last executing test programs: 58.204062889s ago: executing program 0 (id=53): pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000008407f04ffff000000000002090224050064000000090400000300000000000000230001e95e75c9ae97e4e8b8221800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @main=@item_012={0x1, 0x0, 0xa, 'c'}, @global=@item_4={0x3, 0x1, 0x4, "518a801e"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x1, 0x0, 0xa, "d1"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x1, 0x1, 0x7, '^'}, @main=@item_012={0x2, 0x0, 0xa, "a5ad"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) socket$inet6(0xa, 0x3, 0x7) 58.203657189s ago: executing program 2 (id=54): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000003c0)=[@enter_looper], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) unshare(0x60040000) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r5 = getpid() (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) sched_setscheduler(r5, 0x0, &(0x7f0000000400)=0x8000009) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f0000002480)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/224, 0xe0}, {&(0x7f00000006c0)=""/191, 0xbf}, {&(0x7f0000002140)=""/179, 0xb3}], 0x3, &(0x7f0000000880)=""/95, 0x5f}, 0x9}, {{&(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/249, 0xf9}, {&(0x7f0000000a80)=""/112, 0x70}, {&(0x7f0000000b00)=""/41, 0x29}, {&(0x7f0000000b40)=""/177, 0xb1}, {&(0x7f0000000c00)=""/107, 0x6b}], 0x5, &(0x7f0000000d00)=""/175, 0xaf}, 0xa}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000dc0)=""/215, 0xd7}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x2, &(0x7f0000001f00)=""/102, 0x66}}, {{&(0x7f0000001f80)=@generic, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002000)=""/184, 0xb8}, {&(0x7f00000020c0)=""/39, 0x27}, {&(0x7f0000002100)=""/33, 0x21}, {&(0x7f0000002580)=""/118, 0x76}, {&(0x7f00000021c0)}, {&(0x7f0000002200)=""/190, 0xbe}, {&(0x7f00000022c0)}, {&(0x7f0000002300)=""/147, 0x93}], 0x8, &(0x7f0000002440)=""/60, 0x3c}, 0x8}], 0x4, 0x40012341, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f00000001c0)={0x7bfc, 0x20, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x94}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000000001050500000000000000000a0000001800028006000340000200000c00028005000100000000003c0001805c52be3998b65e0c00028005000100000000002c00018014000300c802000000000000000000000000000114000400fe800000000000000000000e000017aa08000740000000000800238004000380"], 0x78}}, 0x0) (async, rerun: 64) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (rerun: 64) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x9) 55.2444746s ago: executing program 0 (id=65): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be000000000000000000000000aaff02000000000000000000000000000100000000000000a410e8"], 0xfdef) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000540)={0x20, 0x22, 0x28, {0x28, 0x3, "c26313852642792c3cbdeace918d0fb74237cc4b44b73b5173c22fb0688881ceaa52973661d6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be000000000000000000000000aaff02000000000000000000000000000100000000000000a410e8"], 0xfdef) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000540)={0x20, 0x22, 0x28, {0x28, 0x3, "c26313852642792c3cbdeace918d0fb74237cc4b44b73b5173c22fb0688881ceaa52973661d6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 55.195501981s ago: executing program 2 (id=67): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0xffffffffffffffff, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x401, 0x3, 0x9117, 0x0, 0x400000000000}, 0x0, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2044d0, &(0x7f00000005c0)={[{@noauto_da_alloc}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff1608001540000000000800048004000280140005800f00"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) r7 = socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$binfmt_misc(r9, &(0x7f00000000c0)='-P', 0x2) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000008500)=@newchain={0x201c, 0x64, 0x800, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {0x0, 0xd}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xab}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1e78, 0x2, [@TCA_FLOW_ACT={0x12a8, 0x9, 0x0, 0x1, [@m_xt={0x228, 0x17, 0x0, 0x0, {{0x7}, {0x10c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x46, 0x6, {0x138a, 'filter\x00', 0x0, 0x9, "105982091e7c4ab342bb8698c2e72bcd0845c1a1ac89dae181509041"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x55, 0x6, {0x4, 'security\x00', 0x1, 0x7, "4bb625b043375d2ef3d85d68cb9f8fc94b2d518f8a537c11e8d50f7a6c28f6ddc1c1692de3f84424a87eca"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xf7, 0x6, "ba6633475d99f3624b7b19a022a858fbede046e56b4875af1fe82aebeef6ad5b228ed4e8379d641c9666ebf157766bdc8205e54ffe132f32acbfb998c7a7f809b0bfb015d3377291935cb4adbe95c93b6134138bab50dca8727124643a6e422e4a70b0a4032f203abb5150965edbf271446c2deb64be3585ccde79a537d51ceb50a964e3bd736dd3179ead316c48642b8e7c1483a833eac528313c7dffcc3ae687c1fed43c482b0a126356618c0351e328c564395c4abc2457295c62c38b873f61559cb427895f63eafb446adfeb4ae309f63b4fc8b7451419c077d10c3e3e00495a92a23f0bf0407b598dc2eb7b24c1addb00"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_vlan={0x107c, 0x1b, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x14, 0x1000, 0x10000000, 0x1, 0xb}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x743}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd01}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOW_EMATCHES={0x31c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x3}, {{0x3, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x1}, {{0x4, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x6}, {0x4, 0x1, 0x0, '~'}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x2}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x3, 0x2, 0x6cff}, {0x2, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x5, 0x6a, 0x4ed88cfa}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x9}, {0xffffffffffffffff, 0x6, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x40}, {{0x3, 0x0, 0x1, 0x1}, {0xbd3b, 0x1}}}}, @TCF_EM_CONTAINER={0x88, 0x1, 0x0, 0x0, {{0x7ff, 0x0, 0x1}, "644a0cbff90c762ca844872cc4ed5eea7b9f5bbbe7fde08df6fc259e3e1280198a464c26f50e41aa0438197a267bbb21f90619e6832a600678a27566bfbefb464f151cc3cde1f66e428be1db5eb75bb0bc0e7964c64d5007a205abdb155ae6be5fdecde91c42f731aef80bd9f1bf8b4224cb0def3bc2d61b3825"}}, @TCF_EM_META={0x70, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="95ae"]}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_VAR="6f07efbbf6743a", @TCF_META_TYPE_VAR="789d6fba4fd55b76", @TCF_META_TYPE_VAR="14", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="8a0f", @TCF_META_TYPE_VAR="7f882239107d9942", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="05000000"]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="fa", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR="f3b15482ed93", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="d5645c40f4", @TCF_META_TYPE_VAR="27fef3bcc0"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x1b0}, {{0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfc01}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x138a}, {{0x2, 0x0, 0x1}, {0x4, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x9}, {0x4, 0x1, 0x5}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x9}, {0x6, 0x2, 0x1, 0x6, 0x7, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xa6, 0x8, 0x2b4}, {0x3, 0x1, 0x2}}}, @TCF_EM_CONTAINER={0xb4, 0x2, 0x0, 0x0, {{0xf725, 0x0, 0x7}, "e7b5e8c403edc4d8f83abfbddc166b79ae7571c7bdd2c586c28aad01ee1c7346a6b177621148cf4a7ffc2c9c36e21d08414bc971f8836e532c8bf8219e0021f2aa90078730815e7c5eaf42bb11b3ea52f6e71b1f5db46b1a9620ee90cb8585d91993f81753b2087e8af7369d700c530002591a4764742cf628eb258c70d1a9cd0f330863fd73a30e4246bc9dfb5d74536c2c26d7483431d00c4eb93572becc6bd4553e11a849"}}]}]}, @TCA_FLOW_MASK={0x8, 0x6, 0xff}, @TCA_FLOW_ACT={0x880, 0x9, 0x0, 0x1, [@m_csum={0xd8, 0x17, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x81, 0x1, 0x0, 0x6}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x20000000, 0x8, 0x81}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x8, 0x200, 0x7}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6, 0x2}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x1, 0x6, 0x7}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0x1, 0xfffffffffffffff9, 0xff, 0x73d9}, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x31c, 0x1b, 0x0, 0x0, {{0x7}, {0x2bc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x91, 0x6, {0x9, 'mangle\x00', 0x4, 0xe, "c91703946d2c369c5fb88ce976b14660d81c92b448f9db8e4e5e225ba0017cb05f8daa2c025d15f0ba63cc602ae3eeba211bd530f97e5ef39d4c97aa4c8670139428840ba75e61c71b7947576791ca4eb1d322cae39e481a1ad15fbd9f14445212decd38f17316"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x105, 0x6, {0x8001, 'filter\x00', 0x1, 0x200, "d8154cd2f4c03653c0bd04cb2b69e978c4d582f65fd221ae643f25e62cd8f9a20979fa1d81e554cf50035dcf8604c302f3df1069c964e69e4aee26094be245e0ad7f0caa7efcc169fbb44e371e6e10e4e5aab384430b9ba4f66e90490f93a62c2b7eeb3c5f06002317d2a8ae6a0f99116ab1e866ac9447457143e2927b83f5e13d5a7d7a34e13ed6d0e2122454b489cd53f7f88c8c78bbccbd1463f9db6430a80678b7c5a956f483eacbc4d3a2f5b65850ef8356cc591bac12ac1fc3addb3e8448297ae4ad1a50444f9f730b07c67bac55d481fce2e621adb1fe1c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000000}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0xac, 0x6, {0xef, 'nat\x00', 0xfe, 0x9, "c48f1d56071e1c0716d467d151b5532266b6e9985a9b98e771763771668aeded77224d1e8d7e3e25023dfaf53d4d2f0dcc04929f1c758b2e0eb2abb0e78fdc91c50f4a450b500881298fbdf79e56c49f86f30d75447164f30a3ac5c8dbe893fb6268549a5b3cece4025a641595167d9a473be42333ed92db4d13e7574ef57333b7e6"}}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x39, 0x6, "19fd67c65f9381e85dc1d31297e5626a59a047efe46505026065a632cdf7cfacc9bd8d4de55c97b1614113a57cf6dee2aec51ee4b2"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x164, 0x1b, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x9, 0x2, 0x3, 0x5}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffff10, 0x8, 0x0, 0xc, 0x2}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffff99, 0x8, 0x5, 0xf2ad, 0xfffffffc}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x80000000, 0x2, 0xe0d3}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0xffffff80, 0x10000000, 0x4, 0x9}, 0x53}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8f8d, 0xdf36, 0x20000000, 0x5, 0xfffffffe}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2915, 0xfffffff7, 0x3, 0xffff8000, 0x6}, 0x8}}]}, {0x6d, 0x6, "63e9d5fa24b41755a5b9e4c131d4ef983a38c071abb22db300505ffee926a33a7fe916f6779cdf3bebeb99f3971e0e9f0ffdf0a0ba8ba2770cf6a08c0f647c2183ec040122114399b1993c7b777f7ec83a2f191c9909dfd6b9889793b13abf730e6612f70e4314f464"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x110, 0x18, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xa25, 0x4, 0x3, 0x7, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x4, 0x7, 0x5, 0xff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18cb, 0x7}}]}, {0xa8, 0x6, "c1562bc96b400277e26ff3d020e88a7e61583db31b0cebd24903864b7c9e6622df05b2c5fa9b363b375a944c839b928650b9a2140f492b31fe1750ba1b3233fd62fc99e5599443a95ce2a6a721af0ec9fb695357daab0a01be4911bea5ef3cac661a4632d0357a94308d8299c5afc126c01a437ea315509df736ae3ad58c9d8a3abb8caab11cc5afdf77ec790e02398b03e4a9c0fd952dc47f648fc02ab91d6cf2fc18e2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0xc4, 0x12, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}]}, {0x8a, 0x6, "2db289e9a60443f8694b8d49caa992ec6037c59161451f8c1ca5fcbb0665e10076f2e258e441c01acac78c1ee5495ae63ca8f8df7725de977ab40ed08e5e885a8ebe965e7f223f8067b5390d1ebfa3736a4dc18cc3c898e6f18a0fa3a10547a025d9ffca7723497f5ce3474fdbba12f6035a0b41f478cf7d2f08ca5a2fac85323b7e87e19615"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xb4, 0x5, 0x0, 0x0, {{0x9}, {0x4}, {0x85, 0x6, "e9138005e7642d5dc63b0878896280b42abe54a4b26e7a87aad7daac194ba90ebbd82c3aae097d84b07595a17ec63f450e79d0affa6246a476d2dd715107a3ca2ad7df8373c8a4ffd80d1cfe7a621cea0d24959ca5ece3f220fc1e347cd81452b02646cadc098a7cada4c725b7befe3b6a81d8fff9668f916e6975a876aeec0421"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x9c, 0xf, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x7ea, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1813, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xffffff63, 0xb, 0xfffffff8, 0x39}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x79e, 0xffffffffffffffff}}]}, {0x34, 0x6, "46503a61f95eea48d5ce284b8840ce6d3df8b9030b72bd5911b038b6d5e3c94783de5673b95cfb9ceea4a4b7514329b7"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x448e}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x7}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xf}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_fw={{0x7}, {0x144, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xabb4}, @TCA_FW_POLICE={0xa8, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x47d}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa22c, 0x0, 0xdc6, 0x6, 0x6, {0xd, 0x0, 0x7cc0, 0x3, 0x3, 0x9}, {0x0, 0x2, 0x3, 0x80, 0xf0, 0x7}, 0x6, 0x8c, 0xfffffff9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x5, 0x80, 0x8, {0xd9, 0x0, 0x2, 0x4, 0x5, 0x6}, {0x5, 0x2, 0x7, 0x5, 0x1}, 0x0, 0xe}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}]}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x8}}, @TCA_FW_INDEV={0x14, 0x3, 'sit0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_INDEV={0x14, 0x3, 'ip6erspan0\x00'}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x9, 0x3, 0xffffffff, {0x9, 0x2, 0x9, 0xf, 0x7f, 0xffffe2d1}, {0x0, 0x1, 0xfffe, 0x36ed, 0x5, 0xc2a6}, 0x5, 0x5, 0x2}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xffe0}}, @TCA_FW_CLASSID={0x8, 0x1, {0xa}}]}}]}, 0x201c}}, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003cc0)=[{{&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003bc0)=[{&(0x7f0000000780)="6af50328590edf68822b2f6a3316e1e737f58b0dd8ec6ab507be8f45056975ce73d40c79fb9c4182e71bb9be063a8aabed08f3728d223c3c9e71bd1340a72a278d84184a185fea", 0x47}, {&(0x7f0000000dc0)="a1060a2f1d07dbc41232b734b458c3fcece06568ec631f8a2e069004c877704b78a08ec2635123e0a4d2a38d724dc72e4e9e218351da073ee53a5ae5fcacc86635b69ecd084a3264aa151f85d68dc38ca861153f7079e5be2407660151fef3051a495660ac0772d41724a6c6835c3286648310d828a9daad52e0ede3bf7225f3d60119a3065a55f3b47a43a84c2ae29b8eef3a613a58e6c4054fbcdf13669a1c8b7cddaf95c83e5251f54e8b4c9db0793902df0155633a5270a19a83b1f0ad7407829bcc6c2d", 0xc6}, {&(0x7f0000000ec0)="02eadb460f567a0c4ba1c9dc1d63f0b9d41c403940f6a39cd234618dadc96577f493010786c926b4618f9eeb2db7941dcdced98c8efd96c6a8e94ea9e71fb3a6e1bb814ec362f1a09de81bc36eee5f7cf52fa9ed1caaa0c982fa0bf2336f556cc707fcd793019dad285f4ced7e8c18eaa221b1c427f72e25cb01b6eb7ef6dc19307ef845399df8089d58d7e28ddab2a29a8fbc1d89647d01a36437f1ecb0ff0ebf7aad400f0ba0bce58fcdb6a669fefb4c8586d7add58dcb8171d2bf890c818fca30c74b5b725a61770e04f1898762c2c8181026904b27f23bb8f8f8aca97c5287b3b3c5", 0xe4}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="6bb76dbe8c3ad8e638a8499380028480ba512047c1da58fba9af9182176251094d4798423643ab88971a53de9884822594a1ac16035f06cd977415ac553c8cd51dbfb1d16a35a6ff99e5e8611c443168dc260dc31de817db194fbcfef57a06c5f4614b76a2e2be2167b384ae4fda85804c8e364448d427ee9d89d27d137c8f23d2487192afa8d4995f8c756616e2936014ab864ab8224e162406224b6a6a120932005be9e6980d877b022c2996", 0xad}, {&(0x7f0000002bc0)="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", 0x1000}], 0x7, &(0x7f0000000640)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="0000000018000000000000f3be7f2cfc3a13d0510622b41008574bc882d304095b0da600", @ANYRES32=r3, @ANYRES32=r9], 0x48, 0xc1}}], 0x1, 0x0) bind$inet(r2, &(0x7f0000000540)={0x2, 0x4e22, @private=0xa010100}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x208080, &(0x7f0000002380)={[{@nogrpid}, {@data_err_ignore}, {@nogrpid}, {@noinit_itable}, {@errors_continue}, {@nouid32}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@nombcache}]}, 0x4, 0x5b3, &(0x7f0000000800)="$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") fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) 55.124398442s ago: executing program 0 (id=68): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3, 0x0, 0x0, 0xfffffffd}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='hel', 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x1e, 0x11, 0x8000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xa, 0x0, 0x7b}}]}}, 0x0) 54.651918854s ago: executing program 0 (id=72): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x9, 0x81, 0x8000000000000000}) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x200, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000000000000000000000000700000001440e05", @ANYRESDEC], 0x20}}], 0x1, 0x400c4) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c5, &(0x7f0000000480)="$eJzs3U9rI2UcB/DfJOlk1ENy8KIIO+AePC12b+IlRXZB7MklB/Wgxd0FaYKwCwX/YNyTVy8ePPgKBMEXshffgeBV8OYKCyMzmWkmJZs20lS2/XwuffrM8538nsnQTg/59ZPXpod387j/6OvfI8uS6IxiFE+SGEYnGt/GktH3AQA8z54URfxVzG2SSyIi215ZAMAWne33f28x/PVCygIAtujOBx++t7e/f+v9LLK4Pf3uaFz+ZV9+nR/fux+fxSTuxZsxiKcR1YPCTlRPC+XwdlEUs15eGsb16exoXCanHz+uz7/3Z0SV341BDKup46eNKv/u/q3dfK6Vn5V1vFi//qjM34xBvHwcXsrfXJGPcRpvvN6q/0YM4rdP4/OYxN2qiEX+m908f6f44e+vPirLK/PJ7Gjcr9YtFN0LfmsAAAAAAAAAAAAAAAAAAAAAALjEbtS9c/qRX4vr03Kq7r/TfRpp+W3eGC7355nnk+ZE7f5ARVHMivip1VIwL+qFi3wvXu21GwsCAAAAAAAAAAAAAAAAAADA1fXwiy8PDyaTew/OZdB0A+hFxD93Iv7reUatmWuxfnG/fs2DyaRTD5fWPE7bM9Ft1iQRa8soN3FOl+W0wQsna24GP/9SbvD083SP41nr0FurN7iz/X01d9fhQbL6tfrRzGT1TfJjGrFYk0Y79cqzb6T0WWUUscntl648NNh47+lL1WC2Zk0k6wp7+4/5latnkpO7SKurujK+Uw9a8eU12Zne90VLj5OSqltHfxs/hgAAAAAAAAAAAAAAAAAAgKXP/684+GhttFP4KDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl8Ti//9vMJjV4TMsTuPBw/95iwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwB/wYAAP//skVVbA==") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) accept4(r3, 0x0, &(0x7f0000000400), 0x180800) getsockopt$sock_buf(r6, 0x1, 0x3d, &(0x7f0000000100)=""/62, &(0x7f0000000340)=0x3e) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES8=r7], 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x20000000) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000000)=0x40ae, 0x4) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xfffffffffffffe9e, &(0x7f0000000840)={&(0x7f00000008c0)={0x58, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x11, 0x8, "70afa05636abb44ca7f2cfb6df"}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000888c}, 0x800) write$binfmt_script(r8, &(0x7f00000000c0), 0x28) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000002f40)=""/4099, 0x1003}], 0x1, 0x2200, 0x1, 0x8) 54.515339007s ago: executing program 0 (id=73): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x25c6, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="2800000024000100f4ffffffffffffff1800ff7f1400"], 0x28}], 0x1, 0x0, 0x0, 0x40440d4}, 0x0) sendmmsg(r0, &(0x7f0000006d00)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000500)={'IDLETIMER\x00'}, &(0x7f0000000540)=0x1e) write$tun(r3, 0x0, 0x0) socket(0x11, 0x3, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x25c6, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="2800000024000100f4ffffffffffffff1800ff7f1400"], 0x28}], 0x1, 0x0, 0x0, 0x40440d4}, 0x0) (async) sendmmsg(r0, &(0x7f0000006d00)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) (async) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) fcntl$dupfd(r2, 0x0, r2) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000500)={'IDLETIMER\x00'}, &(0x7f0000000540)=0x1e) (async) write$tun(r3, 0x0, 0x0) (async) 54.35646509s ago: executing program 0 (id=74): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x210c04, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'cp936'}}, {@dmask={'dmask', 0x3d, 0x6}}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@errors_continue}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0xb0}}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x1, 0x1530, &(0x7f0000001340)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJMmZJMktt2T9PxPzV6fO/5zzO538/mee7+fzfmY9s95n7WfPM+9+995z+bbL0BqNalZtQETwb8FLHxIAIBYABgLAdQAQAEDZuLJxGfPZJSb8exthf6xHkq92Bexq4v5nbdz/rI37n7Vx/7M27n/Wxv3P2rj/WRv3n7GsbPP0/NfzI+s++P5/Vsbv//9F0kuO/WptyRu7AsT8sync////4b+Ry/3/rxX8M0/i/mdt3P+sKvZqF8D+F+DXf1aQ7e/OcP+zNu4/Y1nZL+8Fx8LVvx/9Zz8g8p/8GYjvdemrfPX38+/uP2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wx9ic4669QAJA5vtp1McYYY4wxxhhj7I/js13tChhjjDHGGGOMMfafhyBAgoIAYiAbxEJ2yAECICZz/nqIgxsgN9wIeSAv5IP8EA8FoCBoMGCBIIRCUBiicBMUgZuhKBSD4lACHJSEUnALlIZboQzcBmXhdigHd0B5qAAVoRLcCZXhLqgCd0NVuAeqQXWoATXhXqgF90FtuB/qwANQFx6EevAQ1IeHoQE8Ag3hUWgEj0FjeByaQFNoBs2hxf8o/yXoAS9DT+gFCdAb+sAr0Bf6QX8YAAPhVRgEr8FgeB0SYQgMhTdgGLwJw+EtGAEjYRS8DaPhHRgDY2EcjIckmAAT4V2YBO/BZJgCU2EaJMN0mAHvw0yYBbPhA5gDH8JcmAfzYQGkwEewEBZBKnwMi+ETSIMlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBO+FT2AWfwW7YA3vhc9gHX/yL+Wf+Jr8rAgIKFKhQYQzGYCzGYg7MgTkxJ+bCXBjBCMZhHObG3JgH82A+zIfxGI8FsSAaNEhIWAgLYRSjWASLYFEsisWxODp0WApLYWm8FctgGSyLZbEclsPyWAErYCWshJWxMlbBKlgVq2I1rIY1sAbei/dib6yNtbEO1sG6WDfz9hQ2wAbYEBtiI2yEjbExNsEm2AybYQtsgS2xJbbCVtgG22BbbIvtsB22x/bYATtgR+yInbATdsbO2AW7YFfsht3SX8oG+DK+jL2wmuiNfbAP9sXEbP1xAA7AV3EQvoav4euYiENwKL6Bb+CbOBxP44iLI3EUjsLK4h0cg2ORxHhMwiSciBNxEk7CyTgFp+A0TMbpOANn4EychbPwA5yDH+KHOA/n4QJMwRRciIswFVNxMZ7BNFyCS3EZLscVuBxX4WpchWtxHa7FDbgBN+Em3IJbcBtuwx24Az9FBYCf4R7cg4m4D/fhftyPB/AAHsSDmI7peAgP4WE8jEfwCB7Fo3gMj+MJPI6n8BSexjN4Fs/ieTyPF/CF+K8bflpsTSKIDEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEbpFb5BF5RD6RT8SLeFFQFBRGGEEizDhSiKiIiiKiiCgqioriorhwwolSopQoLUqLMqKMKCtuF+XEHaK8qCBau0qikqgs2rgq4m5RVVQV1UR1UUPUFDVFLVFL1Ba1RR1RR9QVdUU98ZCoL3pjf3xEZHSmkRiCjcVQbCKaCnn5CNVSDMdWorVoI54SI3EEthMtXXvxrOggxmBH8RcxFp8XncV47CJeFF1FN9FdvCR6iFaup+glJmNv0UdMw76in+gvBoiZWF18gHOy1xCvi0QxRAwVb4gF+KYYLt4SI8RIMUq8LUaLd8QYMVaME+NFkpggJop3xSTxnpgspoipYppIFtPFDPG+mClmidniAzFHfCjminlivlggUsRHYqFYJFLFx2Kx+ESkiSViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLHWKn+FTsEp+J3WKP2Cs+F/vEF2K/+FIcEF+Jg+KvIl18LQ6Jb8Rh8a04Ir4TR8X34pg4Lk6Ik+KU+EGcFmfEWXFOnBc/igviJ3FReAESpZBSKhnIGJlNxsrsMoe8RuaUQebxX8bJG2RueaPMI/PKfDK/jJcFZEGppZFWkgxlIVlYRuVNsoi8WRaVxWRxWUI6WVKWkrfI0vJWWUbeJsvK22U5eYcsLyvIirKSvFNWlndJiFzaRjVZXdaQNeW9MgHuk7Xl/bKOfEDWlQ/KevIhWV8+LBvIR2RD+ahsJB+TjeXjsolsKpvJ5rKFfEK2lE/KVrK1bCOfkm3l07KdfEa2l8/KDtJf/hZ5XnaWL8gu8kXZVXaT3eVP8qL0sqfsJaE3yD7yFdlX9pP95QA5UL4qB8nX5GD5ukyUQ+RQ+YYcJt+Uw+VbcoQcKUfJt+Vo+Y4cI8fKcXK8TJIT5ET5rpwk35OT5RQ5VU6TyXK67H95pdlS/sP8d38nf/DPW98kN8stcqvcJrfLHXKn/FTukrvkbrlb7pV75T65T+6X++UBeUAelAdlukyXh+QheVgelkfkEXlUHpXH5HF5Tp6Up+QP8rQ8I8/Ic/K8PC8vXP4agEIllFRKBSpGZVOxKrvKoa5ROdW1Kpe6TkXU9SpO3aByqxtVHpVX5VP5VbwqoAoqrYyyilSoCqnCKqpuwsvfMKq4KqGcKqlKqVv+lXxVRN2siqpiv8rPrC/h79TXQrVQLVVL1Uq1Um1UG9VWtVXtVDvVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVVXVV3VV31UP1UD1VT5WgElQf9Yrqq/qp/mqAGqheFRn7MFgNVokqUQ1VQ9UwNUwNV8PVCDVCjVKj1Gg1Wo1RY9Q4NU4lqSQ1UU1UUk1Sk9VkNVVNVckqWc1QM9RMNVPNVrPVHDVHzVVz1Xw1X6WoFLVQLVSpKlUtVotVmlqilqhlaplaoVaoVWqVWqPWqHVqndqgNqg0tVltVlvVVrVdbVc71U61S+1Su9VutVftVfvUPrVf7VcH1AF1UB1U6SpdHVKH1GF1WB1RR9RRdVQdU8fUCXVCnVKn1Gl1Wp1VZ9V5dV5dUBfURXUx47QvEIEIVKCCmCAmiA1igxxBjiBnkDPIFeQKIkEkiAvigtzBjUGeIG+QL8gfxAcFgoKBDkxgA3G56dHgpqBIcHNQNCgWFA9KBC4oGZQKbglKB7cGZYLbgrLB7UG54I6gfFAhqBhUCu4MKgd3BVWCu4OqwT1BtaB6UCOoGdwb1AruC2oH9wd1ggeCusGDQb3goaB+8HDQIHgkaBg8GjQKHgsaB48HTYKmQbOgedDiD13f+9N5n3Q9dS+doHvrPvoV3Vf30/31AD1Qv6oH6df0YP26TtRD9FD9hh6m39TD9Vt6hB6pR+m39Wj9jh6jx+pxerxO0hP0RP2unqTf05P1FD1VT9PJerqeod/XM/UsPVt/oOfoD/VcPU/P1wt0iv5IL9SLdKr+WC/Wn+g0vUQv1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Un+pd+jO9W+/Re/Xnep/+Qu/XX+oD+it9UP9Vp+uv9SH9jT6sv9VH9Hf6qP5eH9PHdRl9Up/SP+jT+ow+q8/p8/pHfUH/pC9qn3Fyn/H2bpRRJsbEmFgTa3KYHCanyWlymVwmYiImzsSZ3Ca3yWPymHwmn4k38aagKWgykCFTyBQyURM1RUwRU9QUNcVNceOMM6VMKVPalDZlTBlT1pQ15Uw5U96UNxVNRXOnudPcZe4yd5u7zT3mHlPdVDc1TU1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDHNTDPTwrQwLU1L08q0Mm1MG9PWtDXtTDvT3rQ3HUwH09F0NJ1MJ9PZdDZdTBfT1XQ13U1308P0MD1NT5NgEkwf08f0NX1Nf9PfDDQDzSAzyAw2g02iSTRDzVAzzAwzw81wM8KMNKMyTlTNO2aMGWvGmfEmySSZiWaimWQmmclmsplqpppkk2xmmBlmpplpZpvZZo6ZY+aauWa+mW9STIpZaBaaVJNqFpvFJs2kmaVmqVlulpuVZqVZbVabtWatWQ/rzUaz0Ww2m81Ws9VsN9vNTrPT7DK7zG6z2+w1e80+s8/sN/vNAXPAHDQHTbpJN4fMIXPYHDZHzBFz1Bw1x8wxc8KcMKfMKXPanDZnzVlz3uS9/H7pTazNbnPYa2xOe63NZa+zfxvns/ltvC1gC1pt89i8v4qNtbaoLWaL2xLW2ZK2lL3lN3F5W8FWtJXsnbayvctW+U1cy95na9v7bR37gK1p7/1VXNc+aOvZx2x9RADb1Da0zW0j+5htbB+3TWxT28w2t23t07adfca2t8/aDva538QL7SK72q6xa+06u9vusWftOXvYfmvP2x9tT9vLDrSv2kH2NTvYvm4T7ZDfxKPs23a0fceOsWPtODv+N/FUO80m2+l2hn3fzrSzfhOn2I/sHJtq59p5dr5d8HOcUVOq/dgutp/YNBvAUrvMLrcr7Eq76v/WusxusBvtJrvLfma32m12u91hd2aeCNs9dq/93O6zX9hD9ht7wH5lD9ojNt1+/XOcsX9H7Hf2qP3eHrPH7Ql70p6yP6jM7Ix9P2l/shett0BIQJIUBRRD2SiWslMOuoZy0rWUi66jCF1PcXQD5aYbKQ/lpXyUn+KpABUkTYYsEYVUiApTlG6izPKKUwlyVJJK0S1Umm6lMnQblaXbqRzdQeWpAlWkSnQnVaa7qArdTVXpHqpG1akG1aR7qRbdR7XpfqpDD1BdepDq0UNUnx6mBvQINaRHqRE9Ro3pcWpCTakZNacW9AS1pCepFbWmNvQUtaWnqR09Q+3pWepAz1FH+gt1ouepM71AXehF6krdqDu9RD3oZepJvSiBelMfeoX6Uj/qTwNoIL1Kg+g1GkyvUyINoaH0Bg2jN2k4vUUjaCSNordpNL1DY2gsjaPxlEQTaCK9S5PoPZpMU2gqTaNkmk4z6H2aSbNoNn1Ac+hDmkvzaD4toBT6iBbSIkqlj2kxfUJptISW0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO2gnfUq76DPaTXtoL31O++gL2k9f0gH6ig7SXymdvqZD9A0dpm/pCH3ne9H3dIyO0wk6SafoBzpNZ+gsnaPz9CNdoJ/oInmCEEMRylCFQRgTZgtjw+xhjvCaMGd4bZgrvC6MhNeHceENYe7wxjBPmDfMF+YP48MCYcFQhya0IYVhWCgsHEbDm8Ii4c1h0bBYWDwsEbqwZFgqvCUsHd4alglvC8uGt4flwjvC8mGF8LEHKoV3hpXDu8Iq4d1h1fCesFpYPawR1gzvDWuF94W1w/vDOuEDYZnwwbBe+FBYP3w4bBA+EjYMHw0bhY+FjcPHwyZh07BZ2DxsET4RtgyfDFuFrcM24TVh2/DpsF34TNg+fDbsED738/yDizLnn/rNfELYO+wTvhK+Enp/v5wfXRBNiX4UXRhdFE2NfhxdHP0kmhZdEl0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y3RT1vmY2cOiEk065wMW4bC7WZXc53DUup7vW5XLXuYi73sW5G1xud6PL4/K6fC6/i3cFXEGnnXHWkQtdIVfYRd1Nroi72RV1xVxxV8I5V9KVcs1dC9fCtXRPulautWvjnnJPuafd0+4Z94x71nVwz7mO7i+uk3vedXYvuBfci66r6+a6u5dcDzch16XXZILr4/q4vq6v6+/6u4FuoBvkBrnBbrBLdIluqBvqhrlhbrgb7ka4EW6UG+VGu9FujBvjxrlxLskluYluopvkJrnJbrKb6qa6ZJfsZrgZbqab6SrPurSVuW6um+/muxSX4ha6jHPGVLfYLXZpLs0tdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O90ut8vt9tddWtTtc/vdfnfAHXAH3V9duvvaHXLfuMPuW3fEfeeOuu/dMXfcnXAn3Sn3gzvtzriz7pw77350F9xP7qLzLikyITIx8m5kUuS9yOTIlMjUyLRIcmR6ZEbk/cjMyKzI7MgHkTmRDyNzI/Mi8yMLIimRjyILI4siqZGPI4sjn0TSIksiSyPLIssjKyLeF9ga+kK+sI/6m3wRf7Mv6ov54r6Ed76kL+Vv8aUv1Z3m/e2+nL/Dl/cVfEX/uG/im/pmvrlv4Z/wLf2TvpVv7dv4p3xb/7Rv55/x7f2zvoN/znf0f/Gd/PO+s3/Bd/Ev+q6+m+/uX/I9/Mu+p+/lE3xv38e/4vv6fr6/H+AH+lf9IP+aH+xf94l+iB/q3/DD/Jt+uH/Lj/Aj/aiYt/3ozEtkGO+T/AQ/0b/rJ/n3/GQ/xU/103yyn+5n+Pf9TD/Lz/Yf+Dn+Qz/Xz/Pz/QKf4j/yC/0in+o/9ov9Jz7NL8m8aexX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u9/hd/pP/S7/md/t9/i9/nO/z3/h9/sv/YGLmX+B9rU/5L/xh/23/oj/zh/13/tj/rg/4U/6U/4Hf9qf8Wf9OX/e/+gv+J/8Rf6bNcYYY4yxf8qEK0Px65lLt/N7/06O+MWT+wDAtdvyp/9yPuOMcn2eS+N+Ij424+Ozvbo8kvmoVi0hIeHyc9MkBIXnAWT+JCjDz796cDleAm3gaWgPraH079bfT3Q7T/9g/ejtADl+kZNRUGZ8Zf0vATDhd9Z/4qlRC8uFZ+P+H+vPAyha+EpOdrgSL4E2P99faQ1l/k79eVv+g/qzf5UE0OoXOTnhSnyl/lLwJDwH7X/1TMYYY4wxxhhj7JJ+omKnzOvPzN/4/L3r83h1JScbXIn/0fU5Y4wxxhhjjDHGrr7nu3V/5on27Vt3+tcHVf5HWf/0oDH8p1bmwe8OvAfI/IwCgH9zQYCMgfwz92LLn7KtxMsvnb+dWn7OB/C/o5V/xOAqH5gYY4wxxhhjf7grJ/2//ry6WgUxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGNZ0J/x78Su9j4yxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9v/CQAA//9F2vrQ") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 54.356086141s ago: executing program 32 (id=74): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x210c04, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'cp936'}}, {@dmask={'dmask', 0x3d, 0x6}}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@errors_continue}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0xb0}}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x1, 0x1530, &(0x7f0000001340)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJMmZJMktt2T9PxPzV6fO/5zzO538/mee7+fzfmY9s95n7WfPM+9+995z+bbL0BqNalZtQETwb8FLHxIAIBYABgLAdQAQAEDZuLJxGfPZJSb8exthf6xHkq92Bexq4v5nbdz/rI37n7Vx/7M27n/Wxv3P2rj/WRv3n7GsbPP0/NfzI+s++P5/Vsbv//9F0kuO/WptyRu7AsT8sync////4b+Ry/3/rxX8M0/i/mdt3P+sKvZqF8D+F+DXf1aQ7e/OcP+zNu4/Y1nZL+8Fx8LVvx/9Zz8g8p/8GYjvdemrfPX38+/uP2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wx9ic4669QAJA5vtp1McYYY4wxxhhj7I/js13tChhjjDHGGGOMMfafhyBAgoIAYiAbxEJ2yAECICZz/nqIgxsgN9wIeSAv5IP8EA8FoCBoMGCBIIRCUBiicBMUgZuhKBSD4lACHJSEUnALlIZboQzcBmXhdigHd0B5qAAVoRLcCZXhLqgCd0NVuAeqQXWoATXhXqgF90FtuB/qwANQFx6EevAQ1IeHoQE8Ag3hUWgEj0FjeByaQFNoBs2hxf8o/yXoAS9DT+gFCdAb+sAr0Bf6QX8YAAPhVRgEr8FgeB0SYQgMhTdgGLwJw+EtGAEjYRS8DaPhHRgDY2EcjIckmAAT4V2YBO/BZJgCU2EaJMN0mAHvw0yYBbPhA5gDH8JcmAfzYQGkwEewEBZBKnwMi+ETSIMlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBO+FT2AWfwW7YA3vhc9gHX/yL+Wf+Jr8rAgIKFKhQYQzGYCzGYg7MgTkxJ+bCXBjBCMZhHObG3JgH82A+zIfxGI8FsSAaNEhIWAgLYRSjWASLYFEsisWxODp0WApLYWm8FctgGSyLZbEclsPyWAErYCWshJWxMlbBKlgVq2I1rIY1sAbei/dib6yNtbEO1sG6WDfz9hQ2wAbYEBtiI2yEjbExNsEm2AybYQtsgS2xJbbCVtgG22BbbIvtsB22x/bYATtgR+yInbATdsbO2AW7YFfsht3SX8oG+DK+jL2wmuiNfbAP9sXEbP1xAA7AV3EQvoav4euYiENwKL6Bb+CbOBxP44iLI3EUjsLK4h0cg2ORxHhMwiSciBNxEk7CyTgFp+A0TMbpOANn4EychbPwA5yDH+KHOA/n4QJMwRRciIswFVNxMZ7BNFyCS3EZLscVuBxX4WpchWtxHa7FDbgBN+Em3IJbcBtuwx24Az9FBYCf4R7cg4m4D/fhftyPB/AAHsSDmI7peAgP4WE8jEfwCB7Fo3gMj+MJPI6n8BSexjN4Fs/ieTyPF/CF+K8bflpsTSKIDEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEbpFb5BF5RD6RT8SLeFFQFBRGGEEizDhSiKiIiiKiiCgqioriorhwwolSopQoLUqLMqKMKCtuF+XEHaK8qCBau0qikqgs2rgq4m5RVVQV1UR1UUPUFDVFLVFL1Ba1RR1RR9QVdUU98ZCoL3pjf3xEZHSmkRiCjcVQbCKaCnn5CNVSDMdWorVoI54SI3EEthMtXXvxrOggxmBH8RcxFp8XncV47CJeFF1FN9FdvCR6iFaup+glJmNv0UdMw76in+gvBoiZWF18gHOy1xCvi0QxRAwVb4gF+KYYLt4SI8RIMUq8LUaLd8QYMVaME+NFkpggJop3xSTxnpgspoipYppIFtPFDPG+mClmidniAzFHfCjminlivlggUsRHYqFYJFLFx2Kx+ESkiSViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLHWKn+FTsEp+J3WKP2Cs+F/vEF2K/+FIcEF+Jg+KvIl18LQ6Jb8Rh8a04Ir4TR8X34pg4Lk6Ik+KU+EGcFmfEWXFOnBc/igviJ3FReAESpZBSKhnIGJlNxsrsMoe8RuaUQebxX8bJG2RueaPMI/PKfDK/jJcFZEGppZFWkgxlIVlYRuVNsoi8WRaVxWRxWUI6WVKWkrfI0vJWWUbeJsvK22U5eYcsLyvIirKSvFNWlndJiFzaRjVZXdaQNeW9MgHuk7Xl/bKOfEDWlQ/KevIhWV8+LBvIR2RD+ahsJB+TjeXjsolsKpvJ5rKFfEK2lE/KVrK1bCOfkm3l07KdfEa2l8/KDtJf/hZ5XnaWL8gu8kXZVXaT3eVP8qL0sqfsJaE3yD7yFdlX9pP95QA5UL4qB8nX5GD5ukyUQ+RQ+YYcJt+Uw+VbcoQcKUfJt+Vo+Y4cI8fKcXK8TJIT5ET5rpwk35OT5RQ5VU6TyXK67H95pdlS/sP8d38nf/DPW98kN8stcqvcJrfLHXKn/FTukrvkbrlb7pV75T65T+6X++UBeUAelAdlukyXh+QheVgelkfkEXlUHpXH5HF5Tp6Up+QP8rQ8I8/Ic/K8PC8vXP4agEIllFRKBSpGZVOxKrvKoa5ROdW1Kpe6TkXU9SpO3aByqxtVHpVX5VP5VbwqoAoqrYyyilSoCqnCKqpuwsvfMKq4KqGcKqlKqVv+lXxVRN2siqpiv8rPrC/h79TXQrVQLVVL1Uq1Um1UG9VWtVXtVDvVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVVXVV3VV31UP1UD1VT5WgElQf9Yrqq/qp/mqAGqheFRn7MFgNVokqUQ1VQ9UwNUwNV8PVCDVCjVKj1Gg1Wo1RY9Q4NU4lqSQ1UU1UUk1Sk9VkNVVNVckqWc1QM9RMNVPNVrPVHDVHzVVz1Xw1X6WoFLVQLVSpKlUtVotVmlqilqhlaplaoVaoVWqVWqPWqHVqndqgNqg0tVltVlvVVrVdbVc71U61S+1Su9VutVftVfvUPrVf7VcH1AF1UB1U6SpdHVKH1GF1WB1RR9RRdVQdU8fUCXVCnVKn1Gl1Wp1VZ9V5dV5dUBfURXUx47QvEIEIVKCCmCAmiA1igxxBjiBnkDPIFeQKIkEkiAvigtzBjUGeIG+QL8gfxAcFgoKBDkxgA3G56dHgpqBIcHNQNCgWFA9KBC4oGZQKbglKB7cGZYLbgrLB7UG54I6gfFAhqBhUCu4MKgd3BVWCu4OqwT1BtaB6UCOoGdwb1AruC2oH9wd1ggeCusGDQb3goaB+8HDQIHgkaBg8GjQKHgsaB48HTYKmQbOgedDiD13f+9N5n3Q9dS+doHvrPvoV3Vf30/31AD1Qv6oH6df0YP26TtRD9FD9hh6m39TD9Vt6hB6pR+m39Wj9jh6jx+pxerxO0hP0RP2unqTf05P1FD1VT9PJerqeod/XM/UsPVt/oOfoD/VcPU/P1wt0iv5IL9SLdKr+WC/Wn+g0vUQv1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Un+pd+jO9W+/Re/Xnep/+Qu/XX+oD+it9UP9Vp+uv9SH9jT6sv9VH9Hf6qP5eH9PHdRl9Up/SP+jT+ow+q8/p8/pHfUH/pC9qn3Fyn/H2bpRRJsbEmFgTa3KYHCanyWlymVwmYiImzsSZ3Ca3yWPymHwmn4k38aagKWgykCFTyBQyURM1RUwRU9QUNcVNceOMM6VMKVPalDZlTBlT1pQ15Uw5U96UNxVNRXOnudPcZe4yd5u7zT3mHlPdVDc1TU1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDHNTDPTwrQwLU1L08q0Mm1MG9PWtDXtTDvT3rQ3HUwH09F0NJ1MJ9PZdDZdTBfT1XQ13U1308P0MD1NT5NgEkwf08f0NX1Nf9PfDDQDzSAzyAw2g02iSTRDzVAzzAwzw81wM8KMNKMyTlTNO2aMGWvGmfEmySSZiWaimWQmmclmsplqpppkk2xmmBlmpplpZpvZZo6ZY+aauWa+mW9STIpZaBaaVJNqFpvFJs2kmaVmqVlulpuVZqVZbVabtWatWQ/rzUaz0Ww2m81Ws9VsN9vNTrPT7DK7zG6z2+w1e80+s8/sN/vNAXPAHDQHTbpJN4fMIXPYHDZHzBFz1Bw1x8wxc8KcMKfMKXPanDZnzVlz3uS9/H7pTazNbnPYa2xOe63NZa+zfxvns/ltvC1gC1pt89i8v4qNtbaoLWaL2xLW2ZK2lL3lN3F5W8FWtJXsnbayvctW+U1cy95na9v7bR37gK1p7/1VXNc+aOvZx2x9RADb1Da0zW0j+5htbB+3TWxT28w2t23t07adfca2t8/aDva538QL7SK72q6xa+06u9vusWftOXvYfmvP2x9tT9vLDrSv2kH2NTvYvm4T7ZDfxKPs23a0fceOsWPtODv+N/FUO80m2+l2hn3fzrSzfhOn2I/sHJtq59p5dr5d8HOcUVOq/dgutp/YNBvAUrvMLrcr7Eq76v/WusxusBvtJrvLfma32m12u91hd2aeCNs9dq/93O6zX9hD9ht7wH5lD9ojNt1+/XOcsX9H7Hf2qP3eHrPH7Ql70p6yP6jM7Ix9P2l/shett0BIQJIUBRRD2SiWslMOuoZy0rWUi66jCF1PcXQD5aYbKQ/lpXyUn+KpABUkTYYsEYVUiApTlG6izPKKUwlyVJJK0S1Umm6lMnQblaXbqRzdQeWpAlWkSnQnVaa7qArdTVXpHqpG1akG1aR7qRbdR7XpfqpDD1BdepDq0UNUnx6mBvQINaRHqRE9Ro3pcWpCTakZNacW9AS1pCepFbWmNvQUtaWnqR09Q+3pWepAz1FH+gt1ouepM71AXehF6krdqDu9RD3oZepJvSiBelMfeoX6Uj/qTwNoIL1Kg+g1GkyvUyINoaH0Bg2jN2k4vUUjaCSNordpNL1DY2gsjaPxlEQTaCK9S5PoPZpMU2gqTaNkmk4z6H2aSbNoNn1Ac+hDmkvzaD4toBT6iBbSIkqlj2kxfUJptISW0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO2gnfUq76DPaTXtoL31O++gL2k9f0gH6ig7SXymdvqZD9A0dpm/pCH3ne9H3dIyO0wk6SafoBzpNZ+gsnaPz9CNdoJ/oInmCEEMRylCFQRgTZgtjw+xhjvCaMGd4bZgrvC6MhNeHceENYe7wxjBPmDfMF+YP48MCYcFQhya0IYVhWCgsHEbDm8Ii4c1h0bBYWDwsEbqwZFgqvCUsHd4alglvC8uGt4flwjvC8mGF8LEHKoV3hpXDu8Iq4d1h1fCesFpYPawR1gzvDWuF94W1w/vDOuEDYZnwwbBe+FBYP3w4bBA+EjYMHw0bhY+FjcPHwyZh07BZ2DxsET4RtgyfDFuFrcM24TVh2/DpsF34TNg+fDbsED738/yDizLnn/rNfELYO+wTvhK+Enp/v5wfXRBNiX4UXRhdFE2NfhxdHP0kmhZdEl0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y3RT1vmY2cOiEk065wMW4bC7WZXc53DUup7vW5XLXuYi73sW5G1xud6PL4/K6fC6/i3cFXEGnnXHWkQtdIVfYRd1Nroi72RV1xVxxV8I5V9KVcs1dC9fCtXRPulautWvjnnJPuafd0+4Z94x71nVwz7mO7i+uk3vedXYvuBfci66r6+a6u5dcDzch16XXZILr4/q4vq6v6+/6u4FuoBvkBrnBbrBLdIluqBvqhrlhbrgb7ka4EW6UG+VGu9FujBvjxrlxLskluYluopvkJrnJbrKb6qa6ZJfsZrgZbqab6SrPurSVuW6um+/muxSX4ha6jHPGVLfYLXZpLs0tdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O90ut8vt9tddWtTtc/vdfnfAHXAH3V9duvvaHXLfuMPuW3fEfeeOuu/dMXfcnXAn3Sn3gzvtzriz7pw77350F9xP7qLzLikyITIx8m5kUuS9yOTIlMjUyLRIcmR6ZEbk/cjMyKzI7MgHkTmRDyNzI/Mi8yMLIimRjyILI4siqZGPI4sjn0TSIksiSyPLIssjKyLeF9ga+kK+sI/6m3wRf7Mv6ov54r6Ed76kL+Vv8aUv1Z3m/e2+nL/Dl/cVfEX/uG/im/pmvrlv4Z/wLf2TvpVv7dv4p3xb/7Rv55/x7f2zvoN/znf0f/Gd/PO+s3/Bd/Ev+q6+m+/uX/I9/Mu+p+/lE3xv38e/4vv6fr6/H+AH+lf9IP+aH+xf94l+iB/q3/DD/Jt+uH/Lj/Aj/aiYt/3ozEtkGO+T/AQ/0b/rJ/n3/GQ/xU/103yyn+5n+Pf9TD/Lz/Yf+Dn+Qz/Xz/Pz/QKf4j/yC/0in+o/9ov9Jz7NL8m8aexX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u9/hd/pP/S7/md/t9/i9/nO/z3/h9/sv/YGLmX+B9rU/5L/xh/23/oj/zh/13/tj/rg/4U/6U/4Hf9qf8Wf9OX/e/+gv+J/8Rf6bNcYYY4yxf8qEK0Px65lLt/N7/06O+MWT+wDAtdvyp/9yPuOMcn2eS+N+Ij424+Ozvbo8kvmoVi0hIeHyc9MkBIXnAWT+JCjDz796cDleAm3gaWgPraH079bfT3Q7T/9g/ejtADl+kZNRUGZ8Zf0vATDhd9Z/4qlRC8uFZ+P+H+vPAyha+EpOdrgSL4E2P99faQ1l/k79eVv+g/qzf5UE0OoXOTnhSnyl/lLwJDwH7X/1TMYYY4wxxhhj7JJ+omKnzOvPzN/4/L3r83h1JScbXIn/0fU5Y4wxxhhjjDHGrr7nu3V/5on27Vt3+tcHVf5HWf/0oDH8p1bmwe8OvAfI/IwCgH9zQYCMgfwz92LLn7KtxMsvnb+dWn7OB/C/o5V/xOAqH5gYY4wxxhhjf7grJ/2//ry6WgUxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGNZ0J/x78Su9j4yxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9v/CQAA//9F2vrQ") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 54.342170241s ago: executing program 2 (id=77): capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_clone(0x8200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0x51, 0x7, {0x7, 0x0, "81d65dce3c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="00080c0050000000000000006aee76e23735b4b8040000000891aaba5a70ac8e571c62050815ba0349b0be05e1da9be143cf63c852aa91f90fdb8bcb3f12f76da9dc8a9eedc1305476c3ae08c1395784038071965c281068255a0bf5784d402b98a853b770420f858a7be69a08b189d31bba3bf3e917526ff3a640ec85ed9ce6c6598708d1c3422738e037019c8f1aaf8a5ce34f"], 0x0, 0x0, 0x0}, 0x0) r2 = syz_pidfd_open(r0, 0x0) process_madvise(r2, 0x0, 0x0, 0x10, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000010640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@local}) ioctl$KDSKBLED(r3, 0x4b65, 0x6) 51.89245203s ago: executing program 2 (id=93): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000040)) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f00000001c0)=[0x2, 0x1]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x30000004}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x300c249, &(0x7f0000000600)={[{@sb={'sb', 0x3d, 0x293}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@user_xattr}, {@nodelalloc}, {@data_err_ignore}, {@noblock_validity}, {@noquota}, {@journal_checksum}]}, 0x1, 0x60d, &(0x7f0000000800)="$eJzs3c9rG9kdAPDvjGzXTtw6KSU0gVJDDwmU+EcaSNtTkktz6CHQHErpISa2g4mcmNiBJg3UuTXQQym9lpJL/4HeS+i1t1Joe9vzQnZZvOxhd4mWGc0kWllyFMX64cznA5LevBnpva+enueNxk8TQGXNZ3dpxOmIuJlEzLWsm43myvliu71PHt/Kbkk0Gr/4OImkyCu3f1k8Hs/ukojpiPj31Yhv1/aXu/3w0Z2VeqPpdxGLO5tbi9sPH53f2Fy5vXZ77e7yhR9fvLT0k+WLy4cSZxnXdPG4/p/6+SQux43J365GWxyHZT7m42URYmv+RERcyhId3pejpgwhGXE96E+t+DxORsSpmItavtQ0Fxt/GGnlgIFq1CIaQEUl+j9UVDkOKI/tB3EcPM5eXGkeAO2Pf6L53UhM58dGx/aSliOj5vHuiUMoPyvjy8dn/pLdosv3EBOHUE43u08i4rud4k/yup0ovjE5tpdG2vK8LL0UEVPFe5H2Wf582/KwP39vE39rO2TxXi4es/yrfZY/6vgBqKbnV4od+W629Hr/l40My/FPdBj/zHbYd/Vj1Pu/7uO/cn8/nX9HnraNw7Ixz/XOLznZnvHB02t/6lZ+6/gvu2Xll2PBYXjxJOJMW/y/zwdzyav2Tzq0f7bJzR7L+Nl/P7rWbV3/8R/OGafGs4izHY9/kq+VtLizuVXmtZ2fXFzfqK8tNe87lvGPf/36b93KH4f2jy7xH9T+Wd5Wj2X8/fqzzW7rZt8Yf/rhVHIjT00VOb9Z2dm5vxwxlfy82KQl/8LBdSm3KV8ji//cDzr3/wPizxt6t8f4t355Z6+Z2v+Z7bn99/1Vyb1s9FiHbrL4V/ts/z/2WMZnv3rwvbasmTJxUPwz+18q6fU9BwAAAAAAgCpK83OwSbrwKp2mCwvNObzfiWNp/d72zg/X7z24uxpxLv9/yMm0PNM911xOsuXl4v9hy+ULbcs/ioiTEfHn2ky+vHDrXn111MEDAAAAAAAAAAAAAAAAAADAmDhezP8vr1P9aa05/78nO6cGXDtg4AZ5gTlgvOn/UF15/+/3Cq7AkWb/D9Wl/0N16f9QXfo/VJf+D9XVU/+fGnw9gOGz/4fq0v8BAAAA4L108vvP/59ExO5PZ/JbtJzpmxxpzYBBe/s+Pj+QegDDVxvq04Bx8urUv+n/UDk9jf8/L34ccPDVAUYg6ZSZDw4aB3f+5x2f2aun7/JkAAAAAAAAAAAAAKias6fN/4eqSuOfo64CMCLvMJHfbwDAEeen/6G6HOMDb5rFP91txbvN/wcAAAAAAAAAAAAA3sJsfkvSheISoLORpgsLEd+MiBMxmaxv1NeWIuJbEfG/2uQ3suXlUVcaAAAAAAAAAAAAAAAAAAAA3jPbDx/dWanX1+63Jr7Yl/N+J8qroI5LfVoTkQy/0JmIGIfYB5OYaMlJInazlh+Lit3fjrGoRppXY8R/mAAAAAAAAAAAAAAAAAAAoIJa5h53duavQ64RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzf6+v/959I3vA6o44RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiavgoAAP//F1A3Eg==") syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x84406d, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x8923, &(0x7f0000000cc0)="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") r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000080)=0x3, 0x4) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3108000, 0x0, 0x8, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2000, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) 51.03333011s ago: executing program 2 (id=99): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x2aa, &(0x7f0000000400)=ANY=[], 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) close(r0) 50.957287732s ago: executing program 2 (id=100): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000790fffe600000000c3000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x50}, 0x28) (async) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x2}, [@acm={0x4, 0x24, 0x2, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x7, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) 50.935908422s ago: executing program 33 (id=100): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000790fffe600000000c3000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x50}, 0x28) (async) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x2}, [@acm={0x4, 0x24, 0x2, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x7, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) 4.969621101s ago: executing program 4 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), 0x0}, 0x20) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) writev(r3, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@loopback, 0x80}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r4, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") 4.914462122s ago: executing program 4 (id=478): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 4.406495975s ago: executing program 4 (id=484): mkdir(&(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/console\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 4.406427135s ago: executing program 3 (id=485): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r1, 0x0) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8000000}}, @ip_retopts={{0x34, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x33, [@loopback, @rand_addr=0x64010100, @local]}, @timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x7, [{@loopback, 0xfffffffc}, {@loopback, 0x4}]}]}}}], 0x50}}], 0x1, 0x1) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 4.406313075s ago: executing program 4 (id=487): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) 4.342066156s ago: executing program 4 (id=488): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x49, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x1, 0x87, 0x40, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x1, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x2, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x7, 0x6, [{0x5, 0x7}, {0x5, 0x21}, {0x8, 0xd}, {0x3, 0x3}, {0x3, 0x9}, {0x6f, 0x7}], 0xbf}]}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 4.341948946s ago: executing program 3 (id=489): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa91aabb72b40000005908060001"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 4.299268557s ago: executing program 3 (id=491): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 3.236372362s ago: executing program 6 (id=498): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x4, 0x300, 0x5}, 0x48) socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xf, &(0x7f00000001c0)={0x0, 0x80000000}, &(0x7f0000000280)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) unshare(0x2c060000) unshare(0x24020400) 2.883044131s ago: executing program 6 (id=499): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) getpid() flock(0xffffffffffffffff, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.600523638s ago: executing program 3 (id=501): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, 0x0, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4c0c0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000140)) 2.534925549s ago: executing program 6 (id=502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.300849454s ago: executing program 5 (id=503): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 2.228541577s ago: executing program 5 (id=504): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa91aabb72b4000000590806000108000604"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.228449797s ago: executing program 5 (id=505): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.747118248s ago: executing program 3 (id=506): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fddbdf253800000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) 1.672622769s ago: executing program 3 (id=508): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.66883899s ago: executing program 6 (id=511): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000442f00fc010000000000000000000000fba200000000000000000000000000000000012420810000000000000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc040) 1.65697555s ago: executing program 6 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x60, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}}, 0x20000000) 1.600493922s ago: executing program 6 (id=513): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0xabd) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x81, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f0000000140)='1', 0x1, 0x10b, 0x0, 0x0, r2}]) pwritev(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000000180)="f1e40ee27329", 0x6}, {&(0x7f0000000740)="e4", 0x1}], 0x2, 0x6, 0x6) 1.364468457s ago: executing program 5 (id=514): unshare(0x6020400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cpu.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x7, 0x12) 1.295543239s ago: executing program 5 (id=515): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.284802729s ago: executing program 5 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) syz_usb_connect(0x5, 0x12e, 0x0, 0x0) 622.172225ms ago: executing program 1 (id=518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 524.554717ms ago: executing program 1 (id=519): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="4a00000011007f0314066f9a70eaa1490675bc58080600", 0x17) 517.664037ms ago: executing program 1 (id=520): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4043, 0x6f) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 464.163539ms ago: executing program 1 (id=521): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) write(0xffffffffffffffff, &(0x7f0000000000)="303132333a616263643a63ed7b188d", 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd0d, &(0x7f0000000000)="040000") fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @private1, @loopback={0xff00000000000000}, 0x8, 0x0, 0x0, 0x1}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7009000000251700000008000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000100)={0x48, r6, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @broadcast, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 380.911241ms ago: executing program 1 (id=522): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fff6ffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) 294.600043ms ago: executing program 1 (id=523): socket$nl_route(0x10, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=524): mkdirat(0xffffffffffffff9c, 0x0, 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, 0x0, 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) kernel console output (not intermixed with test programs): r after parsing attributes in process `syz.2.67'. [ 33.050951][ T24] audit: type=1400 audit(1786255655.750:222): avc: denied { wake_alarm } for pid=559 comm="syz.2.67" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.120534][ T24] audit: type=1400 audit(1786255655.820:223): avc: denied { write } for pid=570 comm="syz.4.69" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 33.281183][ T364] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.367933][ T24] audit: type=1400 audit(1786255656.070:224): avc: denied { bind } for pid=577 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.414726][ T24] audit: type=1400 audit(1786255656.120:225): avc: denied { mounton } for pid=577 comm="syz.0.72" path="/13/file0/bus" dev="loop0" ino=1048598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 33.415550][ T578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'. [ 33.446454][ T20] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.454183][ T578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'. [ 33.468047][ T24] audit: type=1400 audit(1786255656.170:226): avc: denied { setopt } for pid=577 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.493214][ T281] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 33.501102][ T281] FAT-fs (loop0): Filesystem has been set read-only [ 33.507971][ T281] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 33.531220][ T364] usb 4-1: Using ep0 maxpacket: 8 [ 33.677720][ T364] usb 4-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 33.693457][ T364] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xE6, skipping [ 33.704255][ T24] audit: type=1400 audit(1786255656.410:227): avc: denied { mounton } for pid=584 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 33.725914][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 33.762277][ T584] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.769405][ T584] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.776988][ T584] device bridge_slave_0 entered promiscuous mode [ 33.794543][ T584] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.802277][ T584] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.809921][ T584] device bridge_slave_1 entered promiscuous mode [ 33.861239][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.881185][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.895525][ T584] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.901544][ T20] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 33.902727][ T584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.912356][ T364] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 33.919077][ T584] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.935027][ T584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.938613][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.955373][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.964577][ T20] usb 5-1: config 0 descriptor?? [ 33.969641][ T364] usb 4-1: Product: syz [ 33.974187][ T364] usb 4-1: Manufacturer: syz [ 33.978835][ T364] usb 4-1: SerialNumber: syz [ 33.994929][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.003203][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.010664][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.018643][ T583] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 34.031089][ T583] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 34.044787][ T583] F2FS-fs (loop1): invalid crc value [ 34.050540][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.053386][ T583] F2FS-fs (loop1): Found nat_bits in checkpoint [ 34.061053][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.072261][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.080885][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.089422][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.096519][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.114731][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.122812][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.133634][ T583] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 34.140821][ T583] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 34.141909][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.150381][ T52] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 34.166125][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.175473][ T24] audit: type=1400 audit(1786255656.890:228): avc: denied { getopt } for pid=582 comm="syz.1.76" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.175921][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.204028][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.220496][ T584] device veth0_vlan entered promiscuous mode [ 34.229004][ T24] audit: type=1400 audit(1786255656.930:229): avc: denied { mounton } for pid=539 comm="syz.3.63" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 34.249468][ T584] device veth1_macvtap entered promiscuous mode [ 34.267072][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.275993][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.284578][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.315071][ T598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.75'. [ 34.336174][ T24] audit: type=1400 audit(1786255657.040:230): avc: denied { append } for pid=599 comm="syz.5.78" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.336621][ T600] binder: 599:600 ioctl c0046209 0 returned -22 [ 34.411283][ T364] usb 4-1: MIDIStreaming interface descriptor not found [ 34.422065][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 34.449330][ T364] usb 4-1: USB disconnect, device number 4 [ 34.472503][ T20] savu 0003:1E7D:2D5A.0001: ignoring exceeding usage max [ 34.506480][ T20] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 34.551240][ T52] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 34.568954][ T52] usb 3-1: config 0 has no interface number 0 [ 34.595679][ T52] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.606933][ T52] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.617262][ T52] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 34.626505][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.636041][ T52] usb 3-1: config 0 descriptor?? [ 34.676197][ T500] usb 5-1: USB disconnect, device number 3 [ 34.772265][ T7] device bridge_slave_1 left promiscuous mode [ 34.778471][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.800238][ T7] device bridge_slave_0 left promiscuous mode [ 34.806592][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.815143][ T7] device veth1_macvtap left promiscuous mode [ 34.821588][ T7] device veth0_vlan left promiscuous mode [ 35.015597][ T611] F2FS-fs (loop5): invalid crc value [ 35.175859][ T611] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 35.229846][ T611] F2FS-fs (loop5): Failed to read root inode [ 35.341531][ T52] uclogic 0003:28BD:0094.0002: pen parameters not found [ 35.398916][ T52] uclogic 0003:28BD:0094.0002: interface is invalid, ignoring [ 35.565911][ T364] usb 3-1: USB disconnect, device number 2 [ 35.688570][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.695960][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.705658][ T664] device bridge_slave_1 left promiscuous mode [ 35.711926][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.719476][ T664] device bridge_slave_0 left promiscuous mode [ 35.726091][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.791229][ T5] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.842148][ T500] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 35.888723][ T668] tipc: Started in network mode [ 35.894977][ T668] tipc: Own node identity 2007ff, cluster identity 4711 [ 35.902220][ T668] tipc: 32-bit node address hash set to 2007ff [ 35.909962][ T9] tipc: Subscription rejected, illegal request [ 36.031205][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 36.151275][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.161855][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 36.172841][ T5] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 36.186821][ T672] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 36.195255][ T672] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.93: corrupted in-inode xattr [ 36.207297][ T672] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.93: couldn't read orphan inode 15 (err -117) [ 36.219210][ T672] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue [ 36.253027][ T672] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 36.262921][ T672] EXT4-fs (loop2): re-mounted. Opts: sb=0x0000000000000293,journal_ioprio=0x0000000000000001,user_xattr,nodelalloc,data_err=ignore,noblock_validity,noquota,journal_checksum, [ 36.280299][ T500] usb 6-1: unable to get BOS descriptor or descriptor too short [ 36.331333][ T500] usb 6-1: not running at top speed; connect to a high speed hub [ 36.371263][ T5] usb 4-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 36.380860][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.389266][ T5] usb 4-1: Product: syz [ 36.393741][ T5] usb 4-1: Manufacturer: syz [ 36.398416][ T5] usb 4-1: SerialNumber: syz [ 36.411234][ T500] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 36.573994][ T680] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 36.581388][ T680] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 36.590321][ T680] F2FS-fs (loop1): invalid crc value [ 36.595961][ T500] usb 6-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 36.605117][ T500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.613439][ T500] usb 6-1: Product: syz [ 36.617681][ T500] usb 6-1: Manufacturer: syz [ 36.623319][ T680] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 36.634762][ T500] usb 6-1: SerialNumber: syz [ 36.653274][ T680] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 36.660403][ T680] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 36.673715][ T576] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 36.791231][ T5] usb 4-1: MIDIStreaming interface descriptor not found [ 36.806169][ T5] usb 4-1: USB disconnect, device number 5 [ 36.927413][ T576] usb 5-1: Using ep0 maxpacket: 8 [ 36.933508][ T282] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 36.954031][ T282] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz-executor: corrupted in-inode xattr [ 36.966593][ T282] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz-executor: corrupted in-inode xattr [ 36.983737][ T282] tipc: Resetting bearer [ 36.993789][ T282] tipc: Disabling bearer [ 37.022290][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.039862][ T7] tipc: Left network mode [ 37.091204][ T576] usb 5-1: unable to get BOS descriptor or descriptor too short [ 37.101213][ T52] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.153615][ T696] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.160704][ T696] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.169872][ T696] device bridge_slave_0 entered promiscuous mode [ 37.173551][ T500] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 37.179387][ T696] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.190109][ T576] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 37.201206][ T500] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 37.208258][ T696] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.215568][ T576] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 37.217286][ T696] device bridge_slave_1 entered promiscuous mode [ 37.225900][ T702] udc-core: couldn't find an available UDC or it's busy [ 37.239272][ T576] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 37.248296][ T500] usb 6-1: USB disconnect, device number 2 [ 37.255558][ T702] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.268443][ T576] usb 5-1: config 4 has no interface number 0 [ 37.310672][ T696] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.317750][ T696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.325084][ T696] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.332317][ T696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.351270][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 37.357954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.365934][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.373591][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.384953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.393365][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.400466][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.409408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.418011][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.425208][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.432736][ T576] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 37.442020][ T576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.450041][ T576] usb 5-1: Product: syz [ 37.454289][ T576] usb 5-1: Manufacturer: syz [ 37.458911][ T576] usb 5-1: SerialNumber: syz [ 37.465231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.476684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.484638][ T52] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 37.491582][ T15] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 37.492012][ T52] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.508721][ T605] udevd[605]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.520770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.541721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.550011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.557562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.567765][ T696] device veth0_vlan entered promiscuous mode [ 37.578185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.587589][ T696] device veth1_macvtap entered promiscuous mode [ 37.595872][ T7] device bridge_slave_1 left promiscuous mode [ 37.602267][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.609664][ T7] device bridge_slave_0 left promiscuous mode [ 37.616107][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.624323][ T7] device veth1_macvtap left promiscuous mode [ 37.630632][ T7] device veth0_vlan left promiscuous mode [ 37.681320][ T52] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.690994][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.699320][ T52] usb 2-1: Product: syz [ 37.703671][ T52] usb 2-1: Manufacturer: syz [ 37.708340][ T52] usb 2-1: SerialNumber: syz [ 37.718528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.726954][ T678] udc-core: couldn't find an available UDC or it's busy [ 37.727676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.734579][ T678] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.861269][ T576] uvcvideo: Found UVC 0.02 device syz (04f2:b746) [ 37.868041][ T576] uvcvideo: No valid video chain found. [ 37.881357][ T15] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.882873][ T576] usb 5-1: USB disconnect, device number 4 [ 37.911163][ T15] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.972176][ T713] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 37.981789][ T713] F2FS-fs (loop6): invalid crc value [ 37.987965][ T713] F2FS-fs (loop6): invalid crc value [ 37.993563][ T713] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 38.002519][ T24] kauditd_printk_skb: 46 callbacks suppressed [ 38.002535][ T24] audit: type=1400 audit(1786255660.710:277): avc: denied { write } for pid=712 comm="syz.6.105" name="usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 38.031588][ T52] usb 2-1: 0:2 : does not exist [ 38.032585][ T24] audit: type=1400 audit(1786255660.710:278): avc: denied { open } for pid=712 comm="syz.6.105" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 38.038028][ T52] usb 2-1: unit 48 not found! [ 38.071051][ T52] usb 2-1: USB disconnect, device number 6 [ 38.101240][ T15] usb 4-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 38.110597][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.119113][ T15] usb 4-1: Product: syz [ 38.123909][ T15] usb 4-1: Manufacturer: syz [ 38.128619][ T15] usb 4-1: SerialNumber: syz [ 38.275208][ T719] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 38.617812][ T52] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 38.659182][ T52] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.694140][ T24] audit: type=1400 audit(1786255661.400:279): avc: denied { unmount } for pid=696 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.741590][ T724] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 38.754272][ T15] usb 4-1: 0:1 : does not exist [ 38.759183][ T15] usb 4-1: 0:2 : does not exist [ 38.766462][ T15] usb 4-1: unit 5 not found! [ 38.835695][ T15] usb 4-1: USB disconnect, device number 6 [ 38.971160][ T576] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 38.991486][ T743] tipc: Started in network mode [ 38.996409][ T743] tipc: Own node identity , cluster identity 4711 [ 39.048600][ T746] serio: Serial port ptm0 [ 39.182200][ T741] EXT4-fs (loop1): Unrecognized mount option "euid<00000000000000000000" or missing value [ 39.282189][ T52] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 39.381506][ T576] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.420169][ T576] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.649045][ T576] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 39.681349][ T52] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 39.694355][ T52] usb 5-1: config 179 has no interface number 0 [ 39.694434][ T52] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF is Bulk; changing to Interrupt [ 39.694464][ T52] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 39.694505][ T52] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 39.694536][ T52] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 39.694569][ T52] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 39.694643][ T52] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 39.694671][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.696374][ T576] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.700565][ T753] EXT4-fs (loop3): Ignoring removed bh option [ 39.831861][ T736] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 39.856314][ T52] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 39.856697][ T576] usb 6-1: config 0 descriptor?? [ 39.882503][ T52] xpad: probe of 5-1:179.65 failed with error -5 [ 39.932697][ T753] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,norecovery,usrjquota=,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,nombcache,bsddf,journal_ioprio=0x0000000000000005,,errors=continue [ 40.111154][ T24] audit: type=1400 audit(1786255662.670:280): avc: denied { map } for pid=747 comm="syz.3.116" path="/16/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.111305][ T24] audit: type=1400 audit(1786255662.670:281): avc: denied { execute } for pid=747 comm="syz.3.116" path="/16/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.130367][ T24] audit: type=1400 audit(1786255662.830:282): avc: denied { mount } for pid=725 comm="syz.5.107" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 40.207689][ T760] 9pnet: Insufficient options for proto=fd [ 40.261113][ C0] sched: RT throttling activated [ 40.413353][ T500] usb 5-1: USB disconnect, device number 5 [ 40.651297][ T767] EXT4-fs (loop3): Mount option "dax=never" incompatible with ext3 [ 40.735041][ T9] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 40.745250][ T9] FAT-fs (loop6): Filesystem has been set read-only [ 40.754328][ T9] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 40.896792][ T727] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 40.915533][ T727] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 40.943913][ T727] F2FS-fs (loop5): Found nat_bits in checkpoint [ 41.024333][ T727] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 41.031609][ T727] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 41.041775][ T826] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.054408][ T826] EXT4-fs (loop3): 1 truncate cleaned up [ 41.060320][ T826] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum, [ 41.116474][ T24] audit: type=1400 audit(1786255663.810:283): avc: denied { create } for pid=725 comm="syz.5.107" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 41.222713][ T828] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 41.344756][ T828] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.474090][ T24] audit: type=1400 audit(1786255664.120:284): avc: denied { read } for pid=725 comm="syz.5.107" name="file0" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 41.526746][ T24] audit: type=1400 audit(1786255664.130:285): avc: denied { mount } for pid=725 comm="syz.5.107" name="/" dev="ramfs" ino=17966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 41.574936][ T841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 41.586339][ T24] audit: type=1400 audit(1786255664.300:286): avc: denied { getopt } for pid=725 comm="syz.5.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.627817][ T841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 41.700495][ T843] EXT4-fs (loop1): quotafile must be on filesystem root [ 41.788765][ T850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.133'. [ 41.801079][ T850] cgroup: syz.4.133 (850) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 41.817377][ T850] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 41.903246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 41.986158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.109877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 42.118197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.126572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.137478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.146082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.154748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.164783][ T852] netlink: 28 bytes leftover after parsing attributes in process `syz.6.134'. [ 42.223062][ T841] EXT4-fs (loop1): Test dummy encryption mode enabled [ 42.230266][ T841] EXT4-fs (loop1): Ignoring removed oldalloc option [ 42.243773][ T841] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,test_dummy_encryption=v1,oldalloc,,errors=continue [ 42.251507][ T576] usbhid 6-1:0.0: can't add hid device: -71 [ 42.278212][ T576] usbhid: probe of 6-1:0.0 failed with error -71 [ 42.298721][ T576] usb 6-1: USB disconnect, device number 3 [ 42.352361][ T876] EXT4-fs (loop3): Invalid log cluster size: 38 [ 42.499214][ T894] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.515631][ T894] overlayfs: unrecognized mount option "userxattr" or missing value [ 42.525374][ T898] SELinux: failed to load policy [ 42.542559][ T900] overlayfs: unrecognized mount option "userxattr" or missing value [ 42.617205][ T908] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 42.636397][ T908] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 42.647029][ T908] EXT4-fs error (device loop6): ext4_get_journal_inode:5247: inode #5: comm syz.6.150: unexpected bad inode w/o EXT4_IGET_BAD [ 42.660418][ T908] EXT4-fs (loop6): no journal found [ 42.667359][ T908] EXT4-fs (loop6): can't get journal size [ 42.674021][ T908] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,inlinecrypt,norecovery,norecovery,abort,,errors=continue [ 42.761171][ T500] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 42.793782][ T906] F2FS-fs (loop3): invalid crc value [ 42.803278][ T906] F2FS-fs (loop3): Found nat_bits in checkpoint [ 42.871857][ T906] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 42.981798][ T919] exfat: Unknown parameter 'vL$ Bwtf8' [ 43.131197][ T500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.153041][ T500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.177162][ T500] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 43.196066][ T500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.205966][ T929] 8021q: VLANs not supported on sit0 [ 43.215273][ T500] usb 5-1: config 0 descriptor?? [ 43.332201][ T949] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 43.345970][ T949] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 43.361504][ T949] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0002] [ 43.380805][ T949] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 43.391175][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 43.405269][ T949] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 43.421229][ T949] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,grpid,nolazytime,noblock_validity,resgid=0x0000000000000000,nobarrier,jqfmt=vfsold,,errors=continue [ 43.468449][ T949] EXT4-fs (loop3): Online resizing not supported with sparse_super2 [ 43.468455][ T954] EXT4-fs (loop3): Online resizing not supported with sparse_super2 [ 43.631181][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 43.791183][ T25] usb 7-1: unable to get BOS descriptor or descriptor too short [ 43.834164][ T957] EXT4-fs (loop5): orphan cleanup on readonly fs [ 43.851075][ T957] EXT4-fs warning (device loop5): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 43.871069][ T957] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 43.878033][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.881964][ T957] EXT4-fs error (device loop5): ext4_ext_check_inode:500: inode #13: comm syz.5.161: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 43.889493][ T25] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 43.918408][ T25] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 43.929739][ T957] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.161: couldn't read orphan inode 13 (err -117) [ 43.941814][ T500] usb 5-1: language id specifier not provided by device, defaulting to English [ 43.951622][ T957] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 43.970211][ T957] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 43.981745][ T957] EXT4-fs warning (device loop5): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 44.081295][ T25] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 44.100673][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.111174][ T25] usb 7-1: Product: syz [ 44.117997][ T25] usb 7-1: Manufacturer: syz [ 44.131175][ T52] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 44.138769][ T25] usb 7-1: SerialNumber: syz [ 44.159690][ T973] tipc: Enabling of bearer rejected, failed to enable media [ 44.185902][ T975] device syz_tun entered promiscuous mode [ 44.192844][ T975] device syz_tun left promiscuous mode [ 44.277023][ T966] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 44.287454][ T966] F2FS-fs (loop5): invalid crc value [ 44.293084][ T966] F2FS-fs (loop5): invalid crc value [ 44.298560][ T966] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 44.307671][ T966] device syzkaller0 entered promiscuous mode [ 44.401885][ T25] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 44.416681][ T25] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 44.431279][ T500] uclogic 0003:256C:006D.0004: interface is invalid, ignoring [ 44.491325][ T52] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping [ 44.500304][ T52] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 44.510524][ T52] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 44.521477][ T52] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 44.532694][ T52] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 44.621457][ T52] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.630683][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.635229][ T896] udc-core: couldn't find an available UDC or it's busy [ 44.639456][ T52] usb 4-1: SerialNumber: syz [ 44.650986][ T896] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 44.663404][ T364] usb 5-1: USB disconnect, device number 6 [ 44.691218][ T576] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 44.701840][ T52] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 44.710452][ T52] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 44.717185][ T52] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 44.838154][ T24] kauditd_printk_skb: 22 callbacks suppressed [ 44.838166][ T24] audit: type=1400 audit(1786255667.540:309): avc: denied { create } for pid=986 comm="syz.6.170" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.858801][ T25] usb 7-1: USB disconnect, device number 2 [ 44.875896][ T987] netlink: 12 bytes leftover after parsing attributes in process `syz.6.170'. [ 44.906339][ T758] usb 4-1: USB disconnect, device number 7 [ 44.916067][ T24] audit: type=1400 audit(1786255667.580:310): avc: denied { write } for pid=986 comm="syz.6.170" name="file2" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.944462][ T24] audit: type=1400 audit(1786255667.580:311): avc: denied { open } for pid=986 comm="syz.6.170" path="/19/file2" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.971488][ T988] netlink: 44 bytes leftover after parsing attributes in process `syz.6.170'. [ 44.980966][ T988] netlink: 43 bytes leftover after parsing attributes in process `syz.6.170'. [ 44.990261][ T24] audit: type=1400 audit(1786255667.590:312): avc: denied { ioctl } for pid=986 comm="syz.6.170" path="/19/file2" dev="tmpfs" ino=125 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 45.014865][ T988] netlink: 'syz.6.170': attribute type 5 has an invalid length. [ 45.023949][ T988] netlink: 43 bytes leftover after parsing attributes in process `syz.6.170'. [ 45.043891][ T24] audit: type=1400 audit(1786255667.750:313): avc: denied { unlink } for pid=696 comm="syz-executor" name="file2" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 45.081374][ T576] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.097973][ T24] audit: type=1400 audit(1786255667.750:314): avc: denied { ioctl } for pid=989 comm="syz.6.171" path="socket:[17085]" dev="sockfs" ino=17085 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.100050][ T576] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.123915][ T24] audit: type=1400 audit(1786255667.750:315): avc: denied { setopt } for pid=989 comm="syz.6.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.159241][ T576] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.172855][ T576] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.192759][ T576] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.206456][ T576] usb 6-1: config 0 descriptor?? [ 45.212047][ T995] overlayfs: unrecognized mount option "fsuuid=5121f6c-361-689f-cae-3409f3\f" or missing value [ 45.451262][ T24] audit: type=1400 audit(1786255668.150:316): avc: denied { remount } for pid=1004 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.454773][ T1003] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 45.479621][ T981] udc-core: couldn't find an available UDC or it's busy [ 45.497407][ T981] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 45.501850][ T1003] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 45.507401][ T24] audit: type=1400 audit(1786255668.190:317): avc: denied { map } for pid=1007 comm="syz.3.177" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 45.536075][ T500] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 45.543961][ T1003] F2FS-fs (loop1): invalid crc value [ 45.551961][ T1003] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 45.575525][ T1003] F2FS-fs (loop1): Start checkpoint disabled! [ 45.591741][ T1003] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 45.601018][ T1003] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 45.625286][ T24] audit: type=1400 audit(1786255668.330:318): avc: denied { append } for pid=1002 comm="syz.1.175" path="/35/file0/blkio.bfq.io_service_time_recursive" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.663347][ T9] attempt to access beyond end of device [ 45.663347][ T9] loop1: rw=2049, want=45104, limit=40427 [ 45.792127][ T576] usbhid 6-1:0.0: can't add hid device: -71 [ 45.798161][ T576] usbhid: probe of 6-1:0.0 failed with error -71 [ 45.819117][ T1021] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc, [ 45.823620][ T576] usb 6-1: USB disconnect, device number 4 [ 45.848802][ T1021] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.919102][ T1050] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.182: bg 0: block 345: padding at end of block bitmap is not set [ 45.933577][ T500] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.944020][ T500] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 45.946661][ T1050] EXT4-fs (loop3): Remounting filesystem read-only [ 45.954299][ T500] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.118158][ T1060] mtrr: base(0xe7000) is not aligned on a size(0x0000) boundary [ 46.151242][ T500] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 46.160534][ T500] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.168896][ T500] usb 7-1: Product: syz [ 46.173260][ T429] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 46.181180][ T500] usb 7-1: Manufacturer: syz [ 46.186001][ T500] usb 7-1: SerialNumber: syz [ 46.194426][ T500] usb 7-1: config 0 descriptor?? [ 46.262706][ T1069] xt_hashlimit: size too large, truncated to 1048576 [ 46.341192][ T576] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 46.451012][ T1072] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 46.460603][ T1072] netlink: 104 bytes leftover after parsing attributes in process `syz.5.190'. [ 46.512736][ T1074] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 46.530415][ T52] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 46.539229][ T1074] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 46.541894][ T429] usb 2-1: config 1 has an invalid interface number: 144 but max is 1 [ 46.565502][ T429] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.575664][ T429] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 46.584639][ T429] usb 2-1: config 1 has no interface number 2 [ 46.590727][ T429] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.591283][ T576] usb 5-1: Using ep0 maxpacket: 16 [ 46.602406][ T429] usb 2-1: config 1 interface 144 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 46.616883][ T429] usb 2-1: config 1 interface 144 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.630048][ T429] usb 2-1: config 1 interface 144 has no altsetting 0 [ 46.656112][ T25] usb 7-1: USB disconnect, device number 3 [ 46.721354][ T576] usb 5-1: config index 0 descriptor too short (expected 548, got 36) [ 46.729632][ T576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.740578][ T576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.750381][ T576] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 46.763639][ T576] usb 5-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 46.772751][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 46.777914][ T576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.786823][ T576] usb 5-1: config 0 descriptor?? [ 46.791571][ T429] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.800986][ T429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.809043][ T429] usb 2-1: Product: syz [ 46.813322][ T429] usb 2-1: Manufacturer: syz [ 46.817939][ T429] usb 2-1: SerialNumber: syz [ 46.831355][ T758] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 46.839850][ T576] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 46.848000][ T576] usbhid 5-1:0.0: can't add hid device: -22 [ 46.854109][ T576] usbhid: probe of 5-1:0.0 failed with error -22 [ 46.863603][ T429] usb 2-1: selecting invalid altsetting 1 [ 46.901558][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 46.912640][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 46.923738][ T52] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 46.936560][ T52] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 46.945740][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.954501][ T52] usb 4-1: config 0 descriptor?? [ 46.971313][ T1067] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 47.036919][ T500] usb 5-1: USB disconnect, device number 7 [ 47.241218][ T758] usb 6-1: unable to get BOS descriptor or descriptor too short [ 47.281272][ T758] usb 6-1: not running at top speed; connect to a high speed hub [ 47.281278][ T429] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 47.281495][ T429] cdc_ncm 2-1:1.0: bind() failure [ 47.301202][ T429] cdc_ncm 2-1:1.1: bind() failure [ 47.308428][ T1078] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 47.316378][ T1078] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 47.325694][ T1078] F2FS-fs (loop6): invalid crc value [ 47.332821][ T1078] F2FS-fs (loop6): Found nat_bits in checkpoint [ 47.364066][ T758] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 47.375602][ T1078] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 47.382883][ T1078] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 47.411499][ T1067] udc-core: couldn't find an available UDC or it's busy [ 47.418607][ T1067] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 47.455476][ T52] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 47.465506][ T52] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 47.555592][ T500] usb 2-1: USB disconnect, device number 7 [ 47.571304][ T758] usb 6-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 47.580606][ T758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.588902][ T758] usb 6-1: Product: syz [ 47.593208][ T758] usb 6-1: Manufacturer: syz [ 47.597813][ T758] usb 6-1: SerialNumber: syz [ 47.643680][ T1089] netlink: 148 bytes leftover after parsing attributes in process `syz.6.193'. [ 47.652723][ T52] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 47.667401][ T52] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 47.679321][ T52] microsoft 0003:045E:07DA.0005: no inputs found [ 47.686116][ T52] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 47.706212][ T52] usb 4-1: USB disconnect, device number 8 [ 47.727648][ T1092] fido_id[1092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 47.841833][ T1074] udc-core: couldn't find an available UDC or it's busy [ 47.849138][ T1074] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 47.961392][ T758] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 47.981236][ T758] usb 6-1: unit 48 not found! [ 47.991060][ T758] usb 6-1: USB disconnect, device number 5 [ 48.031217][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 48.151769][ T1105] EXT4-fs (loop1): Ignoring removed oldalloc option [ 48.158620][ T1105] EXT4-fs (loop1): Ignoring removed oldalloc option [ 48.165600][ T1105] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 48.187885][ T1105] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue [ 48.204504][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.229277][ T1109] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 48.248508][ T1109] EXT4-fs (loop3): bad block size 16384 [ 48.277629][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 48.411236][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.431758][ T1113] EXT4-fs error (device loop3): ext4_fill_super:4959: inode #2: comm syz.3.200: iget: checksum invalid [ 48.453565][ T1113] EXT4-fs (loop3): get root inode failed [ 48.459331][ T1113] EXT4-fs (loop3): mount failed [ 48.498688][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.509103][ T25] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 48.518353][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.527972][ T25] usb 7-1: config 0 descriptor?? [ 48.581273][ T25] hub 7-1:0.0: USB hub found [ 48.871424][ T25] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 48.996585][ T1124] EXT4-fs error (device loop4): ext4_map_blocks:742: inode #3: block 1: comm syz.4.203: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.012443][ T1124] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.203: Failed to acquire dquot type 0 [ 49.024879][ T1124] EXT4-fs error (device loop4): ext4_free_blocks:5690: comm syz.4.203: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.040423][ T1124] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.203: Invalid inode bitmap blk 0 in block_group 0 [ 49.054873][ T7] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.109568][ T1124] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 49.145431][ T1130] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 49.188006][ T25] hid-generic 0003:046D:C31C.0006: item fetching failed at offset 0/1 [ 49.242489][ T7] EXT4-fs error (device loop4): ext4_release_dquot:6266: comm kworker/u4:0: Failed to release dquot type 0 [ 49.354613][ T1124] EXT4-fs (loop4): 1 orphan inode deleted [ 49.360804][ T25] hid-generic: probe of 0003:046D:C31C.0006 failed with error -22 [ 49.369151][ T1130] EXT4-fs error (device loop3): ext4_get_journal_inode:5247: comm syz.3.204: inode #1: comm syz.3.204: iget: illegal inode # [ 49.390753][ T1124] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; nodioread_nolock,nodelalloc,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue [ 49.441462][ T1130] EXT4-fs (loop3): no journal found [ 49.446718][ T1130] EXT4-fs (loop3): can't get journal size [ 49.453440][ T25] usb 7-1: USB disconnect, device number 4 [ 49.504137][ T1130] EXT4-fs (loop3): failed to initialize system zone (-22) [ 49.527621][ T1130] EXT4-fs (loop3): mount failed [ 49.733048][ T1143] overlayfs: missing 'lowerdir' [ 49.852210][ T1146] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 49.872449][ T1146] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #3: block 5: comm syz.5.209: lblock 5 mapped to illegal pblock 5 (length 1) [ 49.873246][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 49.873286][ T24] audit: type=1400 audit(1786255672.580:336): avc: denied { setopt } for pid=1142 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.887103][ T1146] Quota error (device loop5): write_blk: dquota write failed [ 49.921771][ T1146] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 49.948284][ T1153] erofs: (device loop3): mounted with root inode @ nid 36. [ 49.957855][ T1146] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 50.006194][ T1146] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.209: Failed to acquire dquot type 0 [ 50.042876][ T1153] overlayfs: missing 'lowerdir' [ 50.057319][ T1146] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 5: comm syz.5.209: lblock 5 mapped to illegal pblock 5 (length 1) [ 50.086915][ T1146] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 50.097921][ T1146] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.209: Failed to acquire dquot type 0 [ 50.110183][ T1146] EXT4-fs error (device loop5): ext4_free_blocks:5690: comm syz.5.209: Freeing blocks not in datazone - block = 0, count = 4096 [ 50.124961][ T1146] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 5: comm syz.5.209: lblock 5 mapped to illegal pblock 5 (length 1) [ 50.139673][ T1146] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 50.150363][ T1146] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.209: Failed to acquire dquot type 0 [ 50.162831][ T1146] EXT4-fs (loop5): 1 orphan inode deleted [ 50.169026][ T1146] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,min_batch_time=0x0000000000000008,data_err=ignore,user_xattr,nodiscard,usrjquota=./file0,data_err=ignore,,errors=continue [ 50.256816][ T1146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.209'. [ 50.268256][ T758] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 50.271999][ T1137] F2FS-fs (loop1): Test dummy encryption mode enabled [ 50.285665][ T1137] F2FS-fs (loop1): invalid crc value [ 50.292663][ T1146] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 5: comm syz.5.209: lblock 5 mapped to illegal pblock 5 (length 1) [ 50.300768][ T24] audit: type=1400 audit(1786255673.000:337): avc: denied { mount } for pid=1145 comm="syz.5.209" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.308208][ T1146] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 50.339105][ T1146] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.209: Failed to acquire dquot type 0 [ 50.358645][ T1137] F2FS-fs (loop1): Found nat_bits in checkpoint [ 50.406218][ T1137] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 50.416900][ T1137] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 50.424357][ T1137] F2FS-fs (loop1): Start checkpoint disabled! [ 50.433104][ T24] audit: type=1400 audit(1786255673.140:338): avc: denied { unmount } for pid=584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.453569][ T1137] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 50.761778][ T364] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 50.769703][ T758] usb 7-1: Using ep0 maxpacket: 32 [ 50.797978][ T364] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.876201][ T1179] tipc: Started in network mode [ 50.883129][ T1179] tipc: Own node identity 7f000001, cluster identity 4711 [ 50.892248][ T1179] tipc: New replicast peer: 127.0.0.2 [ 50.897917][ T1179] tipc: Enabled bearer , priority 10 [ 50.971747][ T758] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.983319][ T758] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.993265][ T758] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 51.004374][ T758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.087117][ T576] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 51.095183][ T758] usb 7-1: config 0 descriptor?? [ 51.451230][ T576] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 51.521685][ T576] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 51.577613][ T758] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 51.610563][ T758] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 51.678334][ T758] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 51.745135][ T758] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 51.791428][ T576] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 51.828067][ T576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.961200][ T758] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0 [ 51.968482][ T576] usb 4-1: Product: syz [ 51.981238][ T576] usb 4-1: Manufacturer: syz [ 51.985882][ T576] usb 4-1: SerialNumber: syz [ 52.051940][ T758] koneplus 0003:1E7D:2D51.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0 [ 52.071251][ T1175] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 52.081501][ T1175] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 52.111753][ T576] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 52.123372][ T758] koneplus 0003:1E7D:2D51.0008: couldn't init struct koneplus_device [ 52.143544][ T758] koneplus 0003:1E7D:2D51.0008: couldn't install mouse [ 52.153608][ T576] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 52.175301][ T758] koneplus: probe of 0003:1E7D:2D51.0008 failed with error -71 [ 52.194886][ T576] usbserial_generic 4-1:1.0: generic converter detected [ 52.214414][ T758] usb 7-1: USB disconnect, device number 5 [ 52.240910][ T15] tipc: 32-bit node address hash set to 100007f [ 52.264920][ T1198] tipc: Enabled bearer , priority 10 [ 52.275049][ T576] usb 4-1: generic converter now attached to ttyUSB0 [ 52.374577][ T1193] F2FS-fs (loop5): invalid crc value [ 52.391942][ T15] usb 4-1: USB disconnect, device number 9 [ 52.408189][ T1193] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 52.425147][ T15] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 52.435842][ T15] usbserial_generic 4-1:1.0: device disconnected [ 52.452861][ T1210] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.472590][ T1210] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 52.482338][ T1210] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 52.492158][ T1210] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 52.500280][ T1210] System zones: 0-2, 18-18, 34-35 [ 52.507032][ T1210] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,,errors=continue [ 52.526690][ T1210] netlink: 'syz.4.225': attribute type 298 has an invalid length. [ 52.544715][ T1193] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 52.643204][ T1220] EXT4-fs warning (device loop6): read_mmp_block:115: Error -74 while reading MMP block 17 [ 52.718884][ T24] audit: type=1400 audit(1786255675.420:339): avc: denied { bind } for pid=1219 comm="syz.6.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.861167][ T429] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 52.871259][ T576] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 52.933278][ T1226] EXT4-fs (loop3): Test dummy encryption mode enabled [ 52.943819][ T1226] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.230: inode has both inline data and extents flags [ 52.957529][ T1226] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.230: couldn't read orphan inode 15 (err -117) [ 52.969867][ T1226] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 52.990311][ T1226] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 53.101156][ T429] usb 5-1: Using ep0 maxpacket: 16 [ 53.121147][ T576] usb 6-1: Using ep0 maxpacket: 32 [ 53.221285][ T429] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.232387][ T429] usb 5-1: config 0 interface 0 has no altsetting 0 [ 53.239028][ T429] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 53.248404][ T429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.251463][ T576] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 53.266551][ T576] usb 6-1: config 2 has no interface number 0 [ 53.267771][ T429] usb 5-1: config 0 descriptor?? [ 53.278621][ T576] usb 6-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 53.288709][ T576] usb 6-1: config 2 interface 88 has no altsetting 0 [ 53.311491][ T1243] exfat: Deprecated parameter 'namecase' [ 53.317379][ T1243] exfat: Deprecated parameter 'utf8' [ 53.343927][ T1243] exFAT-fs (loop1): failed to read boot sector [ 53.350193][ T1243] exFAT-fs (loop1): failed to recognize exfat type [ 53.441167][ T364] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 53.473709][ T576] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 53.484007][ T576] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 53.537867][ T576] usb 6-1: Product: syz [ 53.542095][ T576] usb 6-1: Manufacturer: syz [ 53.546712][ T576] usb 6-1: SerialNumber: syz [ 53.571247][ T1193] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 53.841615][ T364] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 53.852319][ T1193] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 53.867591][ T364] usb 4-1: config 0 has no interface number 0 [ 53.899032][ T364] usb 4-1: too many endpoints for config 0 interface 102 altsetting 102: 102, using maximum allowed: 30 [ 53.948532][ T364] usb 4-1: config 0 interface 102 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 54.009135][ T364] usb 4-1: config 0 interface 102 has no altsetting 0 [ 54.230221][ T1252] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.234: iget: bad extended attribute block 16777216 [ 54.244019][ T364] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 54.256984][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.289393][ T1252] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.234: couldn't read orphan inode 15 (err -117) [ 54.303930][ T364] usb 4-1: Product: syz [ 54.308202][ T364] usb 4-1: Manufacturer: syz [ 54.314898][ T364] usb 4-1: SerialNumber: syz [ 54.414965][ T364] usb 4-1: config 0 descriptor?? [ 54.433117][ T1252] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,,errors=continue [ 54.701942][ T364] ftdi_sio 4-1:0.102: FTDI USB Serial Device converter detected [ 54.715928][ T364] usb 4-1: Detected FT8U232AM [ 54.734943][ T364] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 54.766251][ T429] hid-generic 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 54.779879][ T429] usb 5-1: USB disconnect, device number 8 [ 54.795976][ T364] usb 4-1: USB disconnect, device number 10 [ 54.831465][ T1263] fido_id[1263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 54.846182][ T364] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 54.864089][ T364] ftdi_sio 4-1:0.102: device disconnected [ 54.969874][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 54.969888][ T24] audit: type=1400 audit(1786255677.670:344): avc: denied { write } for pid=1281 comm="syz.1.241" path="socket:[19275]" dev="sockfs" ino=19275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.009493][ T24] audit: type=1400 audit(1786255677.710:345): avc: denied { setopt } for pid=1281 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.013900][ T1277] EXT4-fs (loop4): Mount option "data=writeback" incompatible with ext2 [ 55.071723][ T1279] EXT4-fs (loop6): Ignoring removed orlov option [ 55.108646][ T1286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.242'. [ 55.122315][ T1279] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,bsddf,sysvgroups,user_xattr,nouid32,orlov,nogrpid,norecovery,bsddf,,errors=continue [ 55.138119][ T1286] fuse: blksize only supported for fuseblk [ 55.158005][ T24] audit: type=1326 audit(1786255677.860:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.6.239" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1501ee0d9 code=0x7ffc0000 [ 55.277027][ T1291] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 55.318342][ T24] audit: type=1326 audit(1786255677.890:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.6.239" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1501ee0d9 code=0x7ffc0000 [ 55.343791][ T24] audit: type=1326 audit(1786255677.890:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.6.239" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1501ee0d9 code=0x7ffc0000 [ 55.369286][ T24] audit: type=1326 audit(1786255677.890:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.6.239" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1501ee0d9 code=0x7ffc0000 [ 55.394164][ T24] audit: type=1326 audit(1786255677.890:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.6.239" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1501ee0d9 code=0x7ffc0000 [ 55.412068][ T1291] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a81ec1a8, mo2=0003] [ 55.419252][ T24] audit: type=1326 audit(1786255677.890:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.6.239" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1501ee0d9 code=0x7ffc0000 [ 55.451974][ T24] audit: type=1326 audit(1786255677.890:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.6.239" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1501ee0d9 code=0x7ffc0000 [ 55.468466][ T1291] System zones: [ 55.477816][ T24] audit: type=1326 audit(1786255677.890:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.6.239" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ff1501ee0d9 code=0x7ffc0000 [ 55.498831][ T1291] 0-5 [ 55.521663][ T1291] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,grpquota,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,init_itable=0x0000000000000006, [ 55.844812][ T52] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 55.857297][ T52] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.917610][ T584] attempt to access beyond end of device [ 55.917610][ T584] loop5: rw=2049, want=45104, limit=40427 [ 55.928999][ T1292] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 55.937026][ T576] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 55.951304][ T576] asix: probe of 6-1:2.88 failed with error -71 [ 55.959959][ T576] usb 6-1: USB disconnect, device number 6 [ 56.371364][ T429] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 56.416679][ T1322] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 56.436245][ T1322] EXT4-fs (loop4): group descriptors corrupted! [ 56.447447][ T1329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.253'. [ 56.466150][ T1334] netlink: 56 bytes leftover after parsing attributes in process `syz.1.255'. [ 56.475490][ T1334] netlink: 56 bytes leftover after parsing attributes in process `syz.1.255'. [ 56.593991][ T1344] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue [ 56.606689][ T1344] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.731196][ T429] usb 7-1: config 0 has an invalid interface number: 42 but max is 8 [ 56.739338][ T429] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 56.748557][ T429] usb 7-1: config 0 has no interface number 0 [ 56.754870][ T429] usb 7-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.bb [ 56.764561][ T429] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.773567][ T429] usb 7-1: config 0 descriptor?? [ 56.811730][ T429] usb-storage 7-1:0.42: USB Mass Storage device detected [ 56.819918][ T429] usb-storage 7-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 56.828589][ T429] usb-storage 7-1:0.42: This device (04cb,0100,00bb S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 56.828589][ T429] Please send a copy of this message to and [ 56.931159][ T52] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 57.012519][ T576] usb 7-1: USB disconnect, device number 6 [ 57.025038][ T1322] F2FS-fs (loop4): Unrecognized mount option "NI2O" or missing value [ 57.281445][ T52] usb 6-1: not running at top speed; connect to a high speed hub [ 57.428293][ T1353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.259'. [ 57.451327][ T52] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.471168][ T52] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 57.489363][ T52] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 57.508752][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.561986][ T52] uvcvideo: Found UVC 1.00 device (046d:0825) [ 57.569008][ T52] uvcvideo: No streaming interface found for terminal 2. [ 57.618697][ T1359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 57.634829][ T1359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 57.771306][ T52] usb 6-1: USB disconnect, device number 7 [ 57.982838][ T1360] F2FS-fs (loop1): invalid crc value [ 58.021347][ T1360] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 58.068636][ T1360] F2FS-fs (loop1): Start checkpoint disabled! [ 58.077484][ T1360] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 58.093161][ T1383] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 58.232242][ T1387] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 58.263280][ T1387] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,acl,,errors=continue [ 58.273993][ T1387] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.519681][ T7] attempt to access beyond end of device [ 58.519681][ T7] loop1: rw=2049, want=40976, limit=40427 [ 58.572078][ T1398] EXT4-fs (loop5): Ignoring removed oldalloc option [ 58.578869][ T1398] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 58.601563][ T1398] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 58.645299][ T1406] size and base must be multiples of 4 kiB [ 58.661493][ T1406] CPU: 1 PID: 1406 Comm: syz.4.276 Not tainted syzkaller #0 [ 58.668852][ T1406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.678941][ T1406] Call Trace: [ 58.682286][ T1406] __dump_stack+0x21/0x24 [ 58.686793][ T1406] dump_stack_lvl+0x1a7/0x208 [ 58.691510][ T1406] ? thaw_kernel_threads+0x220/0x220 [ 58.696828][ T1406] ? do_vfs_ioctl+0x1403/0x15d0 [ 58.701863][ T1406] ? show_regs_print_info+0x18/0x18 [ 58.707091][ T1406] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 58.712745][ T1406] ? has_cap_mac_admin+0x370/0x370 [ 58.717986][ T1406] dump_stack+0x15/0x1c [ 58.722175][ T1406] mtrr_add+0xa1/0xb0 [ 58.726192][ T1406] mtrr_ioctl+0x8e8/0xf90 [ 58.730558][ T1406] ? mtrr_close+0x1f0/0x1f0 [ 58.735187][ T1406] ? selinux_file_ioctl+0x3ad/0x4c0 [ 58.740412][ T1406] ? putname+0x40/0x150 [ 58.744680][ T1406] ? do_sys_openat2+0x68e/0x750 [ 58.749550][ T1406] ? __fget_files+0x2e1/0x340 [ 58.754245][ T1406] ? mtrr_close+0x1f0/0x1f0 [ 58.758753][ T1406] proc_reg_unlocked_ioctl+0x1c6/0x2b0 [ 58.764231][ T1406] ? proc_reg_poll+0x290/0x290 [ 58.769001][ T1406] __se_sys_ioctl+0x121/0x1a0 [ 58.773678][ T1406] __x64_sys_ioctl+0x7b/0x90 [ 58.778279][ T1406] do_syscall_64+0x31/0x40 [ 58.782692][ T1406] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 58.788607][ T1406] RIP: 0033:0x7f6fea4fe0d9 [ 58.793024][ T1406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.812624][ T1406] RSP: 002b:00007f6fe8f57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.821045][ T1406] RAX: ffffffffffffffda RBX: 00007f6fea785fa0 RCX: 00007f6fea4fe0d9 [ 58.829284][ T1406] RDX: 0000200000000900 RSI: 00000000400c4d01 RDI: 0000000000000003 [ 58.837463][ T1406] RBP: 00007f6fea595024 R08: 0000000000000000 R09: 0000000000000000 [ 58.845446][ T1406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.853449][ T1406] R13: 00007f6fea786038 R14: 00007f6fea785fa0 R15: 00007ffde6592598 [ 59.028855][ T1410] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1410 comm=syz.6.277 [ 59.301859][ T1421] EXT4-fs (loop4): Ignoring removed bh option [ 59.426265][ T1421] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,norecovery,usrjquota=,lazytime,nodelalloc,stripe=0x0000000000000010,bh,init_itable,nombcache,bsddf,journal_ioprio=0x0000000000000005,,errors=continue [ 59.731254][ T364] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 59.987179][ T1453] EXT4-fs (loop5): Ignoring removed orlov option [ 60.003180][ T1453] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 60.042948][ T24] kauditd_printk_skb: 94 callbacks suppressed [ 60.042962][ T24] audit: type=1400 audit(1786255682.750:448): avc: denied { setattr } for pid=1452 comm="syz.5.288" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.071550][ T364] usb 4-1: Using ep0 maxpacket: 16 [ 60.159046][ T1457] netlink: 32 bytes leftover after parsing attributes in process `syz.5.288'. [ 60.168480][ T24] audit: type=1400 audit(1786255682.860:449): avc: denied { create } for pid=1452 comm="syz.5.288" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.188708][ T24] audit: type=1400 audit(1786255682.860:450): avc: denied { write open } for pid=1452 comm="syz.5.288" path="/36/file1/bus" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.212354][ T24] audit: type=1400 audit(1786255682.880:451): avc: denied { ioctl } for pid=1452 comm="syz.5.288" path="/36/file1/bus" dev="loop5" ino=20 ioctlcmd=0x6613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.236621][ T1459] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.246799][ T52] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 60.251303][ T500] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 60.258493][ T24] audit: type=1400 audit(1786255682.950:452): avc: denied { rename } for pid=1452 comm="syz.5.288" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.285985][ T1459] EXT4-fs (loop4): 1 truncate cleaned up [ 60.291862][ T1459] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum, [ 60.431259][ T364] usb 4-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 60.440702][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.449003][ T364] usb 4-1: Product: syz [ 60.453533][ T364] usb 4-1: Manufacturer: syz [ 60.458180][ T364] usb 4-1: SerialNumber: syz [ 60.560537][ T1464] netlink: 'syz.4.289': attribute type 46 has an invalid length. [ 60.573434][ T300] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 60.573452][ T52] usb 7-1: device descriptor read/64, error -71 [ 60.801866][ T1428] udc-core: couldn't find an available UDC or it's busy [ 60.801892][ T1429] udc-core: couldn't find an available UDC or it's busy [ 60.809044][ T1428] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 60.816218][ T1429] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 60.881302][ T500] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 60.890461][ T500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.899501][ T500] usb 2-1: config 0 descriptor?? [ 60.911201][ T300] usb 6-1: device descriptor read/64, error -71 [ 60.971238][ T364] usb 4-1: Can't get UAC3 power state for id 10 [ 61.047987][ T52] usb 7-1: device descriptor read/64, error -71 [ 61.054511][ T364] usb 4-1: BAAD SPEAKERPHONE c_chmask mismatch [ 61.060953][ T364] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 61.071925][ T364] usb 4-1: USB disconnect, device number 11 [ 61.090241][ T1466] netlink: 72 bytes leftover after parsing attributes in process `syz.4.290'. [ 61.102964][ T1466] netlink: 64 bytes leftover after parsing attributes in process `syz.4.290'. [ 61.171601][ T1414] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.207869][ T1414] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 61.222794][ T24] audit: type=1400 audit(1786255683.930:453): avc: denied { mounton } for pid=1413 comm="syz.1.279" path="/58/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 61.238880][ T1414] 9pnet: Could not find request transport: xen [ 61.253982][ T1414] udc-core: couldn't find an available UDC or it's busy [ 61.261225][ T1414] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 61.270535][ T1414] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 61.279515][ T1414] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 61.321237][ T52] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 61.355102][ T300] usb 6-1: device descriptor read/64, error -71 [ 61.381178][ T500] usb 2-1: Cannot read MAC address [ 61.386634][ T500] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 61.397154][ T500] usb 2-1: USB disconnect, device number 8 [ 61.415477][ T1473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.293'. [ 61.471244][ T714] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 61.601198][ T52] usb 7-1: device descriptor read/64, error -71 [ 61.631215][ T300] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 61.711179][ T714] usb 5-1: Using ep0 maxpacket: 8 [ 61.731262][ T364] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 61.831261][ T714] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 61.842164][ T714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.853526][ T714] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 61.866717][ T714] usb 5-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 61.876046][ T714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.885772][ T714] usb 5-1: config 0 descriptor?? [ 61.892602][ T24] audit: type=1400 audit(1786255684.600:454): avc: denied { ioctl } for pid=1480 comm="syz.1.295" path="socket:[20666]" dev="sockfs" ino=20666 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.901314][ T300] usb 6-1: device descriptor read/64, error -71 [ 61.932145][ T714] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 61.952238][ T24] audit: type=1400 audit(1786255684.660:455): avc: denied { mount } for pid=1487 comm="syz.1.297" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.979418][ T24] audit: type=1400 audit(1786255684.680:456): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.001212][ T52] usb 7-1: device descriptor read/64, error -71 [ 62.021317][ T364] usb 4-1: device descriptor read/64, error -71 [ 62.063984][ T1490] EXT4-fs (loop1): Test dummy encryption mode enabled [ 62.070927][ T1490] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 62.082129][ T1490] EXT4-fs (loop1): group descriptors corrupted! [ 62.121325][ T52] usb usb7-port1: attempt power cycle [ 62.197858][ T1495] netlink: 168 bytes leftover after parsing attributes in process `syz.1.300'. [ 62.252010][ T1497] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.272509][ T1497] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue [ 62.295074][ T24] audit: type=1400 audit(1786255685.000:457): avc: denied { append } for pid=1496 comm="syz.1.301" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.311553][ T300] usb 6-1: device descriptor read/64, error -71 [ 62.325909][ T1497] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.301: bg 0: block 512: padding at end of block bitmap is not set [ 62.342200][ T1497] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #2: block 16: comm syz.1.301: lblock 0 mapped to illegal pblock 16 (length 1) [ 62.356933][ T1497] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #2: block 16: comm syz.1.301: lblock 0 mapped to illegal pblock 16 (length 1) [ 62.371732][ T1497] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #2: block 16: comm syz.1.301: lblock 0 mapped to illegal pblock 16 (length 1) [ 62.386350][ T1497] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #2: block 16: comm syz.1.301: lblock 0 mapped to illegal pblock 16 (length 1) [ 62.401375][ T1497] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #2: block 16: comm syz.1.301: lblock 0 mapped to illegal pblock 16 (length 1) [ 62.422839][ T364] usb 4-1: device descriptor read/64, error -71 [ 62.451515][ T300] usb usb6-port1: attempt power cycle [ 62.515352][ T1503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.302'. [ 62.531192][ T52] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 62.631251][ T714] usbhid 5-1:0.0: can't add hid device: -71 [ 62.637370][ T714] usbhid: probe of 5-1:0.0 failed with error -71 [ 62.644645][ T714] usb 5-1: USB disconnect, device number 9 [ 62.691244][ T364] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 62.701401][ T52] usb 7-1: device descriptor read/8, error -71 [ 62.861212][ T300] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 62.951226][ T52] usb 7-1: device descriptor read/8, error -71 [ 62.961321][ T364] usb 4-1: device descriptor read/64, error -71 [ 63.011291][ T300] usb 6-1: device descriptor read/8, error -71 [ 63.089436][ T1524] bridge0: port 3(syz_tun) entered blocking state [ 63.096161][ T1524] bridge0: port 3(syz_tun) entered disabled state [ 63.103366][ T1524] device syz_tun entered promiscuous mode [ 63.109318][ T1524] bridge0: port 3(syz_tun) entered blocking state [ 63.115812][ T1524] bridge0: port 3(syz_tun) entered forwarding state [ 63.119516][ T1522] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.132506][ T1522] [EXT4 FS bs=4096, gc=1, bpg=42, ipg=32, mo=840c018, mo2=0000] [ 63.140852][ T1522] EXT4-fs (loop5): orphan cleanup on readonly fs [ 63.148439][ T1522] EXT4-fs error (device loop5): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 63.163153][ T1522] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.308: Failed to acquire dquot type 0 [ 63.174887][ T1522] EXT4-fs (loop5): 1 truncate cleaned up [ 63.178234][ T1524] SELinux: failed to load policy [ 63.182919][ T1522] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,debug,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue [ 63.221226][ T300] usb 6-1: device descriptor read/8, error -71 [ 63.259626][ T1528] device macsec1 entered promiscuous mode [ 63.351170][ T364] usb 4-1: device descriptor read/64, error -71 [ 63.443252][ T1532] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 63.461196][ T1532] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 63.471379][ T364] usb usb4-port1: attempt power cycle [ 63.472761][ T1532] F2FS-fs (loop5): invalid crc value [ 63.488995][ T1532] F2FS-fs (loop5): Found nat_bits in checkpoint [ 63.536467][ T1532] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 63.543783][ T1532] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 63.581220][ T714] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 63.638183][ T1542] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 63.682570][ T1532] x_tables: duplicate underflow at hook 2 [ 63.754975][ T1548] netlink: 24 bytes leftover after parsing attributes in process `syz.5.316'. [ 63.846390][ T1550] netlink: 28 bytes leftover after parsing attributes in process `syz.6.315'. [ 63.855382][ T1550] netem: change failed [ 63.860493][ T714] usb 2-1: device descriptor read/64, error -71 [ 63.915845][ T1552] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 63.927458][ T1552] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 63.937958][ T1552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e028, mo2=0002] [ 63.946084][ T1552] System zones: 1-12 [ 63.950398][ T1552] EXT4-fs (loop4): orphan cleanup on readonly fs [ 63.957280][ T1552] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.318: bg 0: block 361: padding at end of block bitmap is not set [ 63.971991][ T1552] EXT4-fs (loop4): Remounting filesystem read-only [ 63.978513][ T1552] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 63.987578][ T1552] EXT4-fs error (device loop4): ext4_clear_blocks:880: inode #11: comm syz.4.318: attempt to clear invalid blocks 33619980 len 1 [ 64.001159][ T364] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 64.002058][ T1552] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.318: invalid indirect mapped block 1811939328 (level 0) [ 64.023111][ T1552] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.318: invalid indirect mapped block 2 (level 2) [ 64.037388][ T1552] EXT4-fs (loop4): 1 truncate cleaned up [ 64.043286][ T1552] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,sysvgroups,discard,errors=remount-ro,mblk_io_submit [ 64.160645][ T1558] loop4: p2 p3 p4[EZD] [ 64.165366][ T1558] loop4: p2 start 150999054 is beyond EOD, truncated [ 64.173085][ T1558] loop4: p4 start 201326592 is beyond EOD, truncated [ 64.181456][ T364] usb 4-1: device descriptor read/8, error -71 [ 64.241222][ T300] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 64.271286][ T714] usb 2-1: device descriptor read/64, error -71 [ 64.481240][ T364] usb 4-1: device descriptor read/8, error -71 [ 64.487682][ T300] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.492131][ T1562] exfat: Deprecated parameter 'namecase' [ 64.511347][ T1562] exfat: Deprecated parameter 'namecase' [ 64.511741][ T300] usb 6-1: config 1 interface 0 has no altsetting 0 [ 64.534161][ T1562] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 64.546299][ T714] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 64.580269][ T1567] EXT4-fs (loop6): Invalid log cluster size: 589824 [ 64.731243][ T300] usb 6-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 64.750528][ T300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.760609][ T300] usb 6-1: Product: syz [ 64.770701][ T300] usb 6-1: Manufacturer: syz [ 64.775376][ T300] usb 6-1: SerialNumber: syz [ 64.821179][ T714] usb 2-1: device descriptor read/64, error -71 [ 65.004495][ T1565] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945) [ 65.013117][ T1565] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 65.022400][ T1565] F2FS-fs (loop3): invalid crc value [ 65.029931][ T1565] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.059178][ T1565] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 65.066340][ T1565] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 65.076237][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 65.076252][ T24] audit: type=1400 audit(1786255687.780:469): avc: denied { read } for pid=1564 comm="syz.3.322" path="/55/file1/bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.092417][ T300] usb 6-1: USB disconnect, device number 11 [ 65.159471][ T1576] F2FS-fs (loop3): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 65.174628][ T1577] F2FS-fs (loop3): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 65.211185][ T714] usb 2-1: device descriptor read/64, error -71 [ 65.262364][ T24] audit: type=1400 audit(1786255687.970:470): avc: denied { map } for pid=1578 comm="syz.6.324" path="socket:[20792]" dev="sockfs" ino=20792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.311163][ T24] audit: type=1400 audit(1786255687.990:471): avc: denied { read } for pid=1578 comm="syz.6.324" path="socket:[20792]" dev="sockfs" ino=20792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.331494][ T714] usb usb2-port1: attempt power cycle [ 65.377144][ T24] audit: type=1400 audit(1786255688.080:472): avc: denied { call } for pid=1586 comm="syz.6.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 65.537658][ T1589] EXT4-fs error (device loop6): ext4_fill_super:4959: inode #2: comm syz.6.328: iget: checksum invalid [ 65.549523][ T1589] EXT4-fs (loop6): get root inode failed [ 65.561647][ T1589] EXT4-fs (loop6): mount failed [ 65.761166][ T714] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 65.871202][ T576] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 65.931215][ T714] usb 2-1: device descriptor read/8, error -71 [ 66.013434][ T1595] F2FS-fs (loop6): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 66.021885][ T364] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 66.029546][ T1595] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 66.040960][ T1595] F2FS-fs (loop6): Found nat_bits in checkpoint [ 66.075245][ T1595] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 66.082564][ T1595] F2FS-fs (loop6): Mounted with checkpoint version = 753bd00b [ 66.211226][ T714] usb 2-1: device descriptor read/8, error -71 [ 66.231219][ T576] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 66.240970][ T576] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 66.309871][ T24] audit: type=1326 audit(1786255689.010:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.6.331" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff1501ee0d9 code=0x0 [ 66.344719][ T1607] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 66.391275][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.402405][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.412284][ T576] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 66.421377][ T364] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.434200][ T576] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.442226][ T576] usb 6-1: Product: syz [ 66.446402][ T576] usb 6-1: Manufacturer: syz [ 66.451008][ T576] usb 6-1: SerialNumber: syz [ 66.455698][ T364] usb 4-1: New USB device found, idVendor=049d, idProduct=ffff, bcdDevice= 0.00 [ 66.464781][ T364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.474110][ T364] usb 4-1: config 0 descriptor?? [ 66.724050][ T714] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 66.732236][ T576] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 66.751881][ T576] usb 6-1: USB disconnect, device number 12 [ 66.766797][ T576] usblp0: removed [ 66.922797][ T1615] F2FS-fs (loop5): invalid crc value [ 66.929445][ T1615] F2FS-fs (loop5): Found nat_bits in checkpoint [ 66.941228][ T714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.952307][ T714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.962434][ T714] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.975654][ T714] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.985076][ T1597] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 66.996233][ T714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.003278][ T1597] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 67.025221][ T714] usb 2-1: config 0 descriptor?? [ 67.032255][ T1615] F2FS-fs (loop5): Start checkpoint disabled! [ 67.039235][ T1615] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 67.040820][ T1597] F2FS-fs (loop3): Found nat_bits in checkpoint [ 67.089236][ T1597] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 67.096449][ T1597] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 67.126476][ T24] audit: type=1400 audit(1786255689.830:474): avc: denied { append } for pid=1596 comm="syz.3.325" name="file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.165727][ T1597] attempt to access beyond end of device [ 67.165727][ T1597] loop3: rw=2049, want=78920, limit=40427 [ 67.178947][ T1597] attempt to access beyond end of device [ 67.178947][ T1597] loop3: rw=0, want=78920, limit=40427 [ 67.248915][ T1628] overlayfs: missing 'lowerdir' [ 67.281936][ T24] audit: type=1400 audit(1786255689.990:475): avc: denied { mount } for pid=1609 comm="syz.1.333" name="/" dev="configfs" ino=13716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.304799][ T24] audit: type=1400 audit(1786255689.990:476): avc: denied { search } for pid=1609 comm="syz.1.333" name="/" dev="configfs" ino=13716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.328368][ T1630] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 67.339531][ T1630] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 67.349732][ T1630] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 67.360023][ T1630] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 67.370751][ T1630] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 67.379477][ T1630] EXT4-fs (loop6): orphan cleanup on readonly fs [ 67.386755][ T1630] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.337: bg 0: block 34: padding at end of block bitmap is not set [ 67.391682][ T714] usbhid 2-1:0.0: can't add hid device: -71 [ 67.403939][ T1630] Quota error (device loop6): write_blk: dquota write failed [ 67.414843][ T1630] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 67.417680][ T714] usbhid: probe of 2-1:0.0 failed with error -71 [ 67.430102][ T1630] EXT4-fs error (device loop6): ext4_acquire_dquot:6230: comm syz.6.337: Failed to acquire dquot type 1 [ 67.445448][ T1597] attempt to access beyond end of device [ 67.445448][ T1597] loop3: rw=524288, want=77856, limit=40427 [ 67.456897][ T714] usb 2-1: USB disconnect, device number 12 [ 67.471259][ T1597] attempt to access beyond end of device [ 67.471259][ T1597] loop3: rw=0, want=77832, limit=40427 [ 67.483356][ T1630] EXT4-fs (loop6): 1 truncate cleaned up [ 67.489459][ T1630] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,bsddf,nodiscard,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,errors=continue,nouid32,nodiscard,abort,usrjquota=,lazytime,,errors=continue [ 67.521041][ T1624] attempt to access beyond end of device [ 67.521041][ T1624] loop5: rw=10241, want=45104, limit=40427 [ 67.532870][ T1624] attempt to access beyond end of device [ 67.532870][ T1624] loop5: rw=2049, want=45104, limit=40427 [ 67.544383][ T1615] attempt to access beyond end of device [ 67.544383][ T1615] loop5: rw=2049, want=45104, limit=40427 [ 67.645203][ T7] attempt to access beyond end of device [ 67.645203][ T7] loop5: rw=2049, want=40976, limit=40427 [ 67.683756][ T1640] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.694549][ T1640] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 67.707229][ T1640] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012aa6, chksum : 0xd6e865ce, utbl_chksum : 0xe619d30d) [ 67.751358][ T1640] loop_set_status: loop6 () has still dirty pages (nrpages=2) [ 67.775521][ T1643] fuse: Unknown parameter 'group1m00000000000000000000' [ 67.834786][ T52] kernel write not supported for file [eventfd] (pid: 52 comm: kworker/1:2) [ 67.851931][ T1650] udc-core: couldn't find an available UDC or it's busy [ 67.859997][ T1650] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.931209][ T576] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 68.071278][ T714] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 68.101278][ T364] usbhid 4-1:0.0: can't add hid device: -71 [ 68.107550][ T364] usbhid: probe of 4-1:0.0 failed with error -71 [ 68.115472][ T364] usb 4-1: USB disconnect, device number 16 [ 68.131248][ T52] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 68.181322][ T576] usb 5-1: Using ep0 maxpacket: 8 [ 68.252545][ T1655] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue [ 68.262636][ T576] usb 5-1: unable to get BOS descriptor or descriptor too short [ 68.311166][ T714] usb 7-1: Using ep0 maxpacket: 16 [ 68.351240][ T576] usb 5-1: config 2 has an invalid interface number: 58 but max is 0 [ 68.359490][ T576] usb 5-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 68.369869][ T576] usb 5-1: config 2 has no interface number 0 [ 68.376111][ T576] usb 5-1: config 2 interface 58 altsetting 129 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 68.387391][ T576] usb 5-1: config 2 interface 58 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1024 [ 68.398023][ T576] usb 5-1: config 2 interface 58 altsetting 129 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 68.409214][ T576] usb 5-1: config 2 interface 58 altsetting 129 endpoint 0xE has invalid wMaxPacketSize 0 [ 68.419387][ T576] usb 5-1: config 2 interface 58 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 68.430345][ T576] usb 5-1: config 2 interface 58 altsetting 129 endpoint 0xB has invalid maxpacket 72, setting to 64 [ 68.431357][ T714] usb 7-1: config index 0 descriptor too short (expected 59553, got 10) [ 68.442106][ T576] usb 5-1: config 2 interface 58 has no altsetting 0 [ 68.459749][ T714] usb 7-1: config 245 has too many interfaces: 105, using maximum allowed: 32 [ 68.468828][ T714] usb 7-1: config 245 descriptor has 1 excess byte, ignoring [ 68.476406][ T714] usb 7-1: config 245 has 0 interfaces, different from the descriptor's value: 105 [ 68.541256][ T52] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 68.552770][ T52] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.565875][ T52] usb 2-1: config 0 interface 0 has no altsetting 0 [ 68.573197][ T52] usb 2-1: New USB device found, idVendor=03ac, idProduct=8241, bcdDevice= 0.00 [ 68.582468][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.594685][ T52] usb 2-1: config 0 descriptor?? [ 68.641239][ T576] usb 5-1: New USB device found, idVendor=08e9, idProduct=0100, bcdDevice=74.53 [ 68.644261][ T714] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 68.650335][ T576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.668176][ T576] usb 5-1: Product: syz [ 68.672832][ T576] usb 5-1: Manufacturer: syz [ 68.677922][ T714] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.682106][ T576] usb 5-1: SerialNumber: syz [ 68.693253][ T714] usb 7-1: Product: syz [ 68.697537][ T714] usb 7-1: Manufacturer: syz [ 68.702592][ T714] usb 7-1: SerialNumber: syz [ 68.711299][ T1637] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 68.951255][ T52] usbhid 2-1:0.0: can't add hid device: -71 [ 68.957247][ T52] usbhid: probe of 2-1:0.0 failed with error -71 [ 68.964849][ T52] usb 2-1: USB disconnect, device number 13 [ 68.971349][ T500] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 68.991848][ T714] usb 7-1: USB disconnect, device number 11 [ 69.023194][ T576] usb 5-1: USB disconnect, device number 10 [ 69.121236][ T5] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 69.211242][ T500] usb 6-1: Using ep0 maxpacket: 16 [ 69.331287][ T500] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.342462][ T500] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.352259][ T500] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 69.365238][ T500] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 69.374391][ T500] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.387503][ T500] usb 6-1: config 0 descriptor?? [ 69.469907][ T1672] netlink: 12 bytes leftover after parsing attributes in process `syz.6.351'. [ 69.491324][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.502369][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.512364][ T5] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.525496][ T5] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 69.534704][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.550358][ T5] usb 4-1: config 0 descriptor?? [ 69.661382][ T576] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 69.675078][ T1685] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 69.698961][ T500] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000B/input/input9 [ 69.701474][ T1691] EXT4-fs (loop4): 1 truncate cleaned up [ 69.717099][ T1691] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue [ 69.726535][ T500] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 69.735730][ T1685] EXT4-fs (loop6): 1 truncate cleaned up [ 69.757860][ T1685] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum, [ 69.892491][ T1256] usb 6-1: USB disconnect, device number 13 [ 70.092127][ T576] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 70.135958][ T576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.234283][ T5] thrustmaster 0003:044F:B324.000C: hiddev96,hidraw0: USB HID v0.00 Device [HID 044f:b324] on usb-dummy_hcd.3-1/input0 [ 70.244346][ T576] usb 2-1: config 0 descriptor?? [ 70.248138][ T5] thrustmaster 0003:044F:B324.000C: no inputs found [ 70.313681][ T364] usb 4-1: USB disconnect, device number 17 [ 70.513685][ T1708] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 70.563527][ T1707] attempt to access beyond end of device [ 70.563527][ T1707] loop5: rw=524288, want=34359738496, limit=256 [ 70.577402][ T1708] attempt to access beyond end of device [ 70.577402][ T1708] loop5: rw=0, want=34359738496, limit=256 [ 70.642306][ T7] exFAT-fs (loop5): hint_cluster is invalid (1) [ 70.653780][ T7] exFAT-fs (loop5): error, invalid access to exfat cache (entry 0x00000000) [ 70.662826][ T7] exFAT-fs (loop5): Filesystem has been set read-only [ 70.677575][ T7] exFAT-fs (loop5): error, failed to bmap (inode : ffff88811c16ddb0 iblock : 9, err : -5) [ 70.687889][ T7] exFAT-fs (loop5): error, invalid access to exfat cache (entry 0x00000000) [ 70.696759][ T7] exFAT-fs (loop5): error, failed to bmap (inode : ffff88811c16ddb0 iblock : 8, err : -5) [ 70.707525][ T7] exFAT-fs (loop5): error, invalid access to exfat cache (entry 0x00000000) [ 70.716415][ T7] exFAT-fs (loop5): error, failed to bmap (inode : ffff88811c16ddb0 iblock : 16, err : -5) [ 70.727088][ T7] exFAT-fs (loop5): error, invalid access to exfat cache (entry 0x00000000) [ 70.737068][ T7] exFAT-fs (loop5): error, failed to bmap (inode : ffff88811c16ddb0 iblock : 16, err : -5) [ 70.748095][ T7] exFAT-fs (loop5): error, invalid access to exfat cache (entry 0x00000000) [ 70.757723][ T7] exFAT-fs (loop5): error, failed to bmap (inode : ffff88811c16ddb0 iblock : 32, err : -5) [ 70.769033][ T7] exFAT-fs (loop5): error, invalid access to exfat cache (entry 0x00000000) [ 70.790137][ T7] exFAT-fs (loop5): error, failed to bmap (inode : ffff88811c16ddb0 iblock : 32, err : -5) [ 71.094805][ T1705] F2FS-fs (loop4): invalid crc value [ 71.128392][ T1705] F2FS-fs (loop4): Found nat_bits in checkpoint [ 71.166555][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 71.166573][ T24] audit: type=1400 audit(1786255693.870:493): avc: denied { ioctl } for pid=1732 comm="syz.5.363" path="/52/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=2206 ioctlcmd=0x4b69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 71.193652][ T1705] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 71.216990][ T1705] syz.4.357 (pid 1705) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 71.228642][ T24] audit: type=1400 audit(1786255693.930:494): avc: denied { connect } for pid=1704 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.250080][ T24] audit: type=1400 audit(1786255693.930:495): avc: denied { write } for pid=1704 comm="syz.4.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.309118][ T24] audit: type=1400 audit(1786255694.010:496): avc: denied { accept } for pid=1732 comm="syz.5.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 71.331212][ T5] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 71.457703][ T1739] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.504053][ T24] audit: type=1400 audit(1786255694.210:497): avc: denied { name_bind } for pid=1741 comm="syz.4.364" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 71.591174][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 71.605303][ T1746] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 71.616783][ T1746] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 71.627519][ T1746] EXT4-fs error (device loop6): ext4_iget_extra_inode:4692: inode #15: comm syz.6.369: corrupted in-inode xattr [ 71.640202][ T1746] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.369: couldn't read orphan inode 15 (err -117) [ 71.652474][ T1746] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,i_version,noauto_da_alloc,noload,norecovery,noblock_validity,nomblk_io_submit,inlinecrypt,errors=continue,,errors=continue [ 71.686616][ T1746] device veth0_to_bond entered promiscuous mode [ 71.693041][ T1746] device macsec1 entered promiscuous mode [ 71.711217][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.731173][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.747064][ T5] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 71.756572][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.769486][ T5] usb 4-1: config 0 descriptor?? [ 71.812567][ T5] hub 4-1:0.0: USB hub found [ 72.111242][ T5] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 73.091197][ T576] usb 2-1: Cannot set autoneg [ 73.096051][ T576] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 73.131722][ T24] audit: type=1400 audit(1786255695.830:498): avc: denied { connect } for pid=1768 comm="syz.5.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.154857][ T576] usb 2-1: USB disconnect, device number 14 [ 73.179004][ T5] hid-generic 0003:046D:C31C.000D: item fetching failed at offset 0/1 [ 73.187576][ T5] hid-generic: probe of 0003:046D:C31C.000D failed with error -22 [ 73.319774][ T1744] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 73.328405][ T1778] SELinux: ebitmap: map size 4278255616 does not match my size 64 (high bit was 16580607) [ 73.332532][ T1778] SELinux: failed to load policy [ 73.343533][ T1744] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 73.355145][ T1744] F2FS-fs (loop4): invalid crc value [ 73.386159][ T1744] F2FS-fs (loop4): Found nat_bits in checkpoint [ 73.401761][ T364] usb 4-1: USB disconnect, device number 18 [ 73.556017][ T1744] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 73.563293][ T1744] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 74.246243][ T364] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 74.701216][ T576] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 74.811546][ T364] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.820805][ T364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.829655][ T364] usb 6-1: Product: syz [ 74.834193][ T364] usb 6-1: Manufacturer: syz [ 74.838923][ T364] usb 6-1: SerialNumber: syz [ 75.221412][ T576] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 75.237643][ T576] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.263746][ T576] usb 7-1: Product: syz [ 75.277948][ T576] usb 7-1: Manufacturer: syz [ 75.289301][ T576] usb 7-1: SerialNumber: syz [ 75.302163][ T576] usb 7-1: config 0 descriptor?? [ 75.413983][ T24] audit: type=1400 audit(1786255698.120:499): avc: denied { read } for pid=1815 comm="syz.4.388" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 75.551195][ T24] audit: type=1400 audit(1786255698.120:500): avc: denied { open } for pid=1815 comm="syz.4.388" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 75.590480][ T1822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'. [ 75.616418][ T24] audit: type=1400 audit(1786255698.320:501): avc: denied { read } for pid=1823 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.685442][ T1833] device bridge0 entered promiscuous mode [ 75.700685][ T24] audit: type=1400 audit(1786255698.400:502): avc: denied { ioctl } for pid=1834 comm="syz.3.400" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.001242][ T364] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 76.007792][ T364] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 76.015356][ T364] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 76.211225][ T364] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 76.232960][ T364] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 76.248555][ T364] usb 6-1: USB disconnect, device number 14 [ 76.255768][ T364] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 76.308205][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 76.308218][ T24] audit: type=1400 audit(1786255699.010:504): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 76.346470][ T24] audit: type=1400 audit(1786255699.050:505): avc: denied { read write } for pid=1856 comm="syz.4.406" name="control" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 76.370250][ T24] audit: type=1400 audit(1786255699.050:506): avc: denied { open } for pid=1856 comm="syz.4.406" path="/93/dev/mapper/control" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 76.435262][ T24] audit: type=1400 audit(1786255699.050:507): avc: denied { ioctl } for pid=1856 comm="syz.4.406" path="/93/dev/mapper/control" dev="devtmpfs" ino=260 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 76.470253][ T24] audit: type=1400 audit(1786255699.170:508): avc: denied { create } for pid=1863 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 76.612711][ T5] usb 7-1: USB disconnect, device number 12 [ 76.629461][ T1877] xt_hashlimit: size too large, truncated to 1048576 [ 76.661994][ T24] audit: type=1400 audit(1786255699.370:509): avc: denied { mount } for pid=1881 comm="syz.4.417" name="/" dev="pstore" ino=12836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 77.451250][ T24] audit: type=1400 audit(1786255699.990:510): avc: denied { unmount } for pid=1881 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 77.453005][ T714] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 78.361203][ T714] usb 2-1: Using ep0 maxpacket: 8 [ 78.484883][ T714] usb 2-1: config 0 has no interfaces? [ 78.490596][ T714] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 78.499956][ T714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.567752][ T1903] netlink: 40 bytes leftover after parsing attributes in process `syz.6.425'. [ 78.577059][ T714] usb 2-1: config 0 descriptor?? [ 78.589743][ T1903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.425'. [ 78.834763][ T1924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.432'. [ 78.857602][ T1926] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 79.535049][ T24] audit: type=1400 audit(1786255702.240:511): avc: denied { read } for pid=1939 comm="syz.6.439" path="socket:[21394]" dev="sockfs" ino=21394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.908440][ T1952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 80.331528][ T364] usb 2-1: USB disconnect, device number 15 [ 80.340591][ T1961] xt_hashlimit: size too large, truncated to 1048576 [ 80.448104][ T24] audit: type=1400 audit(1786255703.150:512): avc: denied { write } for pid=1964 comm="syz.1.449" path="socket:[21458]" dev="sockfs" ino=21458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.752496][ T24] audit: type=1400 audit(1786255703.460:513): avc: denied { search } for pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.558131][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 81.558145][ T24] audit: type=1400 audit(1786255704.260:527): avc: denied { accept } for pid=2023 comm="syz.5.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.825135][ T24] audit: type=1400 audit(1786255704.510:528): avc: denied { shutdown } for pid=2013 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.978739][ T2035] netlink: 'syz.4.462': attribute type 4 has an invalid length. [ 82.300632][ T2048] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 83.116619][ T24] audit: type=1400 audit(1786255705.820:529): avc: denied { mounton } for pid=2071 comm="syz.1.479" path="/proc/262/task" dev="proc" ino=22798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 83.288869][ T2083] xt_hashlimit: size too large, truncated to 1048576 [ 83.568023][ T2088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 83.617261][ T2090] SELinux: ebitmap: map size 4278255616 does not match my size 64 (high bit was 2147287039) [ 83.637336][ T2090] SELinux: failed to load policy [ 83.672483][ T2103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.490'. [ 83.911165][ T576] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 83.911334][ T714] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 83.949609][ T2118] netlink: 4 bytes leftover after parsing attributes in process `syz.6.496'. [ 83.961283][ T364] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 84.271313][ T576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.283230][ T576] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.292436][ T576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.301510][ T714] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.303177][ T576] usb 5-1: config 0 descriptor?? [ 84.319105][ T714] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.321925][ T364] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 84.341254][ T364] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 84.355178][ T364] usb 4-1: config 220 has no interface number 2 [ 84.362181][ T364] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 84.375496][ T364] usb 4-1: config 220 interface 0 has no altsetting 0 [ 84.382496][ T364] usb 4-1: config 220 interface 76 has no altsetting 0 [ 84.389451][ T364] usb 4-1: config 220 interface 1 has no altsetting 0 [ 84.501290][ T714] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 84.510532][ T714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.518929][ T714] usb 2-1: Product: syz [ 84.523353][ T714] usb 2-1: Manufacturer: syz [ 84.528014][ T714] usb 2-1: SerialNumber: syz [ 84.551440][ T364] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 84.560829][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.569112][ T364] usb 4-1: Product: syz [ 84.573689][ T364] usb 4-1: Manufacturer: syz [ 84.578522][ T364] usb 4-1: SerialNumber: syz [ 84.741203][ T576] usbhid 5-1:0.0: can't add hid device: -71 [ 84.747298][ T576] usbhid: probe of 5-1:0.0 failed with error -71 [ 84.755377][ T576] usb 5-1: USB disconnect, device number 11 [ 84.794747][ T714] usb 2-1: USB disconnect, device number 16 [ 85.142034][ T364] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 85.148597][ T364] uvcvideo: No valid video chain found. [ 85.154388][ T364] usb 4-1: selecting invalid altsetting 0 [ 85.246338][ T364] usb 4-1: USB disconnect, device number 19 [ 85.331342][ T576] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 85.639985][ T24] audit: type=1400 audit(1786255708.340:530): avc: denied { read } for pid=2129 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.660136][ T24] audit: type=1400 audit(1786255708.340:531): avc: denied { setopt } for pid=2130 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.891210][ T576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.902334][ T576] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 85.911472][ T576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.920146][ T576] usb 5-1: config 0 descriptor?? [ 86.270690][ T2148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.506'. [ 86.383304][ T2099] udc-core: couldn't find an available UDC or it's busy [ 86.390646][ T2099] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 86.571187][ T364] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 86.831279][ T364] usb 4-1: Using ep0 maxpacket: 32 [ 86.871298][ T576] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 86.889226][ T576] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 86.951377][ T364] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 86.960806][ T364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.972751][ T364] usb 4-1: config 0 descriptor?? [ 87.595608][ T2184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 87.651367][ T2187] netlink: 68 bytes leftover after parsing attributes in process `syz.1.522'. [ 87.939700][ T429] usb 5-1: USB disconnect, device number 12 [ 87.951131][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 88.059276][ T2193] ================================================================== [ 88.067404][ T2193] BUG: KASAN: use-after-free in kobject_get+0x113/0x120 [ 88.074576][ T2193] Read of size 1 at addr ffff88811650f03c by task syz.4.524/2193 [ 88.082295][ T2193] [ 88.084637][ T2193] CPU: 0 PID: 2193 Comm: syz.4.524 Not tainted syzkaller #0 [ 88.092027][ T2193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.102294][ T2193] Call Trace: [ 88.105933][ T2193] __dump_stack+0x21/0x24 [ 88.110673][ T2193] dump_stack_lvl+0x1a7/0x208 [ 88.115368][ T2193] ? show_regs_print_info+0x18/0x18 [ 88.120583][ T2193] ? thaw_kernel_threads+0x220/0x220 [ 88.126026][ T2193] print_address_description+0x7f/0x2c0 [ 88.131583][ T2193] ? kobject_get+0x113/0x120 [ 88.136176][ T2193] kasan_report+0x100/0x140 [ 88.140684][ T2193] ? kobject_get+0x113/0x120 [ 88.145295][ T2193] __asan_report_load1_noabort+0x14/0x20 [ 88.150966][ T2193] kobject_get+0x113/0x120 [ 88.155394][ T2193] device_add+0x331/0xc00 [ 88.159900][ T2193] ? kobject_set_name_vargs+0xca/0x110 [ 88.165438][ T2193] device_create+0x26c/0x300 [ 88.170197][ T2193] ? root_device_unregister+0x80/0x80 [ 88.175917][ T2193] create_function_device+0x60/0x70 [ 88.181260][ T2193] f_midi_alloc_inst+0x1a8/0x380 [ 88.186216][ T2193] usb_get_function_instance+0xe2/0x2f0 [ 88.191846][ T2193] function_make+0x118/0x350 [ 88.196522][ T2193] ? sysvec_call_function_single+0xc8/0xd0 [ 88.202357][ T2193] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 88.208714][ T2193] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 88.215140][ T2193] configfs_mkdir+0x5d2/0xd90 [ 88.219827][ T2193] ? show_sid+0x1b0/0x1b0 [ 88.224166][ T2193] ? configfs_lookup+0x500/0x500 [ 88.229146][ T2193] ? sysvec_call_function_single+0xc8/0xd0 [ 88.235092][ T2193] ? security_inode_mkdir+0xbd/0x110 [ 88.240384][ T2193] vfs_mkdir+0x42c/0x600 [ 88.244631][ T2193] do_mkdirat+0x14c/0x340 [ 88.248971][ T2193] __x64_sys_mkdirat+0x7b/0x90 [ 88.253739][ T2193] do_syscall_64+0x31/0x40 [ 88.258169][ T2193] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.264112][ T2193] RIP: 0033:0x7f6fea4fe0d9 [ 88.268550][ T2193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.288173][ T2193] RSP: 002b:00007f6fe8f57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 88.296716][ T2193] RAX: ffffffffffffffda RBX: 00007f6fea785fa0 RCX: 00007f6fea4fe0d9 [ 88.304701][ T2193] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 88.312687][ T2193] RBP: 00007f6fea595024 R08: 0000000000000000 R09: 0000000000000000 [ 88.320675][ T2193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.328882][ T2193] R13: 00007f6fea786038 R14: 00007f6fea785fa0 R15: 00007ffde6592598 [ 88.336975][ T2193] [ 88.339346][ T2193] Allocated by task 1660: [ 88.343690][ T2193] __kasan_kmalloc+0xd4/0x100 [ 88.348383][ T2193] kmem_cache_alloc_trace+0x179/0x2e0 [ 88.353775][ T2193] device_create+0x13a/0x300 [ 88.358476][ T2193] gadgets_make+0x816/0xa70 [ 88.363003][ T2193] configfs_mkdir+0x5d2/0xd90 [ 88.367694][ T2193] vfs_mkdir+0x42c/0x600 [ 88.371949][ T2193] do_mkdirat+0x14c/0x340 [ 88.376291][ T2193] __x64_sys_mkdirat+0x7b/0x90 [ 88.381074][ T2193] do_syscall_64+0x31/0x40 [ 88.385713][ T2193] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.391610][ T2193] [ 88.393949][ T2193] Freed by task 1660: [ 88.397941][ T2193] kasan_set_track+0x4a/0x70 [ 88.402542][ T2193] kasan_set_free_info+0x23/0x40 [ 88.407511][ T2193] ____kasan_slab_free+0x125/0x160 [ 88.412634][ T2193] __kasan_slab_free+0x11/0x20 [ 88.417514][ T2193] slab_free_freelist_hook+0xc5/0x190 [ 88.422918][ T2193] kfree+0xc0/0x270 [ 88.426744][ T2193] device_create_release+0x15/0x20 [ 88.431870][ T2193] device_release+0x96/0x1c0 [ 88.436474][ T2193] kobject_put+0x18a/0x270 [ 88.440902][ T2193] device_destroy+0xb4/0xf0 [ 88.445422][ T2193] gadgets_drop+0xa0/0xd0 [ 88.449766][ T2193] configfs_rmdir+0x871/0x960 [ 88.454482][ T2193] vfs_rmdir+0x1ab/0x3c0 [ 88.458744][ T2193] do_rmdir+0x232/0x630 [ 88.462998][ T2193] __x64_sys_rmdir+0x49/0x50 [ 88.467697][ T2193] do_syscall_64+0x31/0x40 [ 88.472122][ T2193] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.478017][ T2193] [ 88.480353][ T2193] The buggy address belongs to the object at ffff88811650f000 [ 88.480353][ T2193] which belongs to the cache kmalloc-1k of size 1024 [ 88.494416][ T2193] The buggy address is located 60 bytes inside of [ 88.494416][ T2193] 1024-byte region [ffff88811650f000, ffff88811650f400) [ 88.507693][ T2193] The buggy address belongs to the page: [ 88.513346][ T2193] page:ffffea0004594200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116508 [ 88.523608][ T2193] head:ffffea0004594200 order:3 compound_mapcount:0 compound_pincount:0 [ 88.531937][ T2193] flags: 0x4000000000010200(slab|head) [ 88.537438][ T2193] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100042f00 [ 88.546031][ T2193] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 88.554642][ T2193] page dumped because: kasan: bad access detected [ 88.561085][ T2193] page_owner tracks the page as allocated [ 88.566821][ T2193] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 101, ts 5869059311, free_ts 0 [ 88.584884][ T2193] prep_new_page+0x176/0x190 [ 88.589480][ T2193] get_page_from_freelist+0x225f/0x23f0 [ 88.595033][ T2193] __alloc_pages_nodemask+0x29a/0x640 [ 88.600431][ T2193] new_slab+0x84/0x3f0 [ 88.604504][ T2193] ___slab_alloc+0x2f8/0x4c0 [ 88.609099][ T2193] __slab_alloc+0x63/0xa0 [ 88.613438][ T2193] __kmalloc_track_caller+0x1e4/0x310 [ 88.618928][ T2193] __alloc_skb+0xdc/0x520 [ 88.623267][ T2193] netlink_sendmsg+0x693/0xb70 [ 88.628042][ T2193] ____sys_sendmsg+0x5be/0x8f0 [ 88.632812][ T2193] ___sys_sendmsg+0x236/0x2e0 [ 88.637520][ T2193] __x64_sys_sendmsg+0x201/0x2d0 [ 88.642466][ T2193] do_syscall_64+0x31/0x40 [ 88.646917][ T2193] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.652807][ T2193] page_owner free stack trace missing [ 88.658188][ T2193] [ 88.660537][ T2193] Memory state around the buggy address: [ 88.666178][ T2193] ffff88811650ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.674253][ T2193] ffff88811650ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.682320][ T2193] >ffff88811650f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.690384][ T2193] ^ [ 88.696309][ T2193] ffff88811650f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.704382][ T2193] ffff88811650f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.712449][ T2193] ================================================================== [ 88.720532][ T2193] Disabling lock debugging due to kernel taint [ 88.732628][ T2193] ------------[ cut here ]------------ [ 88.738312][ T2193] refcount_t: addition on 0; use-after-free. [ 88.745959][ T2193] WARNING: CPU: 1 PID: 2193 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 88.755884][ T2193] Modules linked in: [ 88.756165][ T24] audit: type=1400 audit(1786255711.470:532): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 88.760031][ T2193] CPU: 1 PID: 2193 Comm: syz.4.524 Tainted: G B syzkaller #0 [ 88.792287][ T2193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.802576][ T2193] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 88.808830][ T2193] Code: 04 01 48 c7 c7 20 4c 40 85 e8 38 ee 3a 02 0f 0b eb df e8 8f a8 26 ff c6 05 4c 94 82 04 01 48 c7 c7 60 4b 40 85 e8 1c ee 3a 02 <0f> 0b eb c3 e8 73 a8 26 ff c6 05 31 94 82 04 01 48 c7 c7 c0 4b 40 [ 88.820295][ T24] audit: type=1400 audit(1786255711.490:533): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.828662][ T2193] RSP: 0018:ffffc900020d7950 EFLAGS: 00010246 [ 88.851764][ T24] audit: type=1400 audit(1786255711.490:534): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.857938][ T2193] [ 88.880341][ T24] audit: type=1400 audit(1786255711.490:535): avc: denied { add_name } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.903826][ T24] audit: type=1400 audit(1786255711.490:536): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.904850][ T2193] RAX: f4aa49b0441e4b00 RBX: 0000000000000002 RCX: 0000000000080000 [ 88.924808][ T24] audit: type=1400 audit(1786255711.490:537): avc: denied { append open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.936445][ T2193] RDX: ffffc900034d3000 RSI: 00000000000601ad RDI: 00000000000601ae [ 88.955736][ T24] audit: type=1400 audit(1786255711.490:538): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.963922][ T2193] RBP: ffffc900020d7960 R08: ffffc900020d72e7 R09: fffff5200041ae90 [ 88.993902][ T2193] R10: dffffc0000000000 R11: fffff5200041ae5d R12: 0000000000000000 [ 89.004214][ T2193] R13: ffff888111e3c068 R14: 0000000000000002 R15: 0000000000000000 [ 89.012378][ T2193] FS: 00007f6fe8f576c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 89.021481][ T2193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.028306][ T2193] CR2: 00007efe7bf13fe0 CR3: 0000000111ef7000 CR4: 00000000003506b0 [ 89.036554][ T2193] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.044774][ T2193] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.052869][ T2193] Call Trace: [ 89.056343][ T2193] kobject_get+0xfb/0x120 [ 89.060764][ T2193] device_add+0x331/0xc00 [ 89.065204][ T2193] ? kobject_set_name_vargs+0xca/0x110 [ 89.070841][ T2193] device_create+0x26c/0x300 [ 89.075595][ T2193] ? root_device_unregister+0x80/0x80 [ 89.081085][ T2193] create_function_device+0x60/0x70 [ 89.086720][ T2193] f_midi_alloc_inst+0x1a8/0x380 [ 89.091790][ T2193] usb_get_function_instance+0xe2/0x2f0 [ 89.097576][ T2193] function_make+0x118/0x350 [ 89.102464][ T2193] ? sysvec_call_function_single+0xc8/0xd0 [ 89.108409][ T2193] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 89.114842][ T2193] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 89.121321][ T2193] configfs_mkdir+0x5d2/0xd90 [ 89.126272][ T2193] ? show_sid+0x1b0/0x1b0 [ 89.130697][ T2193] ? configfs_lookup+0x500/0x500 [ 89.135747][ T2193] ? sysvec_call_function_single+0xc8/0xd0 [ 89.141698][ T2193] ? security_inode_mkdir+0xbd/0x110 [ 89.147107][ T2193] vfs_mkdir+0x42c/0x600 [ 89.151926][ T2193] do_mkdirat+0x14c/0x340 [ 89.156524][ T2193] __x64_sys_mkdirat+0x7b/0x90 [ 89.161563][ T2193] do_syscall_64+0x31/0x40 [ 89.166325][ T2193] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.173239][ T2193] RIP: 0033:0x7f6fea4fe0d9 [ 89.178249][ T2193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.198373][ T2193] RSP: 002b:00007f6fe8f57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 89.207238][ T2193] RAX: ffffffffffffffda RBX: 00007f6fea785fa0 RCX: 00007f6fea4fe0d9 [ 89.215659][ T2193] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 89.223810][ T2193] RBP: 00007f6fea595024 R08: 0000000000000000 R09: 0000000000000000 [ 89.231977][ T2193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.240156][ T2193] R13: 00007f6fea786038 R14: 00007f6fea785fa0 R15: 00007ffde6592598 [ 89.248319][ T2193] ---[ end trace f53b510f4ebd13f0 ]--- [ 89.254035][ T2193] ------------[ cut here ]------------ [ 89.259732][ T2193] refcount_t: saturated; leaking memory. [ 89.265883][ T2193] WARNING: CPU: 0 PID: 2193 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 89.275590][ T2193] Modules linked in: [ 89.279638][ T2193] CPU: 0 PID: 2193 Comm: syz.4.524 Tainted: G B W syzkaller #0 [ 89.288629][ T2193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.299065][ T2193] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 89.305412][ T2193] Code: 04 01 48 c7 c7 e0 4a 40 85 e8 e4 ed 3a 02 0f 0b eb 8b e8 3b a8 26 ff c6 05 f7 93 82 04 01 48 c7 c7 e0 4a 40 85 e8 c8 ed 3a 02 <0f> 0b e9 6c ff ff ff e8 1c a8 26 ff c6 05 dc 93 82 04 01 48 c7 c7 [ 89.317541][ T364] usb 4-1: USB disconnect, device number 20 [ 89.325424][ T2193] RSP: 0018:ffffc900020d7818 EFLAGS: 00010246 [ 89.337499][ T2193] RAX: f4aa49b0441e4b00 RBX: 0000000000000001 RCX: 0000000000080000 [ 89.345642][ T2193] RDX: ffffc900034d3000 RSI: 000000000007ffff RDI: 0000000000080000 [ 89.354032][ T2193] RBP: ffffc900020d7828 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 89.368508][ T2193] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: 00000000c0000000 [ 89.376765][ T2193] R13: ffff888111e3c018 R14: 0000000000000001 R15: ffff88811650f038 [ 89.385019][ T2193] FS: 00007f6fe8f576c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 89.394197][ T2193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.401241][ T2193] CR2: 00007efe7db722f8 CR3: 0000000111ef7000 CR4: 00000000003506a0 [ 89.409350][ T2193] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.417565][ T2193] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.425741][ T2193] Call Trace: [ 89.429316][ T2193] kobject_add_internal+0xc44/0xde0 [ 89.434684][ T2193] ? kobject_set_name_vargs+0x4c/0x110 [ 89.440300][ T2193] kobject_add+0x165/0x230 [ 89.444923][ T2193] ? kobject_init+0x1d0/0x1d0 [ 89.449736][ T2193] ? get_device_parent+0x12e/0x410 [ 89.455007][ T2193] ? get_device_parent+0x3f0/0x410 [ 89.460256][ T2193] device_add+0x3d8/0xc00 [ 89.464780][ T2193] ? kobject_set_name_vargs+0xca/0x110 [ 89.470361][ T2193] device_create+0x26c/0x300 [ 89.475154][ T2193] ? root_device_unregister+0x80/0x80 [ 89.480653][ T2193] create_function_device+0x60/0x70 [ 89.486153][ T2193] f_midi_alloc_inst+0x1a8/0x380 [ 89.491253][ T2193] usb_get_function_instance+0xe2/0x2f0 [ 89.496992][ T2193] function_make+0x118/0x350 [ 89.501777][ T2193] ? sysvec_call_function_single+0xc8/0xd0 [ 89.507727][ T2193] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 89.514247][ T2193] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 89.520724][ T2193] configfs_mkdir+0x5d2/0xd90 [ 89.525580][ T2193] ? show_sid+0x1b0/0x1b0 [ 89.530047][ T2193] ? configfs_lookup+0x500/0x500 [ 89.535177][ T2193] ? sysvec_call_function_single+0xc8/0xd0 [ 89.541163][ T2193] ? security_inode_mkdir+0xbd/0x110 [ 89.546589][ T2193] vfs_mkdir+0x42c/0x600 [ 89.550993][ T2193] do_mkdirat+0x14c/0x340 [ 89.555551][ T2193] __x64_sys_mkdirat+0x7b/0x90 [ 89.560522][ T2193] do_syscall_64+0x31/0x40 [ 89.565159][ T2193] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.571469][ T2193] RIP: 0033:0x7f6fea4fe0d9 [ 89.576039][ T2193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.596042][ T2193] RSP: 002b:00007f6fe8f57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 89.604928][ T2193] RAX: ffffffffffffffda RBX: 00007f6fea785fa0 RCX: 00007f6fea4fe0d9 [ 89.613255][ T2193] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 89.621532][ T2193] RBP: 00007f6fea595024 R08: 0000000000000000 R09: 0000000000000000 [ 89.633146][ T2193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.641984][ T2193] R13: 00007f6fea786038 R14: 00007f6fea785fa0 R15: 00007ffde6592598 [ 89.650110][ T2193] ---[ end trace f53b510f4ebd13f1 ]--- [ 89.657398][ T2193] ------------[ cut here ]------------ [ 89.663002][ T2193] refcount_t: underflow; use-after-free. [ 89.668949][ T2193] WARNING: CPU: 1 PID: 2193 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 89.678629][ T2193] Modules linked in: [ 89.682813][ T2193] CPU: 1 PID: 2193 Comm: syz.4.524 Tainted: G B W syzkaller #0 [ 89.691543][ T2193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.701677][ T2193] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 89.707838][ T2193] Code: 04 01 48 c7 c7 60 4b 40 85 e8 1c ee 3a 02 0f 0b eb c3 e8 73 a8 26 ff c6 05 31 94 82 04 01 48 c7 c7 c0 4b 40 85 e8 00 ee 3a 02 <0f> 0b eb a7 e8 57 a8 26 ff c6 05 12 94 82 04 01 48 c7 c7 e0 4a 40 [ 89.727607][ T2193] RSP: 0018:ffffc900020d77e0 EFLAGS: 00010246 [ 89.734210][ T2193] RAX: f4aa49b0441e4b00 RBX: 0000000000000003 RCX: 0000000000080000 [ 89.742550][ T2193] RDX: ffffc900034d3000 RSI: 000000000007ffff RDI: 0000000000080000 [ 89.750648][ T2193] RBP: ffffc900020d77f0 R08: ffff8881f7152fbf R09: 1ffff1103ee2a5f7 [ 89.759260][ T2193] R10: dffffc0000000000 R11: ffffed103ee2a5f8 R12: 00000000c0000000 [ 89.767538][ T2193] R13: ffff88811650f03c R14: 0000000000000003 R15: ffff88811650f038 [ 89.775968][ T2193] FS: 00007f6fe8f576c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 89.785452][ T2193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.792534][ T2193] CR2: 00007efe7baf0fe0 CR3: 0000000111ef7000 CR4: 00000000003506b0 [ 89.800771][ T2193] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.809369][ T2193] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.817658][ T2193] Call Trace: [ 89.821079][ T2193] kobject_put+0x231/0x270 [ 89.825834][ T2193] kobject_add_internal+0xb52/0xde0 [ 89.831300][ T2193] kobject_add+0x165/0x230 [ 89.835817][ T2193] ? kobject_init+0x1d0/0x1d0 [ 89.840577][ T2193] ? get_device_parent+0x12e/0x410 [ 89.846048][ T2193] ? get_device_parent+0x3f0/0x410 [ 89.851453][ T2193] device_add+0x3d8/0xc00 [ 89.857215][ T2193] ? kobject_set_name_vargs+0xca/0x110 [ 89.863188][ T2193] device_create+0x26c/0x300 [ 89.867835][ T2193] ? root_device_unregister+0x80/0x80 [ 89.873289][ T2193] create_function_device+0x60/0x70 [ 89.878504][ T2193] f_midi_alloc_inst+0x1a8/0x380 [ 89.883525][ T2193] usb_get_function_instance+0xe2/0x2f0 [ 89.890581][ T2193] function_make+0x118/0x350 [ 89.895420][ T2193] ? sysvec_call_function_single+0xc8/0xd0 [ 89.901325][ T2193] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 89.907689][ T2193] ? gadget_dev_desc_max_speed_store+0x240/0x240 [ 89.914094][ T2193] configfs_mkdir+0x5d2/0xd90 [ 89.918797][ T2193] ? show_sid+0x1b0/0x1b0 [ 89.923188][ T2193] ? configfs_lookup+0x500/0x500 [ 89.928163][ T2193] ? sysvec_call_function_single+0xc8/0xd0 [ 89.934110][ T2193] ? security_inode_mkdir+0xbd/0x110 [ 89.939526][ T2193] vfs_mkdir+0x42c/0x600 [ 89.943840][ T2193] do_mkdirat+0x14c/0x340 [ 89.948281][ T2193] __x64_sys_mkdirat+0x7b/0x90 [ 89.953093][ T2193] do_syscall_64+0x31/0x40 [ 89.957544][ T2193] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.963617][ T2193] RIP: 0033:0x7f6fea4fe0d9 [ 89.968145][ T2193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.988021][ T2193] RSP: 002b:00007f6fe8f57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 89.996564][ T2193] RAX: ffffffffffffffda RBX: 00007f6fea785fa0 RCX: 00007f6fea4fe0d9 [ 90.004626][ T2193] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 90.012661][ T2193] RBP: 00007f6fea595024 R08: 0000000000000000 R09: 0000000000000000 [ 90.020653][ T2193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.028703][ T2193] R13: 00007f6fea786038 R14: 00007f6fea785fa0 R15: 00007ffde6592598 [ 90.036705][ T2193] ---[ end trace f53b510f4ebd13f2 ]--- [ 90.042218][ T2193] kobject_add_internal failed for f_midi (error: -2 parent: |)