb 1-1: too many endpoints for config 0 interface 214 altsetting 144: 79, using maximum allowed: 30 [ 150.826171][ T50] usb 1-1: config 0 interface 214 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 150.841236][ T30] audit: type=1326 audit(1767348842.472:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29ff78f749 code=0x7ffc0000 [ 150.869273][ T50] usb 1-1: config 0 interface 214 has no altsetting 0 [ 150.879694][ T50] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 150.905133][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.921190][ T7038] syz.4.266 (7038): drop_caches: 2 [ 150.936085][ T30] audit: type=1326 audit(1767348842.472:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ff78f749 code=0x7ffc0000 [ 150.990671][ T50] usb 1-1: config 0 descriptor?? [ 151.030108][ T30] audit: type=1326 audit(1767348842.472:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29ff78f749 code=0x7ffc0000 [ 151.116818][ T30] audit: type=1326 audit(1767348842.472:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29ff78f749 code=0x7ffc0000 [ 151.232595][ T30] audit: type=1326 audit(1767348842.472:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7054 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29ff78df90 code=0x7ffc0000 [ 152.128402][ T7087] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 153.495104][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 153.665218][ T7102] netlink: 48 bytes leftover after parsing attributes in process `syz.2.284'. [ 153.935896][ T50] usb 1-1: string descriptor 0 read error: -71 [ 153.961795][ T50] as10x_usb: device has been detected [ 154.013916][ T50] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 154.072959][ T50] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 154.112235][ T7105] loop2: detected capacity change from 0 to 7 [ 154.143124][ T6418] Dev loop2: unable to read RDB block 7 [ 154.155847][ T6418] loop2: AHDI p2 p3 [ 154.166063][ T6418] loop2: partition table partially beyond EOD, truncated [ 154.181199][ T50] as10x_usb: error during firmware upload part1 [ 154.191065][ T6418] loop2: p3 start 335544320 is beyond EOD, truncated [ 154.212866][ T50] Registered device nBox DVB-T Dongle [ 154.220543][ T50] usb 1-1: USB disconnect, device number 9 [ 154.237174][ T7105] Dev loop2: unable to read RDB block 7 [ 154.256856][ T7105] loop2: AHDI p2 p3 [ 154.264910][ T7105] loop2: partition table partially beyond EOD, truncated [ 154.275453][ T7105] loop2: p3 start 335544320 is beyond EOD, truncated [ 154.446481][ T50] Unregistered device nBox DVB-T Dongle [ 154.449649][ T50] as10x_usb: device has been disconnected [ 155.611102][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 155.611120][ T30] audit: type=1400 audit(1767348847.512:530): avc: denied { write } for pid=7125 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.658670][ T30] audit: type=1400 audit(1767348847.542:531): avc: denied { shutdown } for pid=7125 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.685652][ T30] audit: type=1400 audit(1767348847.642:532): avc: denied { write } for pid=7125 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.911336][ T50] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 156.058603][ T30] audit: type=1400 audit(1767348848.322:533): avc: denied { read } for pid=7149 comm="syz.4.299" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 156.113199][ T7150] tipc: Started in network mode [ 156.138257][ T7150] tipc: Node identity , cluster identity 4711 [ 156.159330][ T30] audit: type=1400 audit(1767348848.322:534): avc: denied { open } for pid=7149 comm="syz.4.299" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 156.188135][ T7150] tipc: Failed to set node id, please configure manually [ 156.198486][ T7150] tipc: Enabling of bearer rejected, failed to enable media [ 156.214536][ T30] audit: type=1400 audit(1767348848.482:535): avc: denied { setopt } for pid=7153 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.241437][ T50] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 156.254802][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.264075][ T30] audit: type=1400 audit(1767348848.502:536): avc: denied { setopt } for pid=7149 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 156.390653][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 156.399519][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 156.408399][ T7158] netlink: 'syz.1.298': attribute type 13 has an invalid length. [ 156.416135][ T7158] netlink: 'syz.1.298': attribute type 12 has an invalid length. [ 156.478147][ T50] usb 1-1: config 0 descriptor?? [ 156.626166][ T50] cp210x 1-1:0.0: cp210x converter detected [ 157.347411][ T30] audit: type=1400 audit(1767348849.552:537): avc: denied { watch watch_reads } for pid=7129 comm="syz.0.294" path="/64" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 158.696628][ T50] usb 1-1: cp210x converter now attached to ttyUSB0 [ 159.282781][ T30] audit: type=1400 audit(1767348851.552:538): avc: denied { write } for pid=7173 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.338897][ T10] usb 1-1: USB disconnect, device number 10 [ 159.360525][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 159.385798][ T10] cp210x 1-1:0.0: device disconnected [ 159.829027][ T7185] fuse: Bad value for 'fd' [ 160.348062][ T30] audit: type=1400 audit(1767348852.432:539): avc: denied { read } for pid=7194 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.442455][ T7202] 9p: Bad value for 'rfdno' [ 160.645836][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 160.645850][ T30] audit: type=1400 audit(1767348852.912:542): avc: denied { create } for pid=7203 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 161.199364][ T30] audit: type=1400 audit(1767348853.472:543): avc: denied { getopt } for pid=7194 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 161.219007][ T5823] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 161.255625][ T30] audit: type=1400 audit(1767348853.472:544): avc: denied { open } for pid=7219 comm="syz.4.308" path="/dev/ttyqd" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 161.446271][ T30] audit: type=1400 audit(1767348853.472:545): avc: denied { setattr } for pid=7219 comm="syz.4.308" name="UDPLITEv6" dev="sockfs" ino=14647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.568005][ T30] audit: type=1400 audit(1767348853.562:546): avc: denied { mount } for pid=7217 comm="syz.0.316" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 161.659109][ T7224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.317'. [ 161.693809][ T7225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.317'. [ 161.758821][ T30] audit: type=1400 audit(1767348854.032:547): avc: denied { read } for pid=7233 comm="syz.3.319" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 161.788012][ T30] audit: type=1400 audit(1767348854.052:548): avc: denied { open } for pid=7233 comm="syz.3.319" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 161.839281][ T30] audit: type=1400 audit(1767348854.052:549): avc: denied { ioctl } for pid=7233 comm="syz.3.319" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 161.891326][ T7235] overlayfs: missing 'lowerdir' [ 161.949754][ T30] audit: type=1400 audit(1767348854.162:550): avc: denied { mounton } for pid=7233 comm="syz.3.319" path="/bus" dev="ramfs" ino=14672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 162.751185][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 162.793870][ T30] audit: type=1400 audit(1767348855.062:551): avc: denied { write } for pid=7242 comm="syz.4.323" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 163.364587][ T7263] netlink: 'syz.3.326': attribute type 4 has an invalid length. [ 164.244964][ T7243] sp0: Synchronizing with TNC [ 164.528142][ T5941] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 164.598031][ T50] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 164.651854][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 164.688129][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 164.704019][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.725683][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.745652][ T5941] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 164.762439][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.770457][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.785677][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.806109][ T5941] usb 3-1: config 0 descriptor?? [ 164.820737][ T50] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 164.847216][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.874098][ T50] usb 5-1: config 0 descriptor?? [ 165.110062][ T7301] netlink: 140 bytes leftover after parsing attributes in process `syz.0.337'. [ 165.269336][ T5941] hid_parser_main: 28 callbacks suppressed [ 165.269351][ T5941] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 165.286170][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 165.302370][ T50] hid-steam 0003:28DE:1142.0006: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 165.305367][ T5941] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 165.712114][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 165.712131][ T30] audit: type=1400 audit(1767348857.632:557): avc: denied { watch } for pid=7300 comm="syz.0.337" path="/72/file0" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 165.763751][ T5941] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 165.770810][ T50] hid-steam 0003:28DE:1142.0006: Steam wireless receiver connected [ 165.793171][ T5941] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 165.800863][ T5941] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 165.808707][ T30] audit: type=1400 audit(1767348857.632:558): avc: denied { watch_sb } for pid=7300 comm="syz.0.337" path="/72/file0" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 165.832258][ T5941] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 165.840451][ T5941] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 165.848314][ T5941] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 165.862161][ T5941] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 165.870110][ T5941] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 165.883848][ T50] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 166.002472][ T50] usb 5-1: USB disconnect, device number 21 [ 166.004585][ T5941] logitech 0003:046D:C29C.0005: hidraw1: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 166.020486][ T5941] logitech 0003:046D:C29C.0005: no inputs found [ 166.148921][ T50] hid-steam 0003:28DE:1142.0006: Steam wireless receiver disconnected [ 166.177224][ T5941] usb 3-1: USB disconnect, device number 5 [ 166.397662][ T7317] netlink: 44 bytes leftover after parsing attributes in process `syz.0.339'. [ 166.636416][ T7312] fido_id[7312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 166.818237][ T7320] syzkaller0: entered promiscuous mode [ 166.844869][ T7320] syzkaller0: entered allmulticast mode [ 166.963910][ T7326] loop2: detected capacity change from 0 to 7 [ 166.978286][ T6418] Dev loop2: unable to read RDB block 7 [ 166.984894][ T6418] loop2: AHDI p2 p3 [ 166.989236][ T6418] loop2: partition table partially beyond EOD, truncated [ 166.998204][ T6418] loop2: p3 start 335544320 is beyond EOD, truncated [ 167.019002][ T7326] Dev loop2: unable to read RDB block 7 [ 167.024601][ T7326] loop2: AHDI p2 p3 [ 167.066398][ T7326] loop2: partition table partially beyond EOD, truncated [ 167.113504][ T7326] loop2: p3 start 335544320 is beyond EOD, truncated [ 167.258541][ T30] audit: type=1400 audit(1767348859.532:559): avc: denied { write } for pid=7332 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 167.639320][ T30] audit: type=1400 audit(1767348859.892:560): avc: denied { ioctl } for pid=7339 comm="syz.3.347" path="/58/file0" dev="tmpfs" ino=341 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 168.878048][ T6081] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 169.039943][ T6081] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 169.048342][ T6081] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 169.056637][ T6081] usb 4-1: config 0 has no interface number 1 [ 169.062983][ T6081] usb 4-1: config 0 has no interface number 2 [ 169.070373][ T6081] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 169.079601][ T6081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.110484][ T6081] usb 4-1: config 0 descriptor?? [ 169.326345][ T6081] qcserial 4-1:0.3: Qualcomm USB modem converter detected [ 169.560354][ T5929] usb 4-1: USB disconnect, device number 11 [ 169.573982][ T5929] qcserial 4-1:0.3: device disconnected [ 169.737688][ T30] audit: type=1400 audit(1767348862.002:561): avc: denied { create } for pid=7368 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 170.540231][ T30] audit: type=1804 audit(1767348862.722:562): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.357" name="bus" dev="ramfs" ino=14921 res=1 errno=0 [ 170.959273][ T7384] syz.2.356 (7384) used greatest stack depth: 19336 bytes left [ 171.128749][ T30] audit: type=1400 audit(1767348863.402:563): avc: denied { write } for pid=7394 comm="syz.2.361" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 171.680148][ T943] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 171.907674][ T943] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 171.922288][ T943] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 171.948539][ T943] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 171.948601][ T943] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.980468][ T943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.017711][ T943] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.187580][ T943] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 172.528212][ T30] audit: type=1400 audit(1767348864.712:564): avc: denied { setopt } for pid=7413 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.835405][ T30] audit: type=1804 audit(1767348865.102:565): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.366" name="/newroot/82/file1" dev="tmpfs" ino=449 res=1 errno=0 [ 172.864272][ T30] audit: type=1800 audit(1767348865.132:566): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.366" name="file1" dev="tmpfs" ino=449 res=0 errno=0 [ 172.929578][ T30] audit: type=1400 audit(1767348865.192:567): avc: denied { read } for pid=7419 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 174.178049][ T943] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 174.308792][ T5929] usb 4-1: USB disconnect, device number 12 [ 174.349708][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.382893][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.410866][ T943] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 174.435796][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.470084][ T943] usb 1-1: config 0 descriptor?? [ 174.547603][ T7426] pimreg: entered allmulticast mode [ 174.602482][ T30] audit: type=1400 audit(1767348866.862:568): avc: denied { setopt } for pid=7435 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 174.602527][ T30] audit: type=1400 audit(1767348866.872:569): avc: denied { connect } for pid=7435 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 174.648763][ T30] audit: type=1400 audit(1767348866.892:570): avc: denied { read } for pid=7435 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 174.692710][ T7422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.694450][ T7422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.891179][ T7442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.891501][ T7442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.911476][ T7442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.911824][ T7442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.415586][ T943] usbhid 1-1:0.0: can't add hid device: -71 [ 175.440870][ T943] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 175.460546][ T943] usb 1-1: USB disconnect, device number 11 [ 176.725213][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 176.734103][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 176.743027][ T7470] netlink: 'syz.2.376': attribute type 13 has an invalid length. [ 176.751609][ T7470] netlink: 'syz.2.376': attribute type 12 has an invalid length. [ 176.874684][ T30] audit: type=1400 audit(1767348869.132:571): avc: denied { write } for pid=7457 comm="syz.2.376" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 176.923338][ T30] audit: type=1400 audit(1767348869.132:572): avc: denied { open } for pid=7457 comm="syz.2.376" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 177.055947][ T30] audit: type=1400 audit(1767348869.322:573): avc: denied { remount } for pid=7472 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 177.373409][ T7490] netlink: 48 bytes leftover after parsing attributes in process `syz.0.382'. [ 177.949950][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 177.959004][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 177.967971][ T7494] netlink: 'syz.1.384': attribute type 13 has an invalid length. [ 177.976488][ T7494] netlink: 'syz.1.384': attribute type 12 has an invalid length. [ 179.126144][ T7512] geneve2: entered promiscuous mode [ 179.143293][ T4090] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 42516 - 0 [ 179.166230][ T4090] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 42516 - 0 [ 179.662276][ T4090] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 42516 - 0 [ 179.692749][ T4090] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 42516 - 0 [ 181.296152][ T5941] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 181.690930][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 181.701280][ T5941] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice=fa.ce [ 181.714836][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.728161][ T5941] usb 1-1: config 0 descriptor?? [ 181.737074][ T7542] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.753827][ T7549] x_tables: duplicate underflow at hook 1 [ 181.754904][ T5941] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 181.793453][ T30] audit: type=1400 audit(1767348874.062:574): avc: denied { read } for pid=5175 comm="acpid" name="mouse1" dev="devtmpfs" ino=2955 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.840316][ T30] audit: type=1400 audit(1767348874.082:575): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2955 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.849054][ T7549] netlink: 'syz.4.397': attribute type 10 has an invalid length. [ 181.884517][ T30] audit: type=1400 audit(1767348874.092:576): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2955 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.887240][ T30] audit: type=1400 audit(1767348874.142:577): avc: denied { checkpoint_restore } for pid=7550 comm="syz.2.398" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 181.999310][ T7549] batman_adv: batadv0: Adding interface: netdevsim0 [ 182.020450][ T7549] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.085790][ T7549] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 182.118033][ T5896] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 182.193991][ T7542] syzkaller0: entered promiscuous mode [ 182.210788][ T7542] syzkaller0: entered allmulticast mode [ 182.277994][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 182.284584][ T5896] usb 3-1: config index 0 descriptor too short (expected 65532, got 18) [ 182.296168][ T5896] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 182.310736][ T6309] usb 1-1: USB disconnect, device number 12 [ 182.312742][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 182.347553][ T5896] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 182.358225][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.366247][ T5896] usb 3-1: Product: syz [ 182.401942][ T5896] usb 3-1: Manufacturer: syz [ 182.406684][ T5896] usb 3-1: SerialNumber: syz [ 182.422395][ T5896] r8152-cfgselector 3-1: Unknown version 0x0000 [ 182.429529][ T5896] r8152-cfgselector 3-1: config 0 descriptor?? [ 183.125905][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.142373][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.159481][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.169826][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.272585][ T5928] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 183.390381][ T5896] r8152-cfgselector 3-1: Unknown version 0x0000 [ 183.409734][ T5928] usb 5-1: device descriptor read/64, error -71 [ 183.409889][ T5896] r8152-cfgselector 3-1: bad CDC descriptors [ 183.446456][ T5896] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 183.652842][ T5928] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 183.798255][ T5928] usb 5-1: device descriptor read/64, error -71 [ 183.891467][ T7581] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 183.916704][ T7581] overlayfs: failed to set xattr on upper [ 183.921670][ T5928] usb usb5-port1: attempt power cycle [ 183.943492][ T30] audit: type=1400 audit(1767348876.212:578): avc: denied { getopt } for pid=7580 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 183.984516][ T7581] overlayfs: ...falling back to redirect_dir=nofollow. [ 184.002525][ T30] audit: type=1400 audit(1767348876.262:579): avc: denied { ioctl } for pid=7584 comm="syz.2.407" path="socket:[15714]" dev="sockfs" ino=15714 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.040758][ T7581] overlayfs: ...falling back to uuid=null. [ 184.053276][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 184.113791][ T7586] nbd: socks must be embedded in a SOCK_ITEM attr [ 184.132747][ T5806] block nbd64: NBD_DISCONNECT [ 184.269271][ T5928] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 184.299456][ T5928] usb 5-1: device descriptor read/8, error -71 [ 184.548006][ T5928] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 184.589758][ T5928] usb 5-1: device descriptor read/8, error -71 [ 184.706266][ T5928] usb usb5-port1: unable to enumerate USB device [ 184.841732][ T7585] bond0: Error: Cannot enslave bond to itself. [ 194.000968][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.007295][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.440010][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.446341][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.316859][ T7616] netlink: 'syz.1.410': attribute type 33 has an invalid length. [ 313.337969][ T30] audit: type=1400 audit(1767349005.592:580): avc: denied { mount } for pid=7610 comm="syz.0.409" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 313.356335][ T7616] netlink: 152 bytes leftover after parsing attributes in process `syz.1.410'. [ 313.404144][ T30] audit: type=1400 audit(1767349005.602:581): avc: denied { setopt } for pid=7615 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 313.405075][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 313.477686][ T30] audit: type=1400 audit(1767349005.602:582): avc: denied { setopt } for pid=7610 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 313.532875][ T30] audit: type=1400 audit(1767349005.622:583): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 313.578060][ T5928] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 314.517963][ T5928] usb 3-1: device descriptor read/64, error -71 [ 314.721712][ T30] audit: type=1400 audit(1767349006.992:584): avc: denied { getopt } for pid=7644 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 314.767982][ T5928] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 314.785689][ T30] audit: type=1400 audit(1767349007.012:585): avc: denied { ioctl } for pid=7644 comm="syz.3.418" path="socket:[15849]" dev="sockfs" ino=15849 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 314.818601][ T5941] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 314.847944][ T30] audit: type=1400 audit(1767349007.012:586): avc: denied { map } for pid=7644 comm="syz.3.418" path="socket:[15849]" dev="sockfs" ino=15849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 314.879383][ T10] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 314.894140][ T30] audit: type=1400 audit(1767349007.012:587): avc: denied { read } for pid=7644 comm="syz.3.418" path="socket:[15849]" dev="sockfs" ino=15849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 314.926215][ T5928] usb 3-1: device descriptor read/64, error -71 [ 315.004935][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.018803][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.029043][ T5941] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.038603][ T5928] usb usb3-port1: attempt power cycle [ 315.043146][ T5941] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 315.057293][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.065543][ T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 315.074937][ T10] usb 5-1: config 0 has no interface number 0 [ 315.078207][ T7655] fuse: root generation should be zero [ 315.082377][ T10] usb 5-1: config 0 interface 41 has no altsetting 0 [ 315.095120][ T5941] usb 1-1: config 0 descriptor?? [ 315.107688][ T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 315.119168][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.127415][ T10] usb 5-1: Product: syz [ 315.133973][ T10] usb 5-1: Manufacturer: syz [ 315.138928][ T10] usb 5-1: SerialNumber: syz [ 315.151813][ T10] usb 5-1: config 0 descriptor?? [ 315.388005][ T5928] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 315.408397][ T5928] usb 3-1: device descriptor read/8, error -71 [ 315.698053][ T5928] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 315.738494][ T5928] usb 3-1: device descriptor read/8, error -71 [ 315.848821][ T5928] usb usb3-port1: unable to enumerate USB device [ 315.897944][ T50] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 316.015570][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 316.067931][ T50] usb 4-1: Using ep0 maxpacket: 16 [ 316.078405][ T50] usb 4-1: config 249 has an invalid interface number: 207 but max is 2 [ 316.097224][ T50] usb 4-1: config 249 has an invalid interface number: 96 but max is 2 [ 316.106180][ T50] usb 4-1: config 249 has an invalid interface number: 230 but max is 2 [ 316.115855][ T50] usb 4-1: config 249 contains an unexpected descriptor of type 0x2, skipping [ 316.124871][ T50] usb 4-1: config 249 has an invalid interface number: 88 but max is 2 [ 316.133452][ T50] usb 4-1: config 249 has 4 interfaces, different from the descriptor's value: 3 [ 316.143007][ T50] usb 4-1: config 249 has no interface number 0 [ 316.149371][ T50] usb 4-1: config 249 has no interface number 1 [ 316.155890][ T50] usb 4-1: config 249 has no interface number 2 [ 316.162310][ T50] usb 4-1: config 249 has no interface number 3 [ 316.168742][ T50] usb 4-1: config 249 interface 207 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 316.179947][ T50] usb 4-1: config 249 interface 207 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 316.191186][ T50] usb 4-1: config 249 interface 207 altsetting 4 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 316.202511][ T50] usb 4-1: config 249 interface 207 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 316.214906][ T50] usb 4-1: config 249 interface 207 altsetting 4 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 316.226502][ T50] usb 4-1: config 249 interface 207 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 316.237711][ T50] usb 4-1: config 249 interface 207 altsetting 4 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 316.253147][ T50] usb 4-1: config 249 interface 207 altsetting 4 endpoint 0x82 has invalid maxpacket 8257, setting to 64 [ 316.265774][ T50] usb 4-1: config 249 interface 207 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 316.277967][ T50] usb 4-1: config 249 interface 207 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 316.289141][ T50] usb 4-1: config 249 interface 207 altsetting 4 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 316.312972][ T50] usb 4-1: config 249 interface 96 altsetting 13 has a duplicate endpoint with address 0xA, skipping [ 316.353538][ T50] usb 4-1: config 249 interface 96 altsetting 13 has a duplicate endpoint with address 0xE, skipping [ 316.376080][ T50] usb 4-1: config 249 interface 96 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 316.389950][ T50] usb 4-1: config 249 interface 96 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 316.401983][ T50] usb 4-1: config 249 interface 96 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 316.413395][ T50] usb 4-1: config 249 interface 96 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 316.426475][ T50] usb 4-1: config 249 interface 96 altsetting 13 endpoint 0x5 has an invalid bInterval 255, changing to 7 [ 316.438355][ T50] usb 4-1: config 249 interface 96 altsetting 13 has a duplicate endpoint with address 0xA, skipping [ 316.449844][ T50] usb 4-1: config 249 interface 96 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 316.461566][ T50] usb 4-1: config 249 interface 230 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 316.472871][ T50] usb 4-1: config 249 interface 230 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 316.484274][ T50] usb 4-1: config 249 interface 230 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 316.522125][ T50] usb 4-1: config 249 interface 230 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 316.542452][ T50] usb 4-1: config 249 interface 230 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 316.556160][ T50] usb 4-1: config 249 interface 230 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 316.568075][ T50] usb 4-1: config 249 interface 230 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 316.579493][ T50] usb 4-1: config 249 interface 230 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 316.590619][ T50] usb 4-1: config 249 interface 230 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 316.602975][ T50] usb 4-1: config 249 interface 230 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 316.615040][ T50] usb 4-1: config 249 interface 230 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 316.638739][ T50] usb 4-1: config 249 interface 230 altsetting 0 has 11 endpoint descriptors, different from the interface descriptor's value: 13 [ 316.670918][ T50] usb 4-1: too many endpoints for config 249 interface 88 altsetting 56: 193, using maximum allowed: 30 [ 316.692335][ T50] usb 4-1: config 249 interface 88 altsetting 56 has an invalid descriptor for endpoint zero, skipping [ 316.732172][ T50] usb 4-1: config 249 interface 88 altsetting 56 has a duplicate endpoint with address 0x9, skipping [ 316.759304][ T50] usb 4-1: config 249 interface 88 altsetting 56 has 2 endpoint descriptors, different from the interface descriptor's value: 193 [ 316.775113][ T50] usb 4-1: config 249 interface 207 has no altsetting 0 [ 316.798047][ T50] usb 4-1: config 249 interface 96 has no altsetting 0 [ 316.806826][ T50] usb 4-1: config 249 interface 88 has no altsetting 0 [ 316.822670][ T50] usb 4-1: New USB device found, idVendor=10c4, idProduct=846e, bcdDevice=20.6d [ 316.837918][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.850129][ T50] usb 4-1: Product: 㐊 [ 316.859031][ T50] usb 4-1: Manufacturer: Э [ 316.870933][ T50] usb 4-1: SerialNumber: ׂⱘ﶑窱唇䷺뛜픰㿮Ś꡵涗♼荚ᦸ篓ﴞ純턦ᆂ靃ម煽ꋈﻒ⃿黺뢐䐍䲆讯ꠟ오躮닠綮繓젔ᤲ䇪嗮棞미芨좒拏첸␉稘堈桃┋峡墉䟟྘⬮◝━ꙫꆺ꾄鉦ᦑ劥갤攫ﾆ㕁⼠嫪럴䩄ꑨꤥ墳혡侵㺄巪獵↉侏濦ᱲ۫离畛߅Ş㠙㔊᫥ਂ먶咞儉⪤ꨓ鋊狚돃瑕鎯懵痌읷퐿轁 [ 316.911516][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.917994][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.952079][ T50] usb 4-1: Interface #230 referenced by multiple IADs [ 316.969878][ T7664] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 316.977370][ T7664] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 317.049658][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 317.065737][ T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 317.098195][ T10] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 317.143977][ T10] usb 5-1: USB disconnect, device number 27 [ 317.561596][ T5941] usbhid 1-1:0.0: can't add hid device: -71 [ 317.941828][ T5941] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 317.956090][ T5941] usb 1-1: USB disconnect, device number 13 [ 317.960784][ T7682] orangefs_mount: mount request failed with -4 [ 318.381026][ T7695] loop2: detected capacity change from 0 to 7 [ 318.390980][ T7623] Dev loop2: unable to read RDB block 7 [ 318.400702][ T7623] loop2: AHDI p2 p3 [ 318.412924][ T7623] loop2: partition table partially beyond EOD, truncated [ 318.496545][ T50] cp210x 4-1:249.207: cp210x converter detected [ 318.507474][ T7623] loop2: p3 start 335544320 is beyond EOD, truncated [ 318.540246][ T50] cp210x 4-1:249.207: failed to get vendor val 0x370b size 1: -71 [ 318.552232][ T7695] Dev loop2: unable to read RDB block 7 [ 318.577245][ T7695] loop2: AHDI p2 p3 [ 318.586500][ T50] cp210x 4-1:249.207: querying part number failed [ 318.596455][ T30] audit: type=1400 audit(1767349010.862:588): avc: denied { ioctl } for pid=7697 comm="syz.3.431" path="socket:[15918]" dev="sockfs" ino=15918 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 318.607994][ T7695] loop2: partition table partially beyond EOD, [ 318.660056][ T50] usb 4-1: cp210x converter now attached to ttyUSB0 [ 318.689838][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 318.696131][ T50] cp210x 4-1:249.96: cp210x converter detected [ 318.707223][ T50] cp210x 4-1:249.96: failed to get vendor val 0x370b size 1: -71 [ 318.721263][ T7695] truncated [ 318.732683][ T7695] loop2: p3 start 335544320 is beyond EOD, truncated [ 318.739938][ T50] cp210x 4-1:249.96: querying part number failed [ 318.783313][ T50] usb 4-1: cp210x converter now attached to ttyUSB1 [ 318.831528][ T50] cp210x 4-1:249.230: cp210x converter detected [ 318.858958][ T50] cp210x 4-1:249.230: failed to get vendor val 0x370b size 1: -71 [ 318.867528][ T7707] wg1: entered promiscuous mode [ 318.877608][ T7707] wg1: entered allmulticast mode [ 318.900831][ T50] cp210x 4-1:249.230: querying part number failed [ 318.943767][ T50] usb 4-1: cp210x converter now attached to ttyUSB2 [ 319.585224][ T30] audit: type=1400 audit(1767349011.852:589): avc: denied { connect } for pid=7708 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.624702][ T50] cp210x 4-1:249.88: cp210x converter detected [ 319.641620][ T50] cp210x 4-1:249.88: failed to get vendor val 0x370b size 1: -71 [ 319.658034][ T50] cp210x 4-1:249.88: querying part number failed [ 319.764440][ T50] usb 4-1: cp210x converter now attached to ttyUSB3 [ 319.816245][ T50] usb 4-1: USB disconnect, device number 13 [ 319.869740][ T50] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 319.890982][ T50] cp210x 4-1:249.207: device disconnected [ 319.916916][ T50] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 319.959190][ T50] cp210x 4-1:249.96: device disconnected [ 319.985448][ T50] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 320.013206][ T50] cp210x 4-1:249.230: device disconnected [ 320.049715][ T50] cp210x ttyUSB3: cp210x converter now disconnected from ttyUSB3 [ 320.089313][ T50] cp210x 4-1:249.88: device disconnected [ 320.187291][ T7724] 9p: Bad value for 'rfdno' [ 320.192452][ T7724] 9p: Bad value for 'rfdno' [ 320.197808][ T7724] 9p: Bad value for 'rfdno' [ 320.202738][ T7724] 9p: Bad value for 'rfdno' [ 320.208386][ T7724] 9p: Bad value for 'rfdno' [ 320.213209][ T7724] 9p: Bad value for 'rfdno' [ 320.218161][ T7724] 9p: Bad value for 'rfdno' [ 320.222954][ T7724] 9p: Bad value for 'rfdno' [ 320.227764][ T7724] 9p: Bad value for 'rfdno' [ 320.232775][ T7724] 9p: Bad value for 'rfdno' [ 320.237905][ T7724] 9p: Bad value for 'rfdno' [ 320.242721][ T7724] 9p: Bad value for 'rfdno' [ 320.247534][ T7724] 9p: Bad value for 'rfdno' [ 321.526679][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 321.535656][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'. [ 321.545247][ T7749] netlink: 'syz.3.445': attribute type 13 has an invalid length. [ 321.553555][ T7749] netlink: 'syz.3.445': attribute type 12 has an invalid length. [ 322.517319][ T30] audit: type=1400 audit(1767349014.782:590): avc: denied { bind } for pid=7736 comm="syz.4.443" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 323.142905][ T7762] xt_hashlimit: size too large, truncated to 1048576 [ 323.220496][ T30] audit: type=1400 audit(1767349014.812:591): avc: denied { node_bind } for pid=7736 comm="syz.4.443" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 323.694232][ T30] audit: type=1400 audit(1767349015.962:592): avc: denied { write } for pid=7765 comm="syz.0.449" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 324.163522][ T30] audit: type=1400 audit(1767349016.432:593): avc: denied { ioctl } for pid=7774 comm="syz.3.451" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 324.958019][ T943] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 325.043402][ T30] audit: type=1400 audit(1767349017.312:594): avc: denied { mounton } for pid=7791 comm="syz.4.454" path="/proc/286/task" dev="proc" ino=16190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 325.159829][ T943] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.178215][ T943] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 325.201067][ T30] audit: type=1400 audit(1767349017.472:595): avc: denied { associate } for pid=7798 comm="syz.4.454" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 325.227920][ T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.247255][ T943] usb 3-1: config 0 descriptor?? [ 325.270825][ T943] pwc: Askey VC010 type 2 USB webcam detected. [ 325.284938][ T7797] capability: warning: `syz.4.454' uses deprecated v2 capabilities in a way that may be insecure [ 325.485786][ T5929] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 325.635767][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 325.644669][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 325.653675][ T7804] netlink: 'syz.1.457': attribute type 13 has an invalid length. [ 325.661617][ T7804] netlink: 'syz.1.457': attribute type 12 has an invalid length. [ 325.697921][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 325.925938][ T943] pwc: recv_control_msg error -32 req 02 val 2b00 [ 325.950098][ T943] pwc: recv_control_msg error -32 req 02 val 2700 [ 325.952220][ T5929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.990383][ T943] pwc: recv_control_msg error -32 req 02 val 2c00 [ 325.992092][ T5929] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 326.007238][ T943] pwc: recv_control_msg error -32 req 04 val 1000 [ 326.034435][ T943] pwc: recv_control_msg error -32 req 04 val 1300 [ 326.037704][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.284140][ T943] pwc: recv_control_msg error -32 req 04 val 1400 [ 326.284688][ T5929] usb 1-1: Product: syz [ 326.328617][ T943] pwc: recv_control_msg error -32 req 02 val 2000 [ 326.336077][ T943] pwc: recv_control_msg error -32 req 02 val 2100 [ 326.379276][ T5929] usb 1-1: Manufacturer: syz [ 326.397588][ T5929] usb 1-1: SerialNumber: syz [ 326.424259][ T5929] usb 1-1: config 0 descriptor?? [ 326.436286][ T5929] usb 1-1: bad CDC descriptors [ 326.449920][ T5929] usb 1-1: unsupported MDLM descriptors [ 327.162573][ T30] audit: type=1400 audit(1767349019.432:596): avc: denied { listen } for pid=7795 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 327.186300][ T10] usb 1-1: USB disconnect, device number 14 [ 327.532344][ T30] audit: type=1400 audit(1767349019.802:597): avc: denied { setopt } for pid=7817 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 327.842931][ T30] audit: type=1400 audit(1767349020.102:598): avc: denied { accept } for pid=7817 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 328.009290][ T50] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 328.244349][ T7816] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 328.276695][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 328.438915][ T7833] netlink: 'syz.3.461': attribute type 1 has an invalid length. [ 328.769354][ T943] pwc: recv_control_msg error -71 req 02 val 2500 [ 328.791641][ T943] pwc: recv_control_msg error -71 req 02 val 2400 [ 328.799902][ T943] pwc: recv_control_msg error -71 req 02 val 2600 [ 328.834800][ T943] pwc: recv_control_msg error -71 req 02 val 2900 [ 328.866836][ T943] pwc: recv_control_msg error -71 req 02 val 2800 [ 328.881243][ T943] pwc: recv_control_msg error -71 req 04 val 1100 [ 328.899904][ T943] pwc: recv_control_msg error -71 req 04 val 1200 [ 328.920443][ T943] pwc: Registered as video103. [ 328.942433][ T943] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 328.988603][ T943] usb 3-1: USB disconnect, device number 11 [ 329.146718][ T7849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.471'. [ 329.175159][ T30] audit: type=1400 audit(1767349021.442:599): avc: denied { name_bind } for pid=7848 comm="syz.1.471" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 329.270218][ T30] audit: type=1400 audit(1767349021.542:600): avc: denied { read write } for pid=7852 comm="syz.4.473" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 329.301980][ T30] audit: type=1400 audit(1767349021.542:601): avc: denied { open } for pid=7852 comm="syz.4.473" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 329.330035][ T30] audit: type=1400 audit(1767349021.562:602): avc: denied { ioctl } for pid=7852 comm="syz.4.473" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 330.318190][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 330.324684][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 330.540737][ T50] usb 4-1: unable to get BOS descriptor or descriptor too short [ 330.568810][ T50] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 330.588044][ T50] usb 4-1: can't read configurations, error -71 [ 330.790996][ T30] audit: type=1400 audit(1767349023.062:603): avc: denied { mount } for pid=7885 comm="syz.4.482" name="/" dev="ocfs2_dlmfs" ino=17443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 331.010686][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 331.021457][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 331.060963][ T30] audit: type=1400 audit(1767349023.332:604): avc: denied { map } for pid=7894 comm="syz.4.485" path="socket:[16779]" dev="sockfs" ino=16779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 331.123524][ T7896] sp0: Synchronizing with TNC [ 331.190232][ T7896] [U] [ 331.225267][ T30] audit: type=1400 audit(1767349023.362:605): avc: denied { read } for pid=7894 comm="syz.4.485" path="socket:[16779]" dev="sockfs" ino=16779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 331.874392][ T7911] netlink: 'syz.3.489': attribute type 3 has an invalid length. [ 332.006011][ T30] audit: type=1400 audit(1767349024.272:606): avc: denied { getopt } for pid=7909 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 332.026471][ T7911] netlink: 'syz.3.489': attribute type 12 has an invalid length. [ 332.260161][ T7924] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 332.300531][ T30] audit: type=1400 audit(1767349024.572:607): avc: denied { map } for pid=7921 comm="syz.3.491" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 332.386956][ T30] audit: type=1400 audit(1767349024.592:608): avc: denied { execute } for pid=7921 comm="syz.3.491" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 332.487216][ T7927] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 332.620696][ T5941] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 332.758916][ T5941] usb 5-1: device descriptor read/64, error -71 [ 332.997419][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 333.018313][ T5941] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 333.167969][ T5941] usb 5-1: device descriptor read/64, error -71 [ 333.369426][ T5941] usb usb5-port1: attempt power cycle [ 333.889082][ T5941] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 333.945129][ T7960] xt_recent: Unsupported userspace flags (000000b1) [ 333.953406][ T7960] syz.1.501 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 333.969204][ T5941] usb 5-1: device descriptor read/8, error -71 [ 335.031355][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 335.040196][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'. [ 335.048999][ T7969] netlink: 'syz.2.502': attribute type 13 has an invalid length. [ 335.057267][ T7969] netlink: 'syz.2.502': attribute type 12 has an invalid length. [ 335.232896][ T5941] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 335.568487][ T5941] usb 5-1: device descriptor read/8, error -71 [ 335.758774][ T5941] usb usb5-port1: unable to enumerate USB device [ 335.930107][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 335.930139][ T30] audit: type=1400 audit(1767349028.182:611): avc: denied { execute_no_trans } for pid=7973 comm="syz.2.505" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=16895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 337.724556][ T5929] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 338.247991][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 338.739162][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.757995][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.768137][ T5929] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 338.778619][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.790862][ T5929] usb 3-1: config 0 descriptor?? [ 338.980442][ T8006] netlink: 52 bytes leftover after parsing attributes in process `syz.0.512'. [ 339.329932][ T5928] IPVS: starting estimator thread 0... [ 339.349585][ T8014] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 339.359159][ T8018] [ 339.361490][ T8018] ====================================================== [ 339.368493][ T8018] WARNING: possible circular locking dependency detected [ 339.375501][ T8018] syzkaller #0 Not tainted [ 339.379907][ T8018] ------------------------------------------------------ [ 339.386915][ T8018] syz.4.516/8018 is trying to acquire lock: [ 339.392811][ T8018] ffff888075716c30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 339.401254][ T8018] [ 339.401254][ T8018] but task is already holding lock: [ 339.408605][ T8018] ffff88807a610868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 339.416888][ T8018] [ 339.416888][ T8018] which lock already depends on the new lock. [ 339.416888][ T8018] [ 339.427276][ T8018] [ 339.427276][ T8018] the existing dependency chain (in reverse order) is: [ 339.436463][ T8018] [ 339.436463][ T8018] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 339.443924][ T8018] __mutex_lock+0x1aa/0x1ca0 [ 339.449041][ T8018] anon_pipe_write+0x15d/0x1bd0 [ 339.454416][ T8018] __kernel_write_iter+0x720/0xb10 [ 339.460045][ T8018] __kernel_write+0xf5/0x140 [ 339.465161][ T8018] autofs_notify_daemon+0x4db/0xd60 [ 339.470882][ T8018] autofs_wait+0x10f3/0x1ac0 [ 339.476001][ T8018] autofs_mount_wait+0x132/0x3c0 [ 339.481450][ T8018] autofs_d_automount+0x4b2/0x960 [ 339.486983][ T8018] __traverse_mounts+0x1b9/0x830 [ 339.492432][ T8018] step_into_slowpath+0x772/0xf50 [ 339.497957][ T8018] path_lookupat+0x627/0xc40 [ 339.503059][ T8018] filename_lookup+0x224/0x5f0 [ 339.508333][ T8018] kern_path+0x35/0x50 [ 339.512906][ T8018] lookup_bdev+0xd8/0x280 [ 339.517744][ T8018] resume_store+0x1d6/0x490 [ 339.522754][ T8018] kobj_attr_store+0x58/0x80 [ 339.527871][ T8018] sysfs_kf_write+0xf2/0x150 [ 339.532956][ T8018] kernfs_fop_write_iter+0x3af/0x570 [ 339.538740][ T8018] vfs_write+0x7d3/0x11d0 [ 339.543661][ T8018] ksys_write+0x12a/0x250 [ 339.548487][ T8018] do_syscall_64+0xcd/0xf80 [ 339.553500][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.559902][ T8018] [ 339.559902][ T8018] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 339.567806][ T8018] __mutex_lock+0x1aa/0x1ca0 [ 339.573013][ T8018] autofs_notify_daemon+0x4a6/0xd60 [ 339.578720][ T8018] autofs_wait+0x10f3/0x1ac0 [ 339.583806][ T8018] autofs_mount_wait+0x132/0x3c0 [ 339.589245][ T8018] autofs_d_automount+0x4b2/0x960 [ 339.594790][ T8018] __traverse_mounts+0x1b9/0x830 [ 339.600236][ T8018] step_into_slowpath+0x772/0xf50 [ 339.605767][ T8018] path_lookupat+0x627/0xc40 [ 339.610881][ T8018] filename_lookup+0x224/0x5f0 [ 339.616141][ T8018] kern_path+0x35/0x50 [ 339.620712][ T8018] lookup_bdev+0xd8/0x280 [ 339.625550][ T8018] resume_store+0x1d6/0x490 [ 339.630554][ T8018] kobj_attr_store+0x58/0x80 [ 339.635661][ T8018] sysfs_kf_write+0xf2/0x150 [ 339.640764][ T8018] kernfs_fop_write_iter+0x3af/0x570 [ 339.646578][ T8018] vfs_write+0x7d3/0x11d0 [ 339.651517][ T8018] ksys_write+0x12a/0x250 [ 339.656344][ T8018] do_syscall_64+0xcd/0xf80 [ 339.661359][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.667859][ T8018] [ 339.667859][ T8018] -> #1 (&of->mutex){+.+.}-{4:4}: [ 339.675063][ T8018] __mutex_lock+0x1aa/0x1ca0 [ 339.680177][ T8018] kernfs_seq_start+0x4f/0x2a0 [ 339.685446][ T8018] seq_read_iter+0x2c1/0x12d0 [ 339.690640][ T8018] kernfs_fop_read_iter+0x46c/0x610 [ 339.696358][ T8018] copy_splice_read+0x618/0xc20 [ 339.701731][ T8018] do_splice_read+0x285/0x370 [ 339.706938][ T8018] splice_direct_to_actor+0x2a1/0xa30 [ 339.712831][ T8018] do_splice_direct+0x174/0x240 [ 339.718198][ T8018] do_sendfile+0xb06/0xe50 [ 339.723134][ T8018] __x64_sys_sendfile64+0x1d8/0x220 [ 339.728850][ T8018] do_syscall_64+0xcd/0xf80 [ 339.733874][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.740278][ T8018] [ 339.740278][ T8018] -> #0 (&p->lock){+.+.}-{4:4}: [ 339.747310][ T8018] __lock_acquire+0x1669/0x2890 [ 339.752681][ T8018] lock_acquire+0x179/0x330 [ 339.757694][ T8018] __mutex_lock+0x1aa/0x1ca0 [ 339.762790][ T8018] seq_read_iter+0xe1/0x12d0 [ 339.768081][ T8018] kernfs_fop_read_iter+0x46c/0x610 [ 339.773799][ T8018] copy_splice_read+0x618/0xc20 [ 339.779162][ T8018] do_splice_read+0x285/0x370 [ 339.784340][ T8018] splice_file_to_pipe+0x109/0x120 [ 339.790044][ T8018] do_sendfile+0x400/0xe50 [ 339.794966][ T8018] __x64_sys_sendfile64+0x1d8/0x220 [ 339.800678][ T8018] do_syscall_64+0xcd/0xf80 [ 339.805682][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.812084][ T8018] [ 339.812084][ T8018] other info that might help us debug this: [ 339.812084][ T8018] [ 339.822376][ T8018] Chain exists of: [ 339.822376][ T8018] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 339.822376][ T8018] [ 339.834615][ T8018] Possible unsafe locking scenario: [ 339.834615][ T8018] [ 339.842059][ T8018] CPU0 CPU1 [ 339.847417][ T8018] ---- ---- [ 339.852755][ T8018] lock(&pipe->mutex); [ 339.856892][ T8018] lock(&sbi->pipe_mutex); [ 339.863906][ T8018] lock(&pipe->mutex); [ 339.870842][ T8018] lock(&p->lock); [ 339.874646][ T8018] [ 339.874646][ T8018] *** DEADLOCK *** [ 339.874646][ T8018] [ 339.882805][ T8018] 1 lock held by syz.4.516/8018: [ 339.887742][ T8018] #0: ffff88807a610868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 339.896451][ T8018] [ 339.896451][ T8018] stack backtrace: [ 339.902342][ T8018] CPU: 0 UID: 0 PID: 8018 Comm: syz.4.516 Not tainted syzkaller #0 PREEMPT(full) [ 339.902358][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.902365][ T8018] Call Trace: [ 339.902370][ T8018] [ 339.902376][ T8018] dump_stack_lvl+0x116/0x1f0 [ 339.902393][ T8018] print_circular_bug+0x275/0x340 [ 339.902410][ T8018] check_noncircular+0x146/0x160 [ 339.902430][ T8018] __lock_acquire+0x1669/0x2890 [ 339.902450][ T8018] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 339.902469][ T8018] lock_acquire+0x179/0x330 [ 339.902484][ T8018] ? seq_read_iter+0xe1/0x12d0 [ 339.902498][ T8018] ? __pfx___might_resched+0x10/0x10 [ 339.902509][ T8018] __mutex_lock+0x1aa/0x1ca0 [ 339.902522][ T8018] ? seq_read_iter+0xe1/0x12d0 [ 339.902534][ T8018] ? do_splice_read+0x285/0x370 [ 339.902550][ T8018] ? do_sendfile+0x400/0xe50 [ 339.902567][ T8018] ? __x64_sys_sendfile64+0x1d8/0x220 [ 339.902594][ T8018] ? do_syscall_64+0xcd/0xf80 [ 339.902613][ T8018] ? seq_read_iter+0xe1/0x12d0 [ 339.902629][ T8018] ? __pfx___mutex_lock+0x10/0x10 [ 339.902645][ T8018] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 339.902656][ T8018] ? seq_read_iter+0xe1/0x12d0 [ 339.902668][ T8018] seq_read_iter+0xe1/0x12d0 [ 339.902681][ T8018] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 339.902697][ T8018] kernfs_fop_read_iter+0x46c/0x610 [ 339.902724][ T8018] copy_splice_read+0x618/0xc20 [ 339.902745][ T8018] ? __pfx_try_to_wake_up+0x10/0x10 [ 339.902766][ T8018] ? __pfx_copy_splice_read+0x10/0x10 [ 339.902789][ T8018] ? __fget_files+0x204/0x3c0 [ 339.902803][ T8018] ? __pfx_copy_splice_read+0x10/0x10 [ 339.902817][ T8018] do_splice_read+0x285/0x370 [ 339.902833][ T8018] splice_file_to_pipe+0x109/0x120 [ 339.902856][ T8018] do_sendfile+0x400/0xe50 [ 339.902874][ T8018] ? __pfx_do_sendfile+0x10/0x10 [ 339.902891][ T8018] ? __pfx___seccomp_filter+0x10/0x10 [ 339.902912][ T8018] __x64_sys_sendfile64+0x1d8/0x220 [ 339.902927][ T8018] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 339.902942][ T8018] ? __secure_computing+0x28e/0x3b0 [ 339.902957][ T8018] do_syscall_64+0xcd/0xf80 [ 339.902970][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.902986][ T8018] RIP: 0033:0x7f464458f749 [ 339.902999][ T8018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.903014][ T8018] RSP: 002b:00007f464546c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 339.903029][ T8018] RAX: ffffffffffffffda RBX: 00007f46447e6180 RCX: 00007f464458f749 [ 339.903039][ T8018] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 339.903048][ T8018] RBP: 00007f4644613f91 R08: 0000000000000000 R09: 0000000000000000 [ 339.903055][ T8018] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 339.903060][ T8018] R13: 00007f46447e6218 R14: 00007f46447e6180 R15: 00007ffcdbe8c978 [ 339.903070][ T8018] [ 340.185407][ T30] audit: type=1400 audit(1767349031.612:612): avc: denied { watch watch_reads } for pid=8011 comm="syz.4.516" path="pipe:[5133]" dev="pipefs" ino=5133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 340.517973][ T8015] IPVS: using max 133 ests per chain, 319200 per kthread [ 340.535675][ T5929] usbhid 3-1:0.0: can't add hid device: -71 [ 340.547271][ T5929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 340.569134][ T8006] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 340.576733][ T8006] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 340.639813][ T5929] usb 3-1: USB disconnect, device number 12