last executing test programs: 6m2.799459019s ago: executing program 0 (id=25): mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x806002, 0x0) (rerun: 64) mkdir(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/rndis.usb0/ifname\x00', 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r2) (async) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$tun(r1, &(0x7f0000000280)={@void, @val={0x3, 0x3, 0x8, 0x3, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x24, 0x65, 0x0, 0x9, 0x84, 0x0, @private=0xa010101, @local}, "c7050804000000000200000001001504"}}, 0x2e) (async) write(r0, &(0x7f0000000d00)='syz', 0x3) 6m2.561563959s ago: executing program 0 (id=26): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0x4, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x7fff, 0x7, 0xfffbffff, 0x101ff, 0x7, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x5, 0xffffffff, 0xfffffffa, 0x4, 0x6, 0xa2d8, 0x0, 0x1000, 0x8, 0x471, 0x7, 0x384, 0x8001, 0x4]}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000140)={0x4, 0x2e41f8ee65c92bdc, r1}) fsmount(r2, 0x1, 0xf0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000000c0)) getpid() (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r2, r6}, 0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000bd70000491176935e3e02384000fddb514519bff3200f8fecae2b70000000000000000", @ANYRES32=r1, @ANYBLOB="080001800400108008000200", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) syz_open_dev$mtd(&(0x7f0000000340), 0x1, 0x8c100) (async) r7 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r8, 0x7c80, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x23, 0x6, "c0bfebe7b19e337fbc79c4fa698ced17c8d6884eb5c4766f5d1d69552d40f4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 6m2.256011411s ago: executing program 0 (id=28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000100000081"]) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xfffffffffffffd05, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095", @ANYBLOB="1800000000000000050000000000000018110000", @ANYRES32=r4, @ANYRESHEX=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r3}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001c00)=ANY=[], 0x0) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000740)={0x7, &(0x7f00000005c0)=[{0x43f4, 0xff, 0x4, 0x6}, {0x6, 0x12, 0x22, 0x2}, {0x5, 0x4, 0x8, 0x1}, {0x1, 0x6a, 0x1, 0x7fffffff}, {0x7fff, 0x3, 0xc7, 0x6}, {0x9, 0xbc, 0x7, 0xffffffff}, {0x1, 0x1, 0xfb, 0xffe4}]}) (rerun: 32) socket$unix(0x1, 0x1, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x8008f}], 0x1, 0xe7b, 0x0, 0x41) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000480)=@ax25={{0x3, @netrom}, [@null, @null, @default, @netrom, @rose, @null, @bcast, @netrom]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000500)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/112, 0x70}], 0x2, &(0x7f0000000800)=""/138, 0x8a}, 0xa}, {{&(0x7f0000000bc0)=@un=@abs, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000c40)=""/261, 0x105}, {&(0x7f0000000900)=""/13, 0xd}, {&(0x7f0000000940)=""/38, 0x26}, {&(0x7f0000000980)=""/12, 0xc}], 0x4, &(0x7f0000000a00)=""/238, 0xee}, 0x9}], 0x3, 0x1, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r7, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffffff14}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xff}}]}, 0x2c}}, 0x4000) (async) socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="245b9fcc85020900000000000000000000001a1ec7efe8fa7bc512d1df61a480ccdd4aca585b082a55ee8369449f11bc42bd767e36efac952077b529e06b3383a3", @ANYRES32=r10, @ANYBLOB="003000000000000004001a80"], 0x24}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x80200, 0x1) (async) r11 = syz_io_uring_setup(0x744e, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x8, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, 0x0, 0x0, 0x3, 0x1}) io_uring_enter(r11, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0x78bc0, 0xc7) 6m2.015723131s ago: executing program 0 (id=30): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) ioctl$SG_BLKSECTGET(r0, 0x1267, 0x0) 6m1.912746956s ago: executing program 0 (id=31): ustat(0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000010c0)=[@in={0x2, 0x4e20, @multicast2}], 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendto(r3, &(0x7f0000000040)="283becc05ae4a1552d75857c80a33fbf7a3454d204862e21858bc5d3b70c8b262b0cd0f2ecf2e07a3d4770dac0303320e0560f00a2ab9f865e78b5b82ec5cd6146ac4ccb5c51a8626d", 0x49, 0x4c000, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x45, 0x3, "2add46afae8fd6d8d844a21501f54edbf5e9e5d2d31c103727afc9882a247bf024f5cd87da551e0f241097f28f02a6ad806bed44a469bf96ffcf45dfc51650", 0x4}, 0x80) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000014c0)=[{&(0x7f00000003c0)="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", 0x21b}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) recvmmsg(r5, &(0x7f000000cf00), 0x400000000000062, 0x2, 0x0) ustat(0x2, 0x0) (async) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) getpid() (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000010c0)=[@in={0x2, 0x4e20, @multicast2}], 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) sendto(r3, &(0x7f0000000040)="283becc05ae4a1552d75857c80a33fbf7a3454d204862e21858bc5d3b70c8b262b0cd0f2ecf2e07a3d4770dac0303320e0560f00a2ab9f865e78b5b82ec5cd6146ac4ccb5c51a8626d", 0x49, 0x4c000, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x45, 0x3, "2add46afae8fd6d8d844a21501f54edbf5e9e5d2d31c103727afc9882a247bf024f5cd87da551e0f241097f28f02a6ad806bed44a469bf96ffcf45dfc51650", 0x4}, 0x80) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) dup(r4) (async) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000014c0)=[{&(0x7f00000003c0)="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", 0x21b}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) (async) recvmmsg(r5, &(0x7f000000cf00), 0x400000000000062, 0x2, 0x0) (async) 6m1.40079526s ago: executing program 0 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040084) syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@private0}}}, &(0x7f00000004c0)=0xe8) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x488}}, {@rq={'rq', 0x3d, 0x6}}]}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 5m46.145884298s ago: executing program 32 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040084) syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@mcast2, @in=@initdev}}, {{@in6=@private0}}}, &(0x7f00000004c0)=0xe8) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x488}}, {@rq={'rq', 0x3d, 0x6}}]}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 17.839005049s ago: executing program 1 (id=907): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x1, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x40000102}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) (fail_nth: 2) 17.634335444s ago: executing program 1 (id=908): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, &(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async, rerun: 32) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) (async, rerun: 64) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) (rerun: 64) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3939f580}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) r3 = socket(0x2b, 0x1, 0x1) r4 = syz_io_uring_setup(0x1681, &(0x7f0000000480)={0x0, 0x9649, 0x40, 0x1, 0x1fc}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) (async, rerun: 64) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fddbdf250d00000008003100ffffff7f05002e000200000008003407000000000500330000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008082}, 0x4000000) (rerun: 64) io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, &(0x7f0000001e80)={0x0, 0x1}, 0x1) (async, rerun: 64) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) (async, rerun: 64) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) (async, rerun: 32) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) (async, rerun: 32) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) (async, rerun: 64) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0x8, 0x4, 0x8, 0x0, 0xfffffffffffffffc, 0x143, 0x33d1}) (async, rerun: 64) pselect6(0x40, &(0x7f0000000240)={0x9, 0x2000000000000, 0x5, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x41, 0x107, 0x70bd30, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x2d}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @uid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44090}, 0x20040050) 17.075857399s ago: executing program 1 (id=910): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c"], 0x28}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0xd, 0x4}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000580)={0xdd8, 0x453, 0x1, 0x70bd29, 0x25dfdbff, "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", [""]}, 0xdd8}, 0x1, 0x0, 0x0, 0x200400c0}, 0x24008850) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x7d, 0x0, 0x7ffe, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000030c0)=ANY=[@ANYBLOB="12015002000000208205820540000102030109026e00030101c0ec080b01000125300c0904000000010130000a24010b0a00fd0900000904010000010230000904010101010230000905010900040402000a25250020000008070009040200000102300009040201800102300009058209080081f5ff0a2525feffffff02ff01ef297a4f41dcc0d8fcfaa0df161848d88228b1083f94e1566ebbcfbbcf540758b44efa7f7c579c7281a105f8a0761e8b8cb975df0e3e325d94f16ccb7cceff672a7469c168f9b488730e97484a82f993bf68ed6aa607f51e9455fb334e2aa27d165cbd618512fcff115b8da80af8ecbfd5b001b65da219789557d7874240f7dcf30031a3965507ee3b0cc5cd006c5add78e3254994cc72829bd83c224bdc94cc4505524136e4840f2344fe95"], &(0x7f0000000600)={0x0, 0x0, 0x12c, 0x0, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x421}}, {0x22, &(0x7f0000000380)=ANY=[@ANYBLOB="2203a25ed51773a362bf2937e20ae500a9f666b427b93bcc9c95c63f598cd220cc00"]}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xc, 0x7fffffff}]}) close(0x4) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 16.420227346s ago: executing program 3 (id=912): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010c00000000000000000200000a64000000060a010400000000000000000a0020050900010073797a3100000000380004803400018009000100686173680000000024000280080002400000000c0800024000000013080007401f00000108100440000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0xc892}, 0x24000000) socketpair(0xa, 0x80000, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@delsa={0x34, 0x11, 0x1, 0x60bd2c, 0x25dfdbfe, {@in=@remote, 0x4d4, 0x2, 0xff}, [@mark={0xc, 0x15, {0x35075d, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000180)={&(0x7f0000000140), 0x0, 0x20, 0x1000, 0x7fff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) unshare(0x2c020400) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000480), 0x101200, 0x0) r10 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000001c0)={0x0}) syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r10, 0xc03064ca, &(0x7f0000000340)={&(0x7f0000000200)=[r11], &(0x7f0000000300)=[0xfff], 0x2, 0x1, 0x2}) ioctl$mixer_OSS_ALSAEMULVER(r9, 0x80044df9, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r12], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r13, &(0x7f0000000180)}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a40)={'vlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r14], 0x48}}, 0x200408c1) 13.391728167s ago: executing program 5 (id=914): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, 0x0}], 0x1, 0x7e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c5c4e185f80066bad004edc7442402f8ff0000c7442406000000000f011c24", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000180)=0x9) r5 = dup3(r4, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000580)={'gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x4, 0x40, {{0x23, 0x4, 0x1, 0x27, 0x8c, 0x66, 0x0, 0xfe, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@end, @rr={0x7, 0x7, 0x30, [@private=0xa010102]}, @cipso={0x86, 0x20, 0x3, [{0x1, 0x4, "9638"}, {0x5, 0x9, "4d844fa382bd81"}, {0x0, 0xd, "c49a288b48e9918aff20c0"}]}, @timestamp_prespec={0x44, 0x44, 0xfc, 0x3, 0x8, [{@multicast1, 0x8}, {@rand_addr=0x64010101, 0x30}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6000000}, {@broadcast, 0x3}, {@loopback, 0x80}, {@remote, 0xffffffff}, {@empty, 0x6}, {@empty, 0x2}]}, @timestamp_addr={0x44, 0xc, 0xdc, 0x1, 0xe, [{@multicast1, 0x6}]}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x20000000, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.136433038s ago: executing program 2 (id=915): mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05080000000000000000070000060900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021900000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000640003806000008004000180580007800b000100746172676574000048000280080002400000000230000300b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb64bff7360e7749fe5bee3900900010053"], 0x114}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r4 = fcntl$getown(r1, 0x9) r5 = syz_open_procfs(r4, &(0x7f0000000080)='net/llc/socket\x00') io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r2, 0x0}]) modify_ldt$write2(0x11, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_team\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r9, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a2, 0x4, 0x4, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd70eafcdbdf25090000003c000680060005004e24000008000700", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r9, @ANYBLOB="050002000700000008000700", @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r10, @ANYBLOB="0800060000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000050}, 0x884) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001014010029bd7000fe0b00"/24], 0x18}, 0x1, 0x0, 0x0, 0x50}, 0xc0) 13.025899953s ago: executing program 3 (id=916): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x88840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200000000000000000000000000240003000000000000000000020000000000000000000000000000000000000000000000980008809400008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a00010000006400098028000080060001000a00000014000200fe88000000000000000000000000010105000300030000001c000080060001000200000008000200ffffffff05000300010000001c000080060001000200000008000200ffffffff0500030003000000"], 0xe4}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 11.834150045s ago: executing program 1 (id=917): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$sock_timeval(r1, 0x1, 0xd38260d0de9cc032, &(0x7f0000000280)={0x77359400}, 0x10) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) semget(0x0, 0x2, 0xba) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x8000000e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$AUTOFS_IOC_READY(r3, 0x80047458, 0xfcffffffffff0f00) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) clock_gettime(0x1, &(0x7f0000000000)) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500218ca36081e041d4073b20102d24286e942bc030109021200010506300509047481008fb7840f"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 11.80165658s ago: executing program 5 (id=919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) socket(0x2d, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), 0x0, &(0x7f0000000140)=0x0) syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x334}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r2, 0x0, &(0x7f0000000300)) ioprio_get$pid(0x3, 0x0) 11.695218144s ago: executing program 2 (id=920): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r2, &(0x7f0000001a00)=[{&(0x7f0000000040)="b7967dfd021f5f", 0x7}, {&(0x7f0000000140)="8d6d5d18", 0x4}], 0x2) write$vga_arbiter(r0, &(0x7f0000002200)=@other={'decodes', ' ', 'io'}, 0xb) r3 = syz_open_dev$mtd(&(0x7f0000000380), 0x44c, 0x100) ioctl$MEMWRITEOOB(r3, 0xc0104d03, &(0x7f00000006c0)={0x5, 0xd3, &(0x7f00000005c0)="2f603bfc69092c64caf4185df30a7cfbd3be4092a625e57bdc2df066c50032b0b905e8339bba6352a5d54ddfecf78c33168b38ce450932b00ff9f55ce375e50f6c220f121d3c5ae98184ffe362389e9933ec43d80f178b529deac8e3ca8a7c164556bf4e3aec1060993578960c32874f9dfec43b256d2e949140013af723fae8acba5f5fd4fd2125a68202ba4f02abd6d3a7912e5a90360a469fce7e337ae5712ca6c5839807aa4b5593ff8e24de9d98516aa208fe030ad0b1220d902c407fa0898b4da0268078422fc6c65689dee85dab22a8"}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r4, 0x4147, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x1f}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) (async) syz_usb_connect(0x6, 0x2f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xe4, 0x39, 0xdb, 0x8, 0x499, 0x2001, 0xab93, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x2, 0x4, 0xa0, 0x1, "", [{{0x9, 0x4, 0x93, 0x3, 0x1, 0x61, 0xf, 0x16, 0x21, [@cdc_ncm={{0x0, 0x24, 0x6, 0x0, 0x1, "f9e5caea6085"}, {}, {0x0, 0x24, 0xf, 0x1, 0x401, 0x4, 0x9581}, {0x0, 0x24, 0x1a, 0x2, 0x2a}, [@mdlm_detail={0x0, 0x24, 0x13, 0x0, "6ef243572e65b6f26db318feda0677db4b495e2de110b5110be03ee37c3fab0ace14d8efa1a691e1a244266486fdb90abf0fde2c83d93fd88fb4ea063517e0beb25580a2aa89d6c2b4f100ead3c82a4dd27ffa2e9ae5e62cef19bd9013d176d5feea65d67897164d75a71430086e8233ea52672d31caf36343c0d0994f55"}, @dmm={0x0, 0x24, 0x14, 0x9, 0xe8}, @dmm={0x0, 0x24, 0x14, 0x8, 0x10}, @mdlm={0x0, 0x24, 0x12, 0xf001}, @acm={0x0, 0x24, 0x2, 0xd}, @country_functional={0x0, 0x24, 0x7, 0xd, 0x1, [0x6, 0x7a3f, 0x5, 0x6, 0x5]}]}, @cdc_ncm={{0x0, 0x24, 0x6, 0x0, 0x1, "390ddb"}, {0x0, 0x24, 0x0, 0x100}, {0x0, 0x24, 0xf, 0x1, 0x5c, 0x8e55, 0x1f, 0x3}, {0x0, 0x24, 0x1a, 0x200, 0x15}, [@mdlm_detail={0x0, 0x24, 0x13, 0xda, "478766b2d3f85cb4ef0ded5aae347b222e7e07d05be4d4b3a31a6ce3c7af7a0a6f2d35cc8d978b739bae7bc1d8f7995e06f81501725922dbc5"}, @mdlm={0x0, 0x24, 0x12, 0x3786}, @mbim={0x0, 0x24, 0x1b, 0x8, 0x1, 0x3, 0x7, 0x40, 0x6}, @mdlm={0x0, 0x24, 0x12, 0x2}]}], [{{0x9, 0x5, 0x80, 0x15, 0x8, 0x0, 0x7, 0x7, [@generic={0x0, 0x5, "67b603b3c7cfb69d0890f30f84727146fd2938d0c3424aa90ecf0add6f8971531aa6182fb453f2105ef4075dc9f6704a5f4f0849b457b2e4e7c3758cc117dbacb0787357e8825f26d3ebca49b0041bd3d83183918fc21e4c41dcdf033b0a0e3111c747625302acb012214f1e815d20875a532010b4bfbd894bea652b41c7e67db396da153473a9a185acd02d46387c6105f59573db8cf74f3ae51120be002a2b233ace8574f1079289e8c724e471e2d0ddfe660c898441e0722404806bc0fbcdad745f2d989acd8a0c813715e3e28b06410266e80566cad59ea0156529e771d23320a235e31e3a353fad3ae42ca14c16415768"}]}}]}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, 0x0, 0x0, [{0x0, &(0x7f0000000480)=@string={0x0, 0x3, "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"}}]}) (async) socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x73, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x1, 0x1, 0x8, 0x40, 0x4e, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x9, 0x24, 0x6, 0x0, 0x0, "837b1209"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x2, 0x35}, [@country_functional={0xe, 0x24, 0x7, 0x5, 0x2, [0x3, 0x7fff, 0x8, 0xfffa]}, @acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x5, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0xf8, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x80, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7b, 0x72, 0x2a}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x9, 0x12, 0x3, 0x8, 0x8b}, 0x5, &(0x7f0000000900)={0x5, 0xf, 0x5}}) 10.330922235s ago: executing program 3 (id=921): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x80, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) recvmmsg(r2, &(0x7f0000000e80)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000740)=""/211, 0xd3}, {0x0}, {&(0x7f0000000440)=""/109, 0x6d}], 0x3, 0x0, 0x0, 0x2000000}}, {{&(0x7f00000009c0), 0x80, 0x0, 0x0, &(0x7f0000000880)=""/24, 0x18}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000006c0)=""/74, 0x4a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000ac0)=""/223, 0xdf}, {&(0x7f0000000bc0)=""/98, 0x62}, {&(0x7f0000000c40)=""/41, 0x29}], 0x5, &(0x7f0000000d00)=""/151, 0x97}, 0x2}], 0x3, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @initdev, @broadcast}, &(0x7f0000000380)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xb, 0x6c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000000000000000000000001801b10020646c2500000000002020207b1af8ff00000000bfa100006595e181424009c50000000007010000f8ffffffb702000008000000b7010000000000008500000006000000850000000700000095000000000000005c2c73682246ed229f0031e0a4680eb2fbfb90c608f5be8ed99cac51edb7e6449be1a64719df35804f991826edc3392c2139f5fdf51c76d34f16c4469b72ab5b472609760c84adb0869309d153c88876eda9317368b62f97eee8691d1d0b42c9a6a961d8"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) 10.115873477s ago: executing program 4 (id=922): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r3 = dup2(r2, r2) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) read$char_usb(r3, &(0x7f00000000c0)=""/192, 0xc0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x38, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8051}, 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000003480)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick=0x8, {0xfd}, {0x3}, @note={0x81, 0x0, 0x0, 0x0, 0xfffffffc}}, {0x6, 0x7, 0x9, 0x3, @tick=0x1, {0xc, 0x5}, {0xba, 0x2}, @connect={{0xf}, {0x6, 0xb}}}, {0xff, 0xa, 0x1, 0x7, @time={0x9, 0xe30}, {0x7, 0xd}, {0x1, 0x2}, @ext={0x0, 0x0}}], 0x70) 9.542008096s ago: executing program 5 (id=923): r0 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x0) get_robust_list(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xfffff247}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200003, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdb71}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r0}, 0x0, 0x51, &(0x7f0000000180)={0x0}) 9.14227686s ago: executing program 5 (id=924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0xc810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f7001020301090212000100000000090401"], 0x0) 8.835611024s ago: executing program 2 (id=925): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001640)=0xe) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/61, 0x3d}], 0x1, &(0x7f00000002c0)=""/55, 0x37}, 0x95}, {{&(0x7f00000004c0)=@un=@abs, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000540)=""/138, 0x8a}, {&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000980)=""/131, 0x83}, {&(0x7f0000000a80)=""/129, 0x81}, {&(0x7f0000000b40)=""/234, 0xea}, {&(0x7f0000000c40)=""/3, 0x3}], 0x6}, 0xffffa232}, {{&(0x7f0000000d00)=@nfc_llcp, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/176, 0xb0}], 0x1, &(0x7f0000000f40)=""/236, 0xec}}], 0x3, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x1, 0xfffffffffffffffd, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x28, 0x2, 0x1030, 0x4, 0x0, 0xfffffffc}}, 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000800)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa0000000000000000000000004e240000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in=@local, 0x4e21, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r7}}, [@migrate={0x50, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, @in=@local, @in=@multicast2, 0x3c, 0x0, 0x0, 0xfffffffc, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in=@loopback, 0x0, 0xa}}]}, 0xcc}}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x105842, 0xa9) writev(r10, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x1}, {0x0}, {&(0x7f0000001000)}], 0x4) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) writev(r0, &(0x7f0000001480), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r11, 0x10000000005, 0x0) 8.802843226s ago: executing program 3 (id=926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10) fcntl$dupfd(r0, 0x0, r0) socket$inet(0x2, 0x5, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x281, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101011a7072205c0a33205d980102030109026f02018081c0870904e6"], 0x0) 8.754792729s ago: executing program 4 (id=927): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x4c831, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3) socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xe, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x20004080) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) getpriority(0x2, r7) ptrace$pokeuser(0x6, r7, 0x388, 0x41d9fda7) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) 8.215930362s ago: executing program 1 (id=928): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c"], 0x28}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000140)={0xd, 0x4}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000580)={0xdd8, 0x453, 0x1, 0x70bd29, 0x25dfdbff, "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", [""]}, 0xdd8}, 0x1, 0x0, 0x0, 0x200400c0}, 0x24008850) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x7d, 0x0, 0x7ffe, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0x0, 0x0, 0x12c, 0x0, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x421}}, {0x22, &(0x7f0000000380)=ANY=[@ANYBLOB="2203a25ed51773a362bf2937e20ae500a9f666b427b93bcc9c95c63f598cd220cc00"]}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xc, 0x7fffffff}]}) close(0x4) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 7.84683762s ago: executing program 2 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xa, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000000010000081100000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a134f5233b701e88159e0bb959df0c63255f9eaf6f2fa366417a4377b0cb3095291ca4c3e36ba27139cf6a2dcd5bd776f665a8a9bd3e73cef1c3d93de8aba5d1cc408c561ef55707cd77710bcd210de41606cf524c7e10636534b2929fa7215ae39309d38a8b947946"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="80004b9776ca5aad4a0ea06c675f48d9"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) lsm_set_self_attr(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="6500000000000000ca0f000001000000200000000000000000dfe90000ff0000"], 0x20, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) 7.741571579s ago: executing program 4 (id=930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, 0x0, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x0, 0x1, 0x2, 0x8, {{0x7, 0x4, 0x1, 0x7, 0x1c, 0x67, 0x0, 0x3, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, {[@generic={0x82, 0x6, "bd3eedea"}]}}}}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x58) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x2, 0x0) 6.080748525s ago: executing program 2 (id=931): socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000340), 0x0, 0xfffffffffffffffd) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/../file0\x00', &(0x7f0000000180)={0x400, 0x0, 0xc}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) r1 = socket(0x400000000010, 0x800, 0xfffffffc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c0c0) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES32=r0], 0x128}, 0x1) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r4, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) 5.0237065s ago: executing program 4 (id=932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa280, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x401}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x401}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="e9a08e1ef8c51aabd0101bf669d53a8ed6f0b7296cad04b53b21d2030119a4bb36434e2219df496f06063346e28131a49a1215eadde79745d749d1bf2c4a1a472754f04b2b8bf2e7b3c2b6a876d1ecd94dd766d43eead2697d9bee42e6be472dadd900410617f2fc5f86a0dbe3494f5c55c4d74bf3ff105a067a95", @ANYRES64=0x0], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r7, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c00070000000000000000000800090071000000070006"], 0x54}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vlan1\x00', 0x1}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vlan1\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 1.844301425s ago: executing program 3 (id=933): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x88840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200000000000000000000000000240003000000000000000000020000000000000000000000000000000000000000000000980008809400008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a00010000006400098028000080060001000a00000014000200fe88000000000000000000000000010105000300030000001c000080060001000200000008000200ffffffff05000300010000001c000080060001000200000008000200ffffffff0500030003000000"], 0xe4}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 1.746849465s ago: executing program 1 (id=934): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x28, 0x2}, &(0x7f0000000300)=0x0) r2 = getpgrp(0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10002, 0x5, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) creat(0x0, 0x10) r3 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f000000e940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}]}}}], 0x18}}], 0x1, 0x20044000) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_usb_connect$midi(0x2, 0x0, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x38) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) read$alg(r7, &(0x7f00000012c0)=""/4109, 0x100d) 1.389421186s ago: executing program 5 (id=935): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) (async) sendto$inet(r0, &(0x7f0000000040)="e5", 0x1, 0x4004, 0x0, 0x0) 1.308365286s ago: executing program 2 (id=936): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="1001100a144ea220e2040114ae34010203010902400002081020020904dc030002b9ffce8cb92bc8fa19eb57130002010209240604010107000709041101026552cc0309058a7e"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, 0x0, 0x20000000) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fdatasync(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) (async) write$dsp(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="1001100a144ea220e2040114ae34010203010902400002081020020904dc030002b9ffce8cb92bc8fa19eb57130002010209240604010107000709041101026552cc0309058a7e"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, 0x0, 0x20000000) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) (async) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) fdatasync(r3) (async) 1.264158895s ago: executing program 4 (id=937): bind$inet(0xffffffffffffffff, 0x0, 0x0) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x501e, 0x10000, 0x3, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETS(r9, 0x404c4701, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$igmp(0x2, 0x3, 0x2) userfaultfd(0x80801) 75.211699ms ago: executing program 3 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket(0x1d, 0x2, 0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005dc0)={@ifindex, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) landlock_restrict_self(0xffffffffffffffff, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[], 0x47) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000000)=0x9, 0x4) 74.381375ms ago: executing program 4 (id=939): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) fcntl$setlease(r1, 0x400, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xa) ioctl$FS_IOC_GETVERSION(r3, 0x40025b0c, &(0x7f0000000040)) 0s ago: executing program 5 (id=940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003b00), 0x101001, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000003b80)={0xf6}) r4 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) unshare(0x8040480) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x0, 0x2}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000015c0), 0x20200, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000001600)={0x18, 0x0, 0x0, 0x0, 0x0, 0xd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) inotify_init1(0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x80100c, 0xde8bef52389a5434) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000280)={r6, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000004, 0x0, 0x0, 0x11, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f48359819ddc15edb9ca42b19126327fbe58f617cc4717f53d6a395cace0534365db4d55dace1d4e9d5526fa40100", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x61, 0x4]}}) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c06, 0x4) unshare(0x40c00) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYRESDEC=r1], 0x0, 0x0}) r8 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001000000087d1e512d0000000000010902240001000000080904005f01030001000921c1000301223200097c4046befbcba605abed33fabba75adc1e1776b25a0c6c8794a5dda0cf9b28a52e233e01050000007040706fa4509532ab4ef0151fdf4c29beef53d3a403793a311a4f2b75aea2eec7ce1079f2"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB=' \"('], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): cd [ 285.454245][ T29] usb 6-1: device not accepting address 19, error -71 [ 286.348933][ T8242] loop6: detected capacity change from 0 to 524287999 [ 286.532028][ T8248] FAT-fs (nbd1): unable to read boot sector [ 287.421720][ T30] audit: type=1400 audit(1785095606.104:943): avc: denied { ioctl } for pid=8246 comm="syz.5.542" path="socket:[19168]" dev="sockfs" ino=19168 ioctlcmd=0x9441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 287.595425][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 288.228787][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 288.268467][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 288.297668][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 288.363979][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.392524][ T10] usb 2-1: Product: ꦪ㏋瀇됅꽣猊涮㗈彾쾖몸椰쯃녑ᙹ걈ꎢ굷ꍪ—傁烩搧岦矔꧐駋纍昁ࣂ碥⛐奃 [ 288.477122][ T10] usb 2-1: Manufacturer: ⠊ [ 288.519471][ T10] usb 2-1: SerialNumber: Ꟙ꼪繾 [ 288.593452][ T10] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 288.620670][ T10] gspca_stv06xx: st6422 sensor detected [ 289.217272][ T10] STV06xx 2-1:1.0: probe with driver STV06xx failed with error -71 [ 289.264633][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 289.808631][ T8279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.548'. [ 289.821275][ T8276] FAULT_INJECTION: forcing a failure. [ 289.821275][ T8276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.845107][ T30] audit: type=1107 audit(1785095608.524:944): pid=8275 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ti1[Po [ 289.845107][ T30] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 289.845107][ T30] Вh0VZ2' [ 290.502202][ T8276] CPU: 0 UID: 0 PID: 8276 Comm: syz.4.545 Not tainted syzkaller #0 PREEMPT(full) [ 290.502228][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 290.502238][ T8276] Call Trace: [ 290.502244][ T8276] [ 290.502252][ T8276] dump_stack_lvl+0x100/0x190 [ 290.502284][ T8276] should_fail_ex.cold+0x5/0xa [ 290.502306][ T8276] _copy_from_user+0x2e/0xd0 [ 290.502332][ T8276] generic_map_update_batch+0x452/0x800 [ 290.502367][ T8276] ? __pfx_generic_map_update_batch+0x10/0x10 [ 290.502397][ T8276] ? bpf_map_do_batch+0x2e4/0x6d0 [ 290.502421][ T8276] ? __pfx_generic_map_update_batch+0x10/0x10 [ 290.502449][ T8276] bpf_map_do_batch+0x66f/0x6d0 [ 290.502474][ T8276] __sys_bpf+0x4ce/0x4e80 [ 290.502495][ T8276] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.502526][ T8276] ? __pfx___sys_bpf+0x10/0x10 [ 290.502542][ T8276] ? rcu_is_watching+0x12/0xc0 [ 290.502568][ T8276] ? trace_hrtimer_start+0x77/0x220 [ 290.502595][ T8276] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 290.502628][ T8276] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 290.502653][ T8276] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 290.502681][ T8276] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 290.502704][ T8276] ? lockdep_hardirqs_on+0x78/0x100 [ 290.502723][ T8276] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 290.502749][ T8276] ? rcu_is_watching+0x12/0xc0 [ 290.502773][ T8276] ? trace_sched_exit_tp+0x120/0x160 [ 290.502816][ T8276] ? xfd_validate_state+0x129/0x190 [ 290.502842][ T8276] ? __x64_sys_bpf+0xce/0x140 [ 290.502858][ T8276] __x64_sys_bpf+0xce/0x140 [ 290.502876][ T8276] ? do_syscall_64+0x90/0x870 [ 290.502896][ T8276] do_syscall_64+0x115/0x870 [ 290.502916][ T8276] ? clear_bhb_loop+0x40/0x90 [ 290.502937][ T8276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.502954][ T8276] RIP: 0033:0x7f03a599de99 [ 290.502970][ T8276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.502986][ T8276] RSP: 002b:00007f03a67bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.503004][ T8276] RAX: ffffffffffffffda RBX: 00007f03a5c26090 RCX: 00007f03a599de99 [ 290.503015][ T8276] RDX: 0000000000000038 RSI: 0000200000000640 RDI: 000000000000001a [ 290.503025][ T8276] RBP: 00007f03a67bc090 R08: 0000000000000000 R09: 0000000000000000 [ 290.503035][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.503045][ T8276] R13: 00007f03a5c26128 R14: 00007f03a5c26090 R15: 00007ffc539de5d8 [ 290.503069][ T8276] [ 290.826384][ T10] usb 2-1: USB disconnect, device number 26 [ 291.446148][ T5821] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 291.700216][ T8243] syz.3.540 (8243): drop_caches: 2 [ 291.836830][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 291.894543][ T5821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 292.025420][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.108026][ T5821] usb 6-1: too many endpoints for config 1 interface 2 altsetting 1: 128, using maximum allowed: 30 [ 292.240554][ T5821] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 292.382663][ T5821] usb 6-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 292.420761][ T30] audit: type=1400 audit(1785095610.874:945): avc: denied { kexec_image_load } for pid=8287 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 292.530773][ T30] audit: type=1400 audit(1785095611.164:946): avc: denied { append } for pid=8287 comm="syz.1.551" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 292.644199][ T5821] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 292.653739][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.666183][ T5821] usb 6-1: Product: syz [ 292.671889][ T5821] usb 6-1: Manufacturer: syz [ 292.676598][ T5821] usb 6-1: SerialNumber: syz [ 292.681380][ T30] audit: type=1400 audit(1785095611.364:947): avc: denied { setopt } for pid=8287 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 294.192524][ T5821] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 294.319344][ T30] audit: type=1400 audit(1785095613.004:948): avc: denied { append } for pid=8312 comm="syz.2.556" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 294.449184][ T5821] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 294.478077][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 294.674497][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 294.713308][ T5821] usb 6-1: USB disconnect, device number 21 [ 294.723766][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.739816][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.756764][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.768772][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 294.802596][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.827514][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.846877][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 294.878276][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.887671][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.905680][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 294.927722][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.936791][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.978138][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.018657][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.053626][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.078890][ T5821] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 295.098598][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.182420][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.369263][ T5821] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 295.381567][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.402667][ T8320] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 295.413210][ T5821] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 295.522477][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.537880][ T5821] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 295.576808][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.585121][ T5821] usb 6-1: Product: syz [ 295.589671][ T5821] usb 6-1: Manufacturer: syz [ 295.594364][ T5821] usb 6-1: SerialNumber: syz [ 295.599185][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.608209][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.623556][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.630964][ T5821] usb 6-1: config 0 descriptor?? [ 295.667096][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.676107][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.687141][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.700138][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 295.709624][ T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 295.718055][ T10] usb 2-1: Product: syz [ 295.722341][ T10] usb 2-1: Manufacturer: syz [ 295.831866][ T10] usb 2-1: SerialNumber: syz [ 296.378438][ T10] usb 2-1: config 0 descriptor?? [ 296.503987][ T10] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 296.596109][ T8332] FAT-fs (nbd2): unable to read boot sector [ 296.717180][ T10] usb 2-1: USB disconnect, device number 27 [ 296.830782][ T10] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 296.935584][ T29] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 297.089101][ T8315] netlink: 24 bytes leftover after parsing attributes in process `syz.5.558'. [ 297.105812][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 297.125812][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 297.147712][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 297.178528][ T5821] mos7840 6-1:0.0: required endpoints missing [ 297.182292][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.222282][ T29] usb 3-1: Product: ꦪ㏋瀇됅꽣猊涮㗈彾쾖몸椰쯃녑ᙹ걈ꎢ굷ꍪ—傁烩搧岦矔꧐駋纍昁ࣂ碥⛐奃 [ 297.238322][ T5821] usb 6-1: USB disconnect, device number 22 [ 297.432742][ T29] usb 3-1: Manufacturer: ⠊ [ 297.440672][ T29] usb 3-1: SerialNumber: Ꟙ꼪繾 [ 297.538779][ T8350] xt_hashlimit: size too large, truncated to 1048576 [ 297.987567][ T29] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 298.022870][ T29] gspca_stv06xx: st6422 sensor detected [ 298.126156][ T8353] FAULT_INJECTION: forcing a failure. [ 298.126156][ T8353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.146501][ T8355] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=8355 comm=syz.3.565 [ 298.175390][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.4.563 Not tainted syzkaller #0 PREEMPT(full) [ 298.175416][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 298.175425][ T8353] Call Trace: [ 298.175430][ T8353] [ 298.175437][ T8353] dump_stack_lvl+0x100/0x190 [ 298.175462][ T8353] should_fail_ex.cold+0x5/0xa [ 298.175484][ T8353] _copy_from_user+0x2e/0xd0 [ 298.175505][ T8353] generic_map_update_batch+0x4bb/0x800 [ 298.175539][ T8353] ? __pfx_generic_map_update_batch+0x10/0x10 [ 298.175569][ T8353] ? __pfx_generic_map_update_batch+0x10/0x10 [ 298.175599][ T8353] bpf_map_do_batch+0x66f/0x6d0 [ 298.175623][ T8353] __sys_bpf+0x4ce/0x4e80 [ 298.175646][ T8353] ? __pfx___sys_bpf+0x10/0x10 [ 298.175663][ T8353] ? find_held_lock+0x2b/0x80 [ 298.175686][ T8353] ? get_pid_task+0xfc/0x250 [ 298.175711][ T8353] ? get_pid_task+0xfc/0x250 [ 298.175742][ T8353] ? find_held_lock+0x2b/0x80 [ 298.175772][ T8353] ? rcu_read_lock_any_held+0x6a/0xa0 [ 298.175788][ T8353] ? find_held_lock+0x2b/0x80 [ 298.175812][ T8353] ? ksys_write+0x190/0x250 [ 298.175835][ T8353] ? ksys_write+0x190/0x250 [ 298.175875][ T8353] ? fput+0x79/0x100 [ 298.175896][ T8353] ? __x64_sys_bpf+0xce/0x140 [ 298.175911][ T8353] __x64_sys_bpf+0xce/0x140 [ 298.175927][ T8353] ? do_syscall_64+0x90/0x870 [ 298.175945][ T8353] do_syscall_64+0x115/0x870 [ 298.175960][ T8353] ? clear_bhb_loop+0x40/0x90 [ 298.175979][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.175995][ T8353] RIP: 0033:0x7f03a599de99 [ 298.176010][ T8353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.176025][ T8353] RSP: 002b:00007f03a67bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 298.176041][ T8353] RAX: ffffffffffffffda RBX: 00007f03a5c26090 RCX: 00007f03a599de99 [ 298.176052][ T8353] RDX: 0000000000000038 RSI: 0000200000000640 RDI: 000000000000001a [ 298.176062][ T8353] RBP: 00007f03a67bc090 R08: 0000000000000000 R09: 0000000000000000 [ 298.176072][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.176081][ T8353] R13: 00007f03a5c26128 R14: 00007f03a5c26090 R15: 00007ffc539de5d8 [ 298.176104][ T8353] [ 298.309362][ T29] STV06xx 3-1:1.0: probe with driver STV06xx failed with error -71 [ 298.309887][ T29] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 298.695688][ T29] usb 3-1: USB disconnect, device number 28 [ 298.784719][ T5929] udevd[5929]: setting mode of /dev/bus/usb/003/028 to 020664 failed: No such file or directory [ 298.784816][ T5929] udevd[5929]: setting owner of /dev/bus/usb/003/028 to uid=0, gid=0 failed: No such file or directory [ 298.807850][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.815021][ T30] audit: type=1400 audit(1785095617.495:949): avc: denied { write } for pid=8341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.584191][ T30] audit: type=1400 audit(1785095618.265:950): avc: denied { write } for pid=8371 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.765363][ T8380] tmpfs: Unknown parameter 'nswap' [ 300.549006][ T30] audit: type=1400 audit(1785095618.905:951): avc: denied { map } for pid=8388 comm="syz.4.572" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 301.504188][ T8405] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 301.566500][ T30] audit: type=1400 audit(1785095620.255:952): avc: denied { write } for pid=8385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.863270][ T30] audit: type=1400 audit(1785095620.545:953): avc: denied { write } for pid=8414 comm="syz.1.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 301.940072][ T8417] /dev/nullb0: Can't open blockdev [ 301.943184][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 301.946414][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 302.047662][ T30] audit: type=1400 audit(1785095620.675:954): avc: denied { getopt } for pid=8414 comm="syz.1.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 302.240553][ T30] audit: type=1400 audit(1785095620.925:955): avc: denied { write } for pid=8413 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.299296][ T5745] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 302.460893][ T5745] usb 2-1: device descriptor read/64, error -71 [ 302.704821][ T5745] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 302.834855][ T5745] usb 2-1: device descriptor read/64, error -71 [ 302.965228][ T5745] usb usb2-port1: attempt power cycle [ 303.368390][ T5745] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 303.468460][ T5745] usb 2-1: device descriptor read/8, error -71 [ 303.810498][ T5745] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 304.059441][ T5745] usb 2-1: device descriptor read/8, error -71 [ 304.253160][ T8424] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.350516][ T5745] usb usb2-port1: unable to enumerate USB device [ 305.118203][ T8437] Mass Storage Function, version: 2009/09/11 [ 305.163949][ T8437] LUN: removable file: (no medium) [ 305.221441][ T30] audit: type=1400 audit(1785095623.786:956): avc: denied { write } for pid=8435 comm="syz.2.578" name="functions" dev="configfs" ino=7798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 306.109416][ T5745] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 306.163077][ T8424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.213558][ T8424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.389199][ T5745] usb 3-1: unable to get BOS descriptor or descriptor too short [ 306.493907][ T5745] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10 [ 306.618128][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 306.691506][ T5745] usb 3-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 306.701463][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.712768][ T5745] usb 3-1: Product: syz [ 306.735022][ T5745] usb 3-1: Manufacturer: syz [ 306.788053][ T8451] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 306.810971][ T5745] usb 3-1: SerialNumber: syz [ 306.869491][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.911808][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.928112][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.945643][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.113026][ T8460] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 307.132190][ T30] audit: type=1400 audit(1785095625.816:957): avc: denied { write } for pid=8435 comm="syz.2.578" name="c.1" dev="configfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 307.297237][ T30] audit: type=1400 audit(1785095625.966:958): avc: denied { write } for pid=8435 comm="syz.2.578" name="num_buffers" dev="configfs" ino=20285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 307.320538][ T30] audit: type=1400 audit(1785095625.976:959): avc: denied { open } for pid=8435 comm="syz.2.578" path="/113/config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers" dev="configfs" ino=20285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 307.353109][ T30] audit: type=1400 audit(1785095625.976:960): avc: denied { create } for pid=8435 comm="syz.2.578" name="mass_storage.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 307.379033][ T5745] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 307.386607][ T5745] usb 3-1: MIDIStreaming interface descriptor not found [ 307.394448][ T30] audit: type=1400 audit(1785095625.976:961): avc: denied { write } for pid=8435 comm="syz.2.578" name="c.1" dev="configfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.405496][ T30] audit: type=1400 audit(1785095626.046:962): avc: denied { write } for pid=8435 comm="syz.2.578" name="c.1" dev="configfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.427757][ T30] audit: type=1400 audit(1785095626.046:963): avc: denied { remove_name } for pid=8435 comm="syz.2.578" name="mass_storage.usb0" dev="configfs" ino=20287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.451761][ T30] audit: type=1400 audit(1785095626.046:964): avc: denied { unlink } for pid=8435 comm="syz.2.578" name="mass_storage.usb0" dev="configfs" ino=20287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1 [ 309.475815][ T30] audit: type=1400 audit(1785095626.046:965): avc: denied { write } for pid=8435 comm="syz.2.578" name="functions" dev="configfs" ino=7798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 310.229721][ T5745] usb 3-1: USB disconnect, device number 29 [ 310.316211][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.351056][ T30] audit: type=1400 audit(1785095626.046:966): avc: denied { rmdir } for pid=8435 comm="syz.2.578" name="mass_storage.usb0" dev="configfs" ino=20643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 310.754091][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 310.795715][ T30] audit: type=1400 audit(1785095629.486:967): avc: denied { bind } for pid=8484 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 310.925707][ T24] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 310.940495][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.973992][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 310.990376][ T24] usb 4-1: config 0 descriptor?? [ 311.129819][ T8495] xt_hashlimit: size too large, truncated to 1048576 [ 311.167809][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.191609][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 311.221214][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.587'. [ 311.246759][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.299115][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.346652][ T8478] xt_nfacct: accounting object `syz1' does not exist [ 311.363163][ T8482] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 311.370494][ T5745] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 311.392119][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.417287][ T8478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8478 comm=syz.3.587 [ 311.544847][ T5745] usb 2-1: Using ep0 maxpacket: 16 [ 311.571196][ T5745] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 311.650647][ T5745] usb 2-1: config 0 has no interface number 0 [ 311.688674][ T5745] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 311.737271][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 311.776049][ T805] usb 5-1: USB disconnect, device number 18 [ 311.788897][ T5745] usb 2-1: Product: syz [ 311.808375][ T5745] usb 2-1: SerialNumber: syz [ 311.861924][ T5745] usb 2-1: config 0 descriptor?? [ 311.882209][ T30] audit: type=1400 audit(1785095630.566:968): avc: denied { connect } for pid=8490 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 311.937899][ T5745] cm109 2-1:0.8: invalid payload size 32, expected 4 [ 312.000725][ T5745] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input16 [ 312.040469][ T24] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 312.070814][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 312.127417][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 312.136373][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 312.143626][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 312.150757][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 312.158306][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 312.172206][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 312.179337][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 312.186424][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 312.193497][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 312.200652][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 312.239133][ T5745] usb 2-1: USB disconnect, device number 32 [ 312.239165][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 312.341724][ T5745] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 312.395376][ T24] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 312.412391][ T24] [drm] Initialized udl on minor 2 [ 312.422885][ T24] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 312.472614][ T24] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 312.498535][ T29] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 312.516294][ T24] usb 4-1: USB disconnect, device number 21 [ 312.533277][ T29] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 313.727510][ T30] audit: type=1400 audit(1785095632.406:969): avc: denied { ioctl } for pid=8533 comm="syz.3.601" path="/dev/sg0" dev="devtmpfs" ino=726 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 314.122917][ T30] audit: type=1400 audit(1785095632.807:970): avc: denied { read } for pid=8533 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 314.465018][ T30] audit: type=1400 audit(1785095633.117:971): avc: denied { ioctl } for pid=8538 comm="syz.4.602" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 314.656965][ T30] audit: type=1400 audit(1785095633.347:972): avc: denied { bind } for pid=8548 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.897591][ T8558] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.606'. [ 315.174409][ T805] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 315.195047][ T30] audit: type=1400 audit(1785095633.887:973): avc: denied { write } for pid=8564 comm="syz.4.608" name="functions" dev="configfs" ino=7798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 315.247217][ T8565] Mass Storage Function, version: 2009/09/11 [ 315.259934][ T8565] LUN: removable file: (no medium) [ 315.343522][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 315.354965][ T805] usb 2-1: unable to get BOS descriptor or descriptor too short [ 315.364683][ T805] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 156, changing to 7 [ 315.392298][ T805] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 315.407823][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.426692][ T805] usb 2-1: Product: syz [ 315.436019][ T805] usb 2-1: Manufacturer: syz [ 315.450076][ T805] usb 2-1: SerialNumber: syz [ 315.503479][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 315.623545][ T29] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 315.655266][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 315.682161][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10 [ 315.844122][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 315.871372][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.024024][ T24] usb 5-1: Product: syz [ 316.035107][ T29] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 316.045257][ T24] usb 5-1: Manufacturer: syz [ 316.055057][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.074546][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.092569][ T24] usb 5-1: SerialNumber: syz [ 316.097342][ T29] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 316.115921][ T29] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 316.149421][ T29] usb 6-1: config 220 has no interface number 2 [ 316.169631][ T29] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 316.203292][ T29] usb 6-1: config 220 interface 0 has no altsetting 0 [ 316.213684][ T29] usb 6-1: config 220 interface 76 has no altsetting 0 [ 316.213726][ T29] usb 6-1: config 220 interface 1 has no altsetting 0 [ 316.221996][ T29] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 316.222015][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.222027][ T29] usb 6-1: Product: syz [ 316.222035][ T29] usb 6-1: Manufacturer: syz [ 316.222044][ T29] usb 6-1: SerialNumber: syz [ 316.352142][ T30] audit: type=1400 audit(1785095635.037:974): avc: denied { write } for pid=8564 comm="syz.4.608" name="c.1" dev="configfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.367322][ T30] audit: type=1400 audit(1785095635.047:975): avc: denied { write } for pid=8564 comm="syz.4.608" name="c.1" dev="configfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.367897][ T30] audit: type=1400 audit(1785095635.057:976): avc: denied { write } for pid=8564 comm="syz.4.608" name="c.1" dev="configfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.371547][ T30] audit: type=1400 audit(1785095635.057:977): avc: denied { write } for pid=8564 comm="syz.4.608" name="functions" dev="configfs" ino=7798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.379023][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.379048][ T24] usb 5-1: MIDIStreaming interface descriptor not found [ 316.470607][ T24] usb 5-1: USB disconnect, device number 19 [ 316.553295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 316.575454][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.576919][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.587308][ T29] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 316.587343][ T29] uvcvideo 6-1:220.0: No valid video chain found. [ 316.587406][ T29] usb 6-1: selecting invalid altsetting 0 [ 316.620120][ T29] usb 6-1: selecting invalid altsetting 0 [ 316.620139][ T29] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 316.622603][ T805] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.622776][ T805] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 316.632106][ T29] usb 6-1: USB disconnect, device number 23 [ 316.664279][ T805] usb 2-1: USB disconnect, device number 33 [ 316.724022][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.925963][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.083385][ T5623] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 318.496138][ T30] audit: type=1400 audit(1785095637.117:978): avc: denied { create } for pid=8602 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 318.576779][ T30] audit: type=1400 audit(1785095637.217:979): avc: denied { setopt } for pid=8602 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 318.673158][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 318.711601][ T30] audit: type=1400 audit(1785095637.227:980): avc: denied { map } for pid=8602 comm="syz.4.618" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 318.758232][ T8606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.849488][ T30] audit: type=1400 audit(1785095637.227:981): avc: denied { execute } for pid=8602 comm="syz.4.618" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 319.003186][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 319.044075][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 319.128570][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 319.232196][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 319.309246][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 319.333490][ T29] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 319.362899][ T10] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 319.407792][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.445234][ T10] usb 6-1: Product: syz [ 319.462715][ T10] usb 6-1: Manufacturer: syz [ 319.473133][ T10] usb 6-1: SerialNumber: syz [ 319.485417][ T10] usb 6-1: config 0 descriptor?? [ 319.504084][ T8586] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 319.516680][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 319.535113][ T29] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 319.556590][ T8586] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 319.585764][ T29] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 319.619736][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 319.636951][ T5745] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 319.674679][ T29] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 319.697911][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.728272][ T29] usb 4-1: Product: syz [ 319.749255][ T29] usb 4-1: Manufacturer: syz [ 319.766425][ C0] port100 6-1:0.0: NFC: Urb failure (status -71) [ 319.779772][ T29] usb 4-1: SerialNumber: syz [ 319.784786][ C0] port100 6-1:0.0: NFC: Urb failure (status -71) [ 319.813755][ T29] usb 4-1: config 0 descriptor?? [ 319.897478][ T10] port100 6-1:0.0: NFC: Could not get supported command types [ 319.909640][ T5745] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 319.950429][ T5745] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 319.963318][ T10] usb 6-1: USB disconnect, device number 24 [ 320.074012][ T5745] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 320.085594][ T5745] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 320.133195][ T5745] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 320.150862][ T5745] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 320.161167][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 320.169736][ T5745] usb 3-1: Product: syz [ 320.174572][ T5745] usb 3-1: Manufacturer: syz [ 320.223437][ T5745] cdc_wdm 3-1:1.0: skipping garbage [ 320.229855][ T5745] cdc_wdm 3-1:1.0: skipping garbage [ 320.238052][ T5745] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 320.253390][ T5745] cdc_wdm 3-1:1.0: Unknown control protocol [ 320.274314][ T29] gs_usb 4-1:0.0: Configuring for 214 interfaces [ 320.478609][ T5745] usb 3-1: USB disconnect, device number 30 [ 320.489641][ T29] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 320.510945][ T29] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 320.777865][ T29] usb 4-1: USB disconnect, device number 22 [ 321.027910][ T8649] capability: warning: `syz.2.629' uses deprecated v2 capabilities in a way that may be insecure [ 321.100120][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.627'. [ 321.215072][ T8652] fuse: Bad value for 'fd' [ 321.356185][ T805] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 321.626356][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.631'. [ 321.682827][ T805] usb 3-1: device descriptor read/64, error -71 [ 321.759812][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.631'. [ 321.786086][ T8661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.932765][ T805] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 322.342760][ T805] usb 3-1: device descriptor read/64, error -71 [ 322.495021][ T805] usb usb3-port1: attempt power cycle [ 322.622705][ T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 322.832327][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 322.864412][ T805] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 323.092738][ T24] usb 2-1: config 1 has an invalid interface number: 14 but max is 0 [ 323.115408][ T24] usb 2-1: config 1 has no interface number 0 [ 323.122689][ T24] usb 2-1: config 1 interface 14 has no altsetting 0 [ 323.132253][ T8677] syzkaller0: entered promiscuous mode [ 323.138692][ T805] usb 3-1: device descriptor read/8, error -71 [ 323.148491][ T8677] syzkaller0: entered allmulticast mode [ 323.151191][ T24] usb 2-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.55 [ 323.151219][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.151239][ T24] usb 2-1: Product: syz [ 323.151253][ T24] usb 2-1: Manufacturer: syz [ 323.151273][ T24] usb 2-1: SerialNumber: syz [ 323.305880][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.638'. [ 323.372861][ T805] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 323.414210][ T805] usb 3-1: device descriptor read/8, error -71 [ 323.483905][ T24] ums-cypress 2-1:1.14: USB Mass Storage device detected [ 323.533281][ T805] usb usb3-port1: unable to enumerate USB device [ 323.560674][ T24] usb 2-1: USB disconnect, device number 34 [ 323.567015][ T5724] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 323.722622][ T5731] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 323.736445][ T5724] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 323.766309][ T5724] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 323.797636][ T5724] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 323.835098][ T5724] usb 6-1: string descriptor 0 read error: -22 [ 323.849121][ T5724] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 323.871992][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.904015][ T5731] usb 5-1: config 0 has no interfaces? [ 323.913632][ T5724] adutux 6-1:168.0: interrupt endpoints not found [ 323.921057][ T5731] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 323.947187][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.974591][ T5731] usb 5-1: config 0 descriptor?? [ 324.189297][ T5745] usb 6-1: USB disconnect, device number 25 [ 324.205212][ T5731] usb 5-1: USB disconnect, device number 20 [ 324.388164][ T30] audit: type=1400 audit(1785095643.068:982): avc: denied { accept } for pid=8697 comm="syz.2.641" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 325.022547][ T5731] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 325.138838][ T30] audit: type=1400 audit(1785095643.828:983): avc: denied { read write } for pid=8707 comm="syz.5.644" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 325.257418][ T5731] usb 5-1: not running at top speed; connect to a high speed hub [ 325.673432][ T30] audit: type=1400 audit(1785095643.828:984): avc: denied { open } for pid=8707 comm="syz.5.644" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 325.697183][ T30] audit: type=1400 audit(1785095643.828:985): avc: denied { write } for pid=8707 comm="syz.5.644" lport=46714 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 325.723375][ T5731] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 325.748647][ T5731] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 325.808457][ T5731] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 325.821798][ T5731] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 325.869154][ T5731] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 325.973038][ T5731] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice= 0.40 [ 326.024396][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.048288][ T5731] usb 5-1: Product: syz [ 326.061528][ T5731] usb 5-1: Manufacturer: 喝貐ꈑ砈鎻ࢬ饽跱섍윒钻ﰴഩ뽩⑜␣鬯꣪㪙秝簖┝뢞涖椅㜃揈獂➇뱁뒈骀灮晨ዌ㔏㦱҂ꊩ籠쉂濩㭰ꖴ等ྦྷ脆綹킼띋䘯嶅ﺛ旻匵徨菵縒뀩ƃ䣲㈽ᤏ⺮ఌ螫쌶䘤鴣◦鍞䊁峖讬凑郳ꂋ쬨縜螾꺹α暅踺拭俊뼥驜璪⽡極挪㚰 [ 326.297946][ T30] audit: type=1400 audit(1785095644.918:986): avc: denied { shutdown } for pid=8717 comm="syz.5.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 326.302339][ T5731] usb 5-1: SerialNumber: syz [ 326.360808][ T8689] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 326.391112][ T8689] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 326.607333][ T5731] usb 5-1: can't set config #1, error -71 [ 326.633194][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.5.649'. [ 326.702302][ T5745] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 326.738010][ T5731] usb 5-1: USB disconnect, device number 21 [ 326.779738][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.648'. [ 327.673296][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.651'. [ 328.788932][ T8754] netlink: 'syz.5.653': attribute type 10 has an invalid length. [ 328.796816][ T8754] netlink: 40 bytes leftover after parsing attributes in process `syz.5.653'. [ 328.812594][ T8754] team0: Port device geneve1 added [ 328.824305][ T1159] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.905658][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.951402][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.061074][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.112022][ T5745] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 329.197018][ T8759] xt_hashlimit: size too large, truncated to 1048576 [ 329.713689][ T5745] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 330.118455][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.162252][ T5745] usb 6-1: Product: syz [ 330.166748][ T5745] usb 6-1: Manufacturer: syz [ 330.177250][ T30] audit: type=1400 audit(1785095648.868:987): avc: denied { write } for pid=8764 comm="syz.2.657" name="functions" dev="configfs" ino=7798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 330.218646][ T8769] FAULT_INJECTION: forcing a failure. [ 330.218646][ T8769] name failslab, interval 1, probability 0, space 0, times 0 [ 330.290359][ T5745] usb 6-1: SerialNumber: syz [ 330.311049][ T5745] usb 6-1: config 0 descriptor?? [ 330.347582][ T8769] CPU: 1 UID: 0 PID: 8769 Comm: syz.4.658 Not tainted syzkaller #0 PREEMPT(full) [ 330.347606][ T8769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 330.347616][ T8769] Call Trace: [ 330.347622][ T8769] [ 330.347629][ T8769] dump_stack_lvl+0x100/0x190 [ 330.347654][ T8769] should_fail_ex.cold+0x5/0xa [ 330.347676][ T8769] should_failslab+0xc2/0x120 [ 330.347699][ T8769] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 330.347719][ T8769] ? __alloc_skb+0x5b7/0x710 [ 330.347736][ T8769] ? __alloc_skb+0x140/0x710 [ 330.347757][ T8769] __alloc_skb+0x140/0x710 [ 330.347773][ T8769] ? __alloc_skb+0x5b7/0x710 [ 330.347790][ T8769] ? __pfx___alloc_skb+0x10/0x10 [ 330.347812][ T8769] netlink_alloc_large_skb+0x69/0x150 [ 330.347831][ T8769] netlink_sendmsg+0x680/0xda0 [ 330.347849][ T8769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.347868][ T8769] ? selinux_socket_sendmsg+0x198/0x2f0 [ 330.347895][ T8769] ____sys_sendmsg+0xa4d/0xbe0 [ 330.347919][ T8769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.347937][ T8769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.347970][ T8769] ___sys_sendmsg+0x190/0x1e0 [ 330.347997][ T8769] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.348021][ T8769] ? __lock_acquire+0x49f/0x1a40 [ 330.348041][ T8769] ? get_pid_task+0x106/0x250 [ 330.348089][ T8769] __sys_sendmsg+0x160/0x210 [ 330.348112][ T8769] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.348144][ T8769] do_syscall_64+0x115/0x870 [ 330.348163][ T8769] ? clear_bhb_loop+0x40/0x90 [ 330.348182][ T8769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.348199][ T8769] RIP: 0033:0x7f03a599de99 [ 330.348222][ T8769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.348240][ T8769] RSP: 002b:00007f03a67dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.348257][ T8769] RAX: ffffffffffffffda RBX: 00007f03a5c25fa0 RCX: 00007f03a599de99 [ 330.348267][ T8769] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 330.348277][ T8769] RBP: 00007f03a67dd090 R08: 0000000000000000 R09: 0000000000000000 [ 330.348287][ T8769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.348296][ T8769] R13: 00007f03a5c26038 R14: 00007f03a5c25fa0 R15: 00007ffc539de5d8 [ 330.348317][ T8769] [ 330.659003][ T30] audit: type=1400 audit(1785095648.868:988): avc: denied { write } for pid=8764 comm="syz.2.657" name="core" dev="configfs" ino=3487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 330.711119][ T5745] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 330.779495][ T5745] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 330.849463][ T5745] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 330.905873][ T5745] usb 6-1: media controller created [ 330.996447][ T5745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.154554][ T5745] DVB: Unable to find symbol mt352_attach() [ 331.231806][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 331.330484][ T8792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.665'. [ 331.926411][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 333.121555][ T8800] comedi comedi3: pcmmio: I/O port conflict (0x80,32) [ 333.122800][ T8802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.667'. [ 333.588575][ T30] audit: type=1107 audit(1785095652.139:989): pid=8798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ti1[Po [ 333.588575][ T30] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 333.588575][ T30] Вh0VZ2' [ 333.804834][ T5745] DVB: Unable to find symbol nxt6000_attach() [ 334.174088][ T5731] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 334.521738][ T5731] usb 2-1: Using ep0 maxpacket: 32 [ 334.534025][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 334.599722][ T5731] usb 2-1: unable to get BOS descriptor or descriptor too short [ 334.658865][ T5745] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 334.668239][ T9] usb 3-1: can't read configurations, error -71 [ 334.678216][ T5731] usb 2-1: too many endpoints for config 1 interface 2 altsetting 1: 128, using maximum allowed: 30 [ 334.703211][ T5745] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 334.808666][ T5731] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 334.830433][ T5731] usb 2-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 334.893744][ T5731] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 334.961106][ T8812] netlink: 72 bytes leftover after parsing attributes in process `syz.2.670'. [ 334.987215][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 335.262562][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.270651][ T5731] usb 2-1: Product: syz [ 335.274905][ T5731] usb 2-1: Manufacturer: 庢៕ꍳ뽢㜩ૢå둦뤧찻閜㿆豙⃒Ì [ 335.283318][ T5731] usb 2-1: SerialNumber: syz [ 335.452300][ T5745] dvb-usb: schedule remote query interval to 1000 msecs. [ 335.478456][ T5745] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 335.548600][ T5745] dvb-usb: bulk message failed: -22 (7/0) [ 335.767528][ T5745] dvb-usb: bulk message failed: -22 (7/0) [ 336.474600][ T5745] usb 6-1: USB disconnect, device number 26 [ 336.538227][ T5731] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 336.854535][ T5731] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 336.960092][ T5731] usb 2-1: USB disconnect, device number 36 [ 336.972332][ T30] audit: type=1400 audit(1785095655.669:990): avc: denied { read write } for pid=8829 comm="syz.3.676" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 337.005520][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.209911][ T8831] binder: 8826:8831 ioctl 89f0 200000000580 returned -22 [ 337.229336][ T30] audit: type=1400 audit(1785095655.689:991): avc: denied { ioctl open } for pid=8829 comm="syz.3.676" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 337.383729][ T5745] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 339.411609][ T5745] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 339.530993][ T9] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 339.606404][ T5745] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 339.747194][ T9] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 339.793644][ T5745] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.807476][ T9] usb 5-1: config 0 has no interface number 0 [ 339.813836][ T9] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 339.824054][ T5745] usb 6-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 339.840004][ T5745] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.849998][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 339.861521][ T9] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 339.871970][ T9] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 339.882255][ T5745] usb 6-1: SerialNumber: syz [ 339.888675][ T9] usb 5-1: Manufacturer: syz [ 339.953745][ T9] usb 5-1: SerialNumber: syz [ 340.148914][ T5745] rndis_host 6-1:253.0: RNDIS init failed, -71 [ 340.278692][ T5745] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -71 [ 340.304183][ T9] usb 5-1: config 0 descriptor?? [ 341.069862][ T5745] usb 6-1: USB disconnect, device number 27 [ 341.335169][ T9] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 341.401082][ T9] usb 5-1: USB disconnect, device number 22 [ 341.481717][ T5745] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 341.482363][ T8866] netlink: 'syz.2.684': attribute type 2 has an invalid length. [ 341.568012][ T8873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.686'. [ 341.631941][ T8866] netlink: 224 bytes leftover after parsing attributes in process `syz.2.684'. [ 341.730672][ T5745] usb 6-1: device descriptor read/64, error -71 [ 341.942173][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 343.382527][ T24] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 343.407428][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.447733][ T24] usb 4-1: Product: syz [ 343.458384][ T8884] cifs: Unknown parameter 'ۛQ [ 343.458384][ T8884] @"2ach}# [ 343.458384][ T8884] [bIT&:"/嶎4,Zz-#F<]%gC [ 343.458384][ T8884] SȘ7@$8 !YJ9Tw8}|' [ 343.481697][ T24] usb 4-1: Manufacturer: syz [ 343.487210][ T24] usb 4-1: SerialNumber: syz [ 343.735723][ T30] audit: type=1400 audit(1785095662.430:992): avc: denied { open } for pid=8868 comm="syz.3.685" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 344.671871][ T24] rtl8150 4-1:1.0: couldn't reset the device [ 344.692599][ T24] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 344.752583][ T24] usb 4-1: USB disconnect, device number 23 [ 345.247804][ T8909] use of bytesused == 0 is deprecated and will be removed in the future, [ 345.680520][ T8909] use the actual size instead. [ 345.793739][ T8920] 9p: Bad value for 'wfdno' [ 346.040590][ T30] audit: type=1400 audit(1785095664.730:993): avc: denied { mount } for pid=8925 comm="syz.5.699" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 346.216037][ T30] audit: type=1400 audit(1785095664.890:994): avc: denied { ioctl } for pid=8932 comm="syz.3.700" path="socket:[22846]" dev="sockfs" ino=22846 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 347.994132][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 348.075668][ T30] audit: type=1400 audit(1785095666.760:995): avc: denied { bind } for pid=8955 comm="syz.3.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 348.201087][ T30] audit: type=1400 audit(1785095666.760:996): avc: denied { execute } for pid=8955 comm="syz.3.706" path="/selinux/enforce" dev="selinuxfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 348.985445][ T8969] tipc: Can't bind to reserved service type 1 [ 349.237672][ T8954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.378687][ T30] audit: type=1400 audit(1785095668.070:997): avc: denied { ioctl } for pid=8971 comm="syz.3.709" path="socket:[22933]" dev="sockfs" ino=22933 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 349.568287][ T8970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.610091][ T8970] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.818786][ T8970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.926109][ T8970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.956511][ T8970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.016394][ T8970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 350.056005][ T8970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.237411][ T8970] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 350.693815][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.700954][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.175020][ T9004] comedi comedi3: pcl724: I/O base address or length out of range [ 351.249067][ T9002] binder: 8998:9002 ioctl 89f0 200000000580 returned -22 [ 351.275398][ T9008] bridge1: entered promiscuous mode [ 351.302122][ T9008] bridge1: entered allmulticast mode [ 351.366459][ T9008] team0: Port device bridge1 added [ 351.394822][ T9012] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 351.402511][ T9012] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 352.253197][ T9021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=689 sclass=netlink_route_socket pid=9021 comm=syz.2.722 [ 352.791088][ T9022] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 352.975983][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 353.095008][ T30] audit: type=1400 audit(1785095671.781:998): avc: denied { read append } for pid=9035 comm="syz.1.725" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 353.190999][ T9031] binder: 9030:9031 ioctl 89f0 200000000580 returned -22 [ 353.211642][ T30] audit: type=1400 audit(1785095671.781:999): avc: denied { open } for pid=9035 comm="syz.1.725" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 353.235897][ T30] audit: type=1400 audit(1785095671.781:1000): avc: denied { ioctl } for pid=9035 comm="syz.1.725" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 353.705786][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.727'. [ 354.493539][ T30] audit: type=1400 audit(1785095673.181:1001): avc: denied { view } for pid=9046 comm="syz.2.728" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 354.547929][ T9052] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 354.640163][ T9052] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 355.120110][ T9058] netlink: 140 bytes leftover after parsing attributes in process `syz.4.730'. [ 355.226479][ T9064] overlay: Unknown parameter 'func' [ 356.081238][ T1222] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 356.235233][ T9067] fuse: fd is not a fuse device [ 356.285568][ T1222] usb 3-1: Using ep0 maxpacket: 8 [ 356.357182][ T1222] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 356.380785][ T1222] usb 3-1: config 0 has no interface number 0 [ 356.392561][ T1222] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 356.757970][ T1222] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 357.133742][ T1222] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 357.187916][ T1222] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 357.439981][ T1222] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 357.487822][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.740'. [ 357.508759][ T1222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.612769][ T1222] usb 3-1: config 0 descriptor?? [ 357.783956][ T9095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.741'. [ 357.885290][ T1222] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 358.360860][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 359.196103][ T5745] usb 3-1: USB disconnect, device number 37 [ 359.244105][ T5745] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 359.543361][ T9107] netlink: 44 bytes leftover after parsing attributes in process `syz.1.744'. [ 359.554012][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.871677][ T5806] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 360.065921][ T5806] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 360.095528][ T5806] usb 6-1: config 0 has no interface number 0 [ 360.134641][ T5806] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 360.148402][ T30] audit: type=1400 audit(1785095678.841:1002): avc: denied { mount } for pid=9110 comm="syz.3.746" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 360.224529][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.247746][ T5806] usb 6-1: Product: syz [ 360.261836][ T5806] usb 6-1: Manufacturer: syz [ 360.277196][ T30] audit: type=1400 audit(1785095678.841:1003): avc: denied { watch } for pid=9110 comm="syz.3.746" path="/143/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 360.306591][ T5806] usb 6-1: SerialNumber: syz [ 360.311657][ T9114] pim6reg: entered allmulticast mode [ 360.335812][ T9112] mac80211_hwsim hwsim4 : renamed from wlan0 [ 360.337535][ T5806] usb 6-1: config 0 descriptor?? [ 361.230984][ T5745] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 361.488670][ T5745] usb 2-1: Using ep0 maxpacket: 32 [ 361.629976][ T5745] usb 2-1: unable to get BOS descriptor or descriptor too short [ 361.892283][ T5745] usb 2-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 361.905156][ T9103] binder: 9102:9103 ioctl c0045004 200000000080 returned -22 [ 362.067483][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.300150][ T5745] usb 2-1: Product: ꦪ㏋瀇됅꽣猊涮㗈彾쾖몸椰쯃녑ᙹ걈ꎢ굷ꍪ—傁烩搧岦矔꧐駋纍昁ࣂ碥⛐奃 [ 362.332063][ T30] audit: type=1400 audit(1785095680.882:1004): avc: denied { map } for pid=9102 comm="syz.5.743" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 362.463883][ T5806] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 362.475587][ T5806] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 362.496045][ T5745] usb 2-1: Manufacturer: ⠊ [ 362.498713][ T5806] asix 6-1:0.251: probe with driver asix failed with error -71 [ 362.523676][ T5745] usb 2-1: SerialNumber: Ꟙ꼪繾 [ 362.553594][ T30] audit: type=1400 audit(1785095681.232:1005): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 362.558518][ T5806] usb 6-1: USB disconnect, device number 30 [ 362.656925][ T5745] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 362.679388][ T5745] gspca_stv06xx: st6422 sensor detected [ 362.815221][ T30] audit: type=1400 audit(1785095681.502:1006): avc: denied { write } for pid=9140 comm="syz.2.754" name="functions" dev="configfs" ino=7798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 362.815314][ T9141] Mass Storage Function, version: 2009/09/11 [ 362.950699][ T5745] STV06xx 2-1:1.0: probe with driver STV06xx failed with error -71 [ 362.961496][ T5745] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 362.983775][ T9141] LUN: removable file: (no medium) [ 363.208454][ T5806] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 363.374634][ T5745] usb 2-1: USB disconnect, device number 37 [ 363.409464][ T9148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.755'. [ 363.883825][ T5806] usb 3-1: unable to get BOS descriptor or descriptor too short [ 364.290933][ T5806] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10 [ 364.306220][ T5806] usb 3-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 364.315568][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.329696][ T5806] usb 3-1: Product: syz [ 364.334096][ T5806] usb 3-1: Manufacturer: syz [ 364.339257][ T5806] usb 3-1: SerialNumber: syz [ 364.377797][ T9152] syz.4.756 (9152): /proc/9152/oom_adj is deprecated, please use /proc/9152/oom_score_adj instead. [ 364.399994][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.911167][ T30] audit: type=1400 audit(1785095683.222:1007): avc: denied { ioctl } for pid=9153 comm="syz.1.757" path="socket:[24278]" dev="sockfs" ino=24278 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 364.974793][ T5806] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 364.984756][ T30] audit: type=1400 audit(1785095683.642:1008): avc: denied { write } for pid=9140 comm="syz.2.754" name="c.1" dev="configfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 365.009597][ T9154] netlink: 420 bytes leftover after parsing attributes in process `syz.1.757'. [ 365.026139][ T5806] usb 3-1: MIDIStreaming interface descriptor not found [ 365.100246][ T30] audit: type=1400 audit(1785095683.642:1009): avc: denied { write } for pid=9140 comm="syz.2.754" name="c.1" dev="configfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 365.151935][ T5806] usb 3-1: USB disconnect, device number 38 [ 365.230481][ T30] audit: type=1400 audit(1785095683.652:1010): avc: denied { write } for pid=9140 comm="syz.2.754" name="c.1" dev="configfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 365.335298][ T30] audit: type=1400 audit(1785095683.652:1011): avc: denied { write } for pid=9140 comm="syz.2.754" name="functions" dev="configfs" ino=7798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 365.451761][ T30] audit: type=1400 audit(1785095684.122:1012): avc: denied { ioctl } for pid=9156 comm="syz.5.758" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 366.158730][ T9183] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 366.166245][ T30] audit: type=1400 audit(1785095684.842:1013): avc: denied { mount } for pid=9182 comm="syz.5.765" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 366.222780][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 366.252056][ T30] audit: type=1400 audit(1785095684.852:1014): avc: denied { mounton } for pid=9182 comm="syz.5.765" path="/139/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 366.278480][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 366.313876][ T9179] netlink: 'syz.2.763': attribute type 13 has an invalid length. [ 366.348185][ T5731] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 366.478901][ T30] audit: type=1400 audit(1785095685.172:1015): avc: denied { unmount } for pid=6121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 366.530947][ T5731] usb 2-1: Using ep0 maxpacket: 32 [ 366.552928][ T5731] usb 2-1: unable to get BOS descriptor or descriptor too short [ 366.638106][ T5806] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 366.793987][ T5731] usb 2-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 366.898794][ T5806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.943026][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.110072][ T5806] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 367.124926][ T5731] usb 2-1: Product: ꦪ㏋瀇됅꽣猊涮㗈彾쾖몸椰쯃녑ᙹ걈ꎢ굷ꍪ—傁烩搧岦矔꧐駋纍昁ࣂ碥⛐奃 [ 367.349730][ T5806] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 367.484081][ T5731] usb 2-1: Manufacturer: ⠊ [ 367.565395][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.595641][ T5731] usb 2-1: SerialNumber: Ꟙ꼪繾 [ 368.339031][ T5731] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 368.345227][ T5731] gspca_stv06xx: st6422 sensor detected [ 368.368822][ T5806] usb 3-1: config 0 descriptor?? [ 368.380468][ T30] audit: type=1400 audit(1785095687.072:1016): avc: denied { read } for pid=9192 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 368.660314][ T9198] netlink: 24 bytes leftover after parsing attributes in process `syz.5.768'. [ 369.123054][ T30] audit: type=1400 audit(1785095687.812:1017): avc: denied { recv } for pid=5881 comm="kworker/1:2H" saddr=10.128.0.169 src=38506 daddr=10.128.0.38 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 369.566896][ T5731] STV06xx 2-1:1.0: probe with driver STV06xx failed with error -71 [ 369.575438][ T5731] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 369.880105][ T9205] ipt_ECN: cannot use operation on non-tcp rule [ 369.937177][ T5731] usb 2-1: USB disconnect, device number 38 [ 370.025496][ T30] audit: type=1400 audit(1785095688.712:1018): avc: denied { write } for pid=9199 comm="syz.4.771" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 370.025568][ T9206] random: crng reseeded on system resumption [ 370.102086][ T9] usb 3-1: USB disconnect, device number 39 [ 370.678133][ T5731] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 371.066303][ T9221] 9pnet_virtio: no channels available for device 127.0.0.1 [ 371.089281][ T5731] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 371.115231][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.152655][ T5731] usb 6-1: Product: syz [ 371.246651][ T5731] usb 6-1: Manufacturer: syz [ 371.550253][ T5731] usb 6-1: SerialNumber: syz [ 371.588425][ T5731] usb 6-1: config 0 descriptor?? [ 371.623394][ T5731] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 031 [ 371.786034][ T9221] syzkaller0: entered promiscuous mode [ 371.816890][ T9221] syzkaller0: entered allmulticast mode [ 371.833629][ T9213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65530 sclass=netlink_route_socket pid=9213 comm=syz.5.773 [ 372.023500][ T9238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.780'. [ 372.871427][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.773'. [ 372.871816][ T30] audit: type=1400 audit(1785095691.563:1019): avc: denied { write } for pid=9212 comm="syz.5.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 373.293805][ T5731] i2c i2c-1: failure reading functionality [ 373.384358][ T5731] i2c i2c-1: connected i2c-tiny-usb device [ 373.406080][ T5731] usb 6-1: USB disconnect, device number 31 [ 373.907474][ T5724] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 374.082613][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 374.103439][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 374.135847][ T5724] usb 2-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 374.164253][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.187512][ T5724] usb 2-1: Product: ꦪ㏋瀇됅꽣猊涮㗈彾쾖몸椰쯃녑ᙹ걈ꎢ굷ꍪ—傁烩搧岦矔꧐駋纍昁ࣂ碥⛐奃 [ 374.236822][ T5724] usb 2-1: Manufacturer: ⠊ [ 374.255153][ T5724] usb 2-1: SerialNumber: Ꟙ꼪繾 [ 374.296546][ T5724] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 374.325576][ T5724] gspca_stv06xx: st6422 sensor detected [ 374.620136][ T5724] STV06xx 2-1:1.0: probe with driver STV06xx failed with error -71 [ 374.649627][ T5724] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 374.698235][ T30] audit: type=1400 audit(1785095693.393:1020): avc: denied { ioctl } for pid=9261 comm="syz.5.785" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 374.755681][ T5724] usb 2-1: USB disconnect, device number 39 [ 374.849279][ T30] audit: type=1400 audit(1785095693.423:1021): avc: denied { setopt } for pid=9261 comm="syz.5.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 375.029549][ T9264] No source specified [ 375.228022][ T30] audit: type=1400 audit(1785095693.833:1022): avc: denied { ioctl } for pid=9263 comm="syz.5.786" path="socket:[25082]" dev="sockfs" ino=25082 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 375.477609][ T9269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.787'. [ 377.296039][ T9276] netlink: 36 bytes leftover after parsing attributes in process `syz.5.789'. [ 377.364867][ T9276] netlink: 64 bytes leftover after parsing attributes in process `syz.5.789'. [ 377.444639][ T9276] netlink: 76 bytes leftover after parsing attributes in process `syz.5.789'. [ 378.132880][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 378.306982][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 378.443602][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.633041][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 378.642881][ T9296] xt_hashlimit: size too large, truncated to 1048576 [ 378.692076][ T10] usb 6-1: config 16 has an invalid interface number: 44 but max is 0 [ 378.707277][ T10] usb 6-1: config 16 has no interface number 0 [ 378.732929][ T10] usb 6-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 378.872345][ T10] usb 6-1: config 16 interface 44 has no altsetting 0 [ 378.911724][ T10] usb 6-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 378.922790][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.934904][ T10] usb 6-1: Product: syz [ 378.951143][ T10] usb 6-1: Manufacturer: syz [ 378.966275][ T10] usb 6-1: SerialNumber: syz [ 378.978657][ T9288] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 381.353896][ T9269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.787'. [ 381.602509][ T10] cypress_cy7c63 6-1:16.44: Cypress CY7C63xxx device now attached [ 381.641397][ T30] audit: type=1400 audit(1785095700.334:1023): avc: denied { ioctl } for pid=9301 comm="syz.3.795" path="socket:[25832]" dev="sockfs" ino=25832 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 381.717503][ T9307] SET target dimension over the limit! [ 381.737412][ T10] usb 6-1: USB disconnect, device number 32 [ 381.814489][ T30] audit: type=1326 audit(1785095700.504:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9304 comm="syz.1.796" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cf7b9de99 code=0x0 [ 381.987221][ T5745] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 382.069857][ T9314] xt_hashlimit: size too large, truncated to 1048576 [ 382.428200][ T1222] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 382.437099][ T10] cypress_cy7c63 6-1:16.44: Cypress CY7C63xxx device now disconnected [ 382.586386][ T5745] usb 5-1: device descriptor read/64, error -71 [ 382.606756][ T1222] usb 4-1: Using ep0 maxpacket: 32 [ 382.614061][ T1222] usb 4-1: unable to get BOS descriptor or descriptor too short [ 382.641706][ T1222] usb 4-1: config 8 has an invalid interface number: 123 but max is 0 [ 382.801129][ T1222] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 382.826380][ T5745] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 382.880251][ T1222] usb 4-1: config 8 has no interface number 0 [ 382.917873][ T1222] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 2.8c [ 383.051991][ T1222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.055198][ T9322] comedi comedi2: comedi_config --init_data is deprecated [ 383.110036][ T5745] usb 5-1: device descriptor read/64, error -71 [ 383.153517][ T9326] xt_hashlimit: size too large, truncated to 1048576 [ 383.546752][ T1222] usb 4-1: Product: syz [ 383.578576][ T1222] usb 4-1: Manufacturer: syz [ 383.583824][ T1222] usb 4-1: SerialNumber: syz [ 383.626509][ T5745] usb usb5-port1: attempt power cycle [ 383.996220][ T5745] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 384.066905][ T5745] usb 5-1: device descriptor read/8, error -71 [ 384.082169][ T30] audit: type=1400 audit(1785095702.774:1025): avc: denied { connect } for pid=9335 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 384.263801][ T9341] netlink: 'syz.2.802': attribute type 12 has an invalid length. [ 384.636271][ T5745] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 384.953463][ T5745] usb 5-1: device not accepting address 26, error -71 [ 385.391595][ T1222] ttusbir 4-1:8.123: cannot find expected altsetting [ 385.409447][ T5745] usb usb5-port1: unable to enumerate USB device [ 385.482551][ T1222] usb 4-1: USB disconnect, device number 24 [ 387.678478][ T5821] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 387.896613][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 387.940774][ T5821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 387.999297][ T5821] usb 5-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 388.000984][ T9378] tmpfs: Unknown parameter 'o7t~}urJGA rvU &ĥ3vj(' [ 388.015816][ T30] audit: type=1400 audit(1785095706.694:1026): avc: denied { mounton } for pid=9377 comm="syz.3.812" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 388.057044][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.109748][ T5821] usb 5-1: Product: ꦪ㏋瀇됅꽣猊涮㗈彾쾖몸椰쯃녑ᙹ걈ꎢ굷ꍪ—傁烩搧岦矔꧐駋纍昁ࣂ碥⛐奃 [ 388.242742][ T5821] usb 5-1: Manufacturer: ⠊ [ 388.319230][ T5821] usb 5-1: SerialNumber: Ꟙ꼪繾 [ 388.358983][ T9384] program syz.5.814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.400734][ T9384] syz_tun: entered allmulticast mode [ 388.419927][ T30] audit: type=1400 audit(1785095707.054:1027): avc: denied { write } for pid=9382 comm="syz.5.814" name="sg0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 388.467980][ T5821] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 388.492602][ T5821] gspca_stv06xx: st6422 sensor detected [ 388.826039][ T5821] STV06xx 5-1:1.0: probe with driver STV06xx failed with error -71 [ 388.908808][ T5821] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 389.671985][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 390.145630][ T5821] usb 5-1: USB disconnect, device number 27 [ 390.202272][ T30] audit: type=1400 audit(1785095708.885:1028): avc: denied { append } for pid=9397 comm="syz.5.818" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 393.207086][ T9420] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 393.210087][ T30] audit: type=1400 audit(1785095711.905:1029): avc: denied { create } for pid=9419 comm="syz.1.825" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 393.448259][ T30] audit: type=1400 audit(1785095711.905:1030): avc: denied { associate } for pid=9419 comm="syz.1.825" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 393.735354][ T5821] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 393.831172][ T30] audit: type=1400 audit(1785095712.235:1031): avc: denied { mounton } for pid=9419 comm="syz.1.825" path="/163/file0" dev="tmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 393.834314][ T30] audit: type=1400 audit(1785095712.235:1032): avc: denied { write } for pid=9419 comm="syz.1.825" name="file0" dev="tmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 394.162310][ T30] audit: type=1400 audit(1785095712.235:1033): avc: denied { add_name } for pid=9419 comm="syz.1.825" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 394.473992][ T9437] random: crng reseeded on system resumption [ 394.649379][ T30] audit: type=1400 audit(1785095712.235:1034): avc: denied { create } for pid=9419 comm="syz.1.825" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 394.695098][ T5724] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 394.741237][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 394.766035][ T30] audit: type=1400 audit(1785095712.235:1035): avc: denied { associate } for pid=9419 comm="syz.1.825" name="work" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 394.803812][ T9444] netlink: 'syz.1.830': attribute type 2 has an invalid length. [ 394.826407][ T5821] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 394.853347][ T30] audit: type=1400 audit(1785095712.235:1036): avc: denied { setattr } for pid=9419 comm="syz.1.825" name="work" dev="tmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 394.867197][ T5821] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 394.895354][ T5724] usb 5-1: Using ep0 maxpacket: 32 [ 394.925852][ T5724] usb 5-1: unable to get BOS descriptor or descriptor too short [ 394.945552][ T5724] usb 5-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 394.978343][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 395.017634][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.026023][ T30] audit: type=1400 audit(1785095712.235:1037): avc: denied { write } for pid=9419 comm="syz.1.825" name="work" dev="tmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 395.053806][ T5724] usb 5-1: Product: ꦪ㏋瀇됅꽣猊涮㗈彾쾖몸椰쯃녑ᙹ걈ꎢ굷ꍪ—傁烩搧岦矔꧐駋纍昁ࣂ碥⛐奃 [ 395.078441][ T5724] usb 5-1: Manufacturer: ⠊ [ 395.083398][ T30] audit: type=1400 audit(1785095712.235:1038): avc: denied { write open } for pid=9419 comm="syz.1.825" path=2F202864656C6574656429 dev="tmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 395.109872][ T5724] usb 5-1: SerialNumber: Ꟙ꼪繾 [ 395.137905][ T5724] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 395.146738][ T5724] gspca_stv06xx: st6422 sensor detected [ 395.179275][ T5821] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 395.273411][ T5821] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 395.302280][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.370935][ T9444] : entered promiscuous mode [ 395.375784][ T5821] usb 6-1: Product: syz [ 395.380112][ T5821] usb 6-1: Manufacturer: syz [ 395.385516][ T5821] usb 6-1: SerialNumber: syz [ 395.450790][ T5821] usb 6-1: config 0 descriptor?? [ 395.473799][ T9427] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 395.477539][ T5724] STV06xx 5-1:1.0: probe with driver STV06xx failed with error -71 [ 395.484566][ T5821] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input20 [ 395.522652][ T5724] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 395.660179][ T5724] usb 5-1: USB disconnect, device number 28 [ 396.226784][ T5821] usb 6-1: USB disconnect, device number 33 [ 396.226803][ C1] kbtab 6-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 396.241926][ T9454] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 396.241926][ T9454] The task syz.4.832 (9454) triggered the difference, watch for misbehavior. [ 396.746010][ T9454] netlink: 96 bytes leftover after parsing attributes in process `syz.4.832'. [ 396.850082][ T9457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.832'. [ 398.064908][ T24] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 398.697538][ T24] usb 4-1: config 3 interface 0 has no altsetting 0 [ 398.714807][ T24] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=d0.db [ 398.731918][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.768912][ T24] usb 4-1: Product: syz [ 398.782180][ T24] usb 4-1: Manufacturer: syz [ 398.807373][ T24] usb 4-1: SerialNumber: syz [ 399.350144][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 399.350161][ T30] audit: type=1326 audit(1785095718.046:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9469 comm="syz.5.838" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed5d99de99 code=0x0 [ 401.373016][ T9496] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 401.871693][ T9500] xt_ecn: cannot match TCP bits for non-tcp packets [ 401.916597][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 402.940200][ T30] audit: type=1326 audit(1785095721.636:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 403.072589][ T30] audit: type=1326 audit(1785095721.726:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 403.145124][ T30] audit: type=1326 audit(1785095721.726:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 403.341267][ T30] audit: type=1326 audit(1785095721.726:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 403.344319][ T5821] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 403.367980][ T30] audit: type=1326 audit(1785095721.726:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 403.405334][ T30] audit: type=1326 audit(1785095721.726:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 403.432062][ T30] audit: type=1326 audit(1785095721.726:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 403.458841][ T30] audit: type=1326 audit(1785095721.726:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 403.900038][ T5821] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 404.052450][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.218828][ T5821] usb 2-1: Product: syz [ 404.291040][ T5821] usb 2-1: Manufacturer: syz [ 404.351136][ T5821] usb 2-1: SerialNumber: syz [ 404.446044][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 404.965593][ T30] audit: type=1326 audit(1785095721.726:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 405.129543][ T30] audit: type=1400 audit(1785095721.726:1071): avc: denied { setopt } for pid=9505 comm="syz.2.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 405.645408][ T30] audit: type=1326 audit(1785095721.746:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 405.730817][ T24] usb 4-1: USB disconnect, device number 25 [ 405.775549][ T30] audit: type=1326 audit(1785095721.746:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 405.970348][ T30] audit: type=1326 audit(1785095721.746:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 406.000504][ T30] audit: type=1326 audit(1785095721.746:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 406.457691][ T30] audit: type=1326 audit(1785095721.746:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 406.552672][ T30] audit: type=1326 audit(1785095721.746:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 406.588234][ T5745] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 406.588443][ T24] usb 2-1: USB disconnect, device number 40 [ 406.666280][ T30] audit: type=1326 audit(1785095721.746:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 406.699502][ T30] audit: type=1326 audit(1785095721.746:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9505 comm="syz.2.847" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff2d839de99 code=0x7ffc0000 [ 406.814700][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 407.055213][ T5724] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 407.148863][ T9549] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 407.252742][ T5724] usb 4-1: unable to get BOS descriptor or descriptor too short [ 407.266155][ T5724] usb 4-1: config 4 has an invalid interface number: 17 but max is 0 [ 407.290623][ T5724] usb 4-1: config 4 has no interface number 0 [ 407.310866][ T5724] usb 4-1: config 4 interface 17 altsetting 2 endpoint 0x2 has invalid maxpacket 2047, setting to 1024 [ 407.363911][ T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 407.638956][ T5724] usb 4-1: config 4 interface 17 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1024 [ 407.703914][ T5724] usb 4-1: config 4 interface 17 altsetting 2 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 407.715739][ T5724] usb 4-1: config 4 interface 17 has no altsetting 0 [ 407.724506][ T5724] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=bb.9e [ 407.771963][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.793940][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 407.811263][ T5724] usb 4-1: Product: syz [ 407.819213][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 407.834149][ T5724] usb 4-1: Manufacturer: syz [ 408.328688][ T24] usb 2-1: config 76 has too many interfaces: 215, using maximum allowed: 32 [ 408.351941][ T5724] usb 4-1: SerialNumber: syz [ 408.375305][ T24] usb 2-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 408.405426][ T9537] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 408.414186][ T24] usb 2-1: config 76 has 1 interface, different from the descriptor's value: 215 [ 408.426084][ T24] usb 2-1: config 76 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 408.439860][ T24] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 408.453287][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.464720][ T24] usb 2-1: Product: syz [ 408.470983][ T24] usb 2-1: Manufacturer: syz [ 408.484211][ T24] usb 2-1: SerialNumber: syz [ 408.674775][ T9536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.227789][ T9536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.236648][ T9545] netlink: del zone limit has 4 unknown bytes [ 409.258804][ T5724] kvaser_usb 4-1:4.17: error -ENODEV: Cannot get usb endpoint(s) [ 409.407817][ T5724] usb 4-1: USB disconnect, device number 26 [ 409.583261][ T9573] netlink: 60 bytes leftover after parsing attributes in process `syz.5.862'. [ 409.603848][ T29] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 409.689004][ T9571] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.764632][ T29] usb 3-1: device descriptor read/64, error -71 [ 410.013793][ T29] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 410.053416][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 410.483429][ T29] usb 3-1: device descriptor read/64, error -71 [ 410.679277][ T29] usb usb3-port1: attempt power cycle [ 411.465031][ T9589] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 411.636690][ T29] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 411.810253][ T29] usb 3-1: device descriptor read/8, error -71 [ 411.851025][ T24] usb 2-1: selecting invalid altsetting 1 [ 412.066257][ T24] snd-usb-audio 2-1:76.0: probe with driver snd-usb-audio failed with error -22 [ 412.083598][ T24] usb 2-1: USB disconnect, device number 41 [ 412.129265][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:76.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.242063][ T29] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 413.202796][ T1222] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 413.761169][ T29] usb 3-1: device not accepting address 43, error -71 [ 413.802558][ T29] usb usb3-port1: unable to enumerate USB device [ 413.822658][ T1222] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 413.851791][ T1222] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 413.902590][ T1222] usb 5-1: Product: syz [ 413.928613][ T1222] usb 5-1: Manufacturer: syz [ 413.940536][ T1222] usb 5-1: SerialNumber: syz [ 413.985537][ T1222] usb 5-1: config 0 descriptor?? [ 414.244460][ T1222] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 414.372677][ T9616] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 414.385628][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 414.385641][ T30] audit: type=1400 audit(1785095733.047:1093): avc: denied { setopt } for pid=9615 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 414.393005][ T5745] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 414.557897][ T9616] overlayfs: overlapping lowerdir path [ 414.618878][ T1222] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 414.647360][ T9622] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 414.657777][ T1222] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 414.686421][ T1222] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 414.723329][ T5745] usb 6-1: Using ep0 maxpacket: 32 [ 414.758755][ T5745] usb 6-1: config 32 has an invalid interface number: 85 but max is 0 [ 414.777424][ T5745] usb 6-1: config 32 has no interface number 0 [ 414.801252][ T5745] usb 6-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 414.831890][ T5745] usb 6-1: config 32 interface 85 has no altsetting 0 [ 414.847283][ T9598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.863635][ T5745] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 414.873395][ T1222] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 414.883732][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.905241][ T1222] usb 5-1: USB disconnect, device number 29 [ 414.912766][ T5745] usb 6-1: Product: syz [ 414.939510][ T5745] usb 6-1: Manufacturer: syz [ 415.014895][ T5745] usb 6-1: SerialNumber: syz [ 415.255883][ T5745] appletouch 6-1:32.85: Failed to read mode from device. [ 415.301434][ T5745] appletouch 6-1:32.85: probe with driver appletouch failed with error -5 [ 415.448595][ T9618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.546776][ T9618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.942635][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 417.341824][ T5745] usb 6-1: USB disconnect, device number 34 [ 417.882731][ T5745] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 417.997484][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.881'. [ 418.062623][ T5745] usb 6-1: Using ep0 maxpacket: 8 [ 418.095401][ T5745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.158447][ T5745] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 418.207411][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.242472][ T9644] xt_connbytes: Forcing CT accounting to be enabled [ 418.250889][ T5745] usb 6-1: config 0 descriptor?? [ 418.287109][ T9644] Cannot find set identified by id 0 to match [ 418.488273][ T5745] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 418.584051][ T30] audit: type=1400 audit(1785095737.288:1094): avc: denied { accept } for pid=9641 comm="syz.2.881" laddr=172.20.20.10 lport=50457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 418.762504][ T5745] usb 6-1: USB disconnect, device number 35 [ 420.027014][ T30] audit: type=1400 audit(1785095738.648:1095): avc: denied { read } for pid=9653 comm="syz.4.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 421.308153][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 421.644410][ T5731] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 421.974326][ T5731] usb 6-1: No LPM exit latency info found, disabling LPM. [ 422.728974][ T5731] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 422.749323][ T5731] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 422.766101][ T5731] usb 6-1: config 1 interface 0 has no altsetting 0 [ 422.788803][ T5731] usb 6-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.40 [ 422.799840][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.812239][ T5731] usb 6-1: Product: ۼፕꡮ孨鬓눤䟞쥓殾㡻蜹⮃壯㹩쮐교徐滛騈ე滢鿮샻 [ 422.825737][ T5731] usb 6-1: Manufacturer: ч [ 422.830851][ T5731] usb 6-1: SerialNumber: 쨭ᠼ并民ꃦ઎萀芌墥똶ﹴﴰ챷蹂툅맣┛⣅Ⓠ顰炻퐯顡짌쬤힛ﳷ祥緂亦쉴碹］좸旮맪↵䩶廑몏ꩈﮂ葏ꬲ닺彛牶谟셔ۜ⦘⼗珙먊컄嗠媄볋汊渎怚ଦ黫䆉ᢲ⤉ರ쨓ꭦ찱ʱ䮞蛅왮쥝膩ਦꀿ형᢫쒃喔郡褬謾셍♁蓇㝙첀弌체ぃࣲᣎ [ 422.882193][ T9676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.885'. [ 422.948020][ T30] audit: type=1107 audit(1785095741.608:1096): pid=9674 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ti1[Po [ 422.948020][ T30] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 422.948020][ T30] Вh0VZ2' [ 423.547925][ T29] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 423.568153][ T9663] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 423.960621][ T9663] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 424.602913][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 425.420331][ T30] audit: type=1326 audit(1785095744.088:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9679 comm="syz.4.890" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03a599de99 code=0x0 [ 426.225823][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 426.236527][ T5731] usbhid 6-1:1.0: can't add hid device: -71 [ 426.249894][ T29] usb 2-1: too many endpoints for config 1 interface 2 altsetting 1: 128, using maximum allowed: 30 [ 426.330538][ T5731] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 426.340160][ T29] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 426.597831][ T5731] usb 6-1: USB disconnect, device number 36 [ 426.604322][ T29] usb 2-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 427.230798][ T9706] kthread_run failed with err -4 [ 427.540823][ T29] usb 2-1: string descriptor 0 read error: -71 [ 427.619370][ T29] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 427.687615][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.765197][ T29] usb 2-1: can't set config #1, error -71 [ 427.936831][ T29] usb 2-1: USB disconnect, device number 42 [ 429.606793][ T9730] Mass Storage Function, version: 2009/09/11 [ 429.619815][ T30] audit: type=1400 audit(1785095748.309:1098): avc: denied { write } for pid=9724 comm="syz.2.903" name="functions" dev="configfs" ino=7798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 429.673677][ T9730] LUN: removable file: (no medium) [ 429.690926][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 430.432454][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 430.546245][ T30] audit: type=1400 audit(1785095749.249:1099): avc: denied { map } for pid=9737 comm="syz.1.904" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 430.622624][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 430.650480][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10 [ 430.723406][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 430.897846][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.122324][ T10] usb 3-1: Product: syz [ 431.148017][ T10] usb 3-1: Manufacturer: syz [ 431.197696][ T10] usb 3-1: SerialNumber: syz [ 431.422121][ T5745] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 431.496378][ T30] audit: type=1400 audit(1785095750.199:1100): avc: denied { write } for pid=9724 comm="syz.2.903" name="c.1" dev="configfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 431.547438][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.559616][ T30] audit: type=1400 audit(1785095750.199:1101): avc: denied { write } for pid=9724 comm="syz.2.903" name="c.1" dev="configfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 431.595941][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 431.611556][ T5745] usb 5-1: device descriptor read/64, error -71 [ 431.786485][ T30] audit: type=1400 audit(1785095750.219:1102): avc: denied { write } for pid=9724 comm="syz.2.903" name="c.1" dev="configfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 432.188053][ T30] audit: type=1400 audit(1785095750.229:1103): avc: denied { write } for pid=9724 comm="syz.2.903" name="functions" dev="configfs" ino=7798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 432.311425][ T5745] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 432.346985][ T9765] fuse: Bad value for 'fd' [ 432.494550][ T9768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.910'. [ 432.511793][ T5745] usb 5-1: device descriptor read/64, error -71 [ 432.639360][ T30] audit: type=1107 audit(1785095751.239:1104): pid=9766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ti1[Po [ 432.639360][ T30] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 432.639360][ T30] Вh0VZ2' [ 433.214887][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 433.676287][ T5745] usb usb5-port1: attempt power cycle [ 433.790647][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 434.489439][ T9770] overlayfs: failed to resolve './file2': -2 [ 434.571287][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 434.835594][ T10] usb 3-1: USB disconnect, device number 44 [ 435.234478][ T24] usb 2-1: too many endpoints for config 1 interface 2 altsetting 1: 128, using maximum allowed: 30 [ 435.258509][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 435.276176][ T24] usb 2-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 435.317587][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 435.392765][ T9765] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 435.434385][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 435.450821][ T5745] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 435.486613][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.511087][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.512588][ T9765] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 435.585543][ T24] usb 2-1: Product: syz [ 435.623885][ T24] usb 2-1: Manufacturer: 庢៕ꍳ뽢㜩ૢå둦뤧찻閜㿆豙⃒Ì [ 435.767063][ T24] usb 2-1: SerialNumber: syz [ 435.966198][ T9780] binder: 9779:9780 ioctl 89f0 200000000580 returned -22 [ 436.331305][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'. [ 437.114810][ T24] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 437.164022][ T5745] usb 5-1: device descriptor read/8, error -71 [ 437.356375][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 437.448619][ T24] usb 2-1: USB disconnect, device number 43 [ 437.592695][ T30] audit: type=1400 audit(1785095756.299:1105): avc: denied { write } for pid=9800 comm="syz.2.920" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 437.915216][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.065357][ T9801] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 438.465151][ T1222] hid_parser_main: 5 callbacks suppressed [ 438.465171][ T1222] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 438.687778][ T1222] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 439.090443][ T1222] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 439.219083][ T9816] vivid-003: ================= START STATUS ================= [ 439.240169][ T9816] vivid-003: Radio HW Seek Mode: Bounded [ 439.248569][ T9816] vivid-003: Radio Programmable HW Seek: false [ 439.273544][ T9816] vivid-003: RDS Rx I/O Mode: Block I/O [ 439.360567][ T1222] usb 2-1: Using ep0 maxpacket: 8 [ 439.370590][ T9816] vivid-003: Generate RBDS Instead of RDS: false [ 439.384797][ T1222] usb 2-1: unable to get BOS descriptor or descriptor too short [ 439.414171][ T1222] usb 2-1: too many configurations: 66, using maximum allowed: 8 [ 439.440635][ T9816] vivid-003: RDS Reception: true [ 439.455671][ T1222] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 439.504197][ T1222] usb 2-1: can't read configurations, error -61 [ 439.515474][ T30] audit: type=1400 audit(1785095758.220:1106): avc: denied { append } for pid=9813 comm="syz.3.921" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 439.518723][ T9816] vivid-003: RDS Program Type: 0 inactive [ 439.761455][ T1222] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 439.772324][ T9816] vivid-003: RDS PS Name: inactive [ 439.796298][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.800925][ T9816] vivid-003: RDS Radio Text: inactive [ 439.869054][ T9816] vivid-003: RDS Traffic Announcement: false inactive [ 439.926900][ T9816] vivid-003: RDS Traffic Program: false inactive [ 439.957921][ T9816] vivid-003: RDS Music: false inactive [ 439.983665][ T1222] usb 2-1: Using ep0 maxpacket: 8 [ 439.991525][ T9816] vivid-003: ================== END STATUS ================== [ 440.054555][ T1222] usb 2-1: unable to get BOS descriptor or descriptor too short [ 440.088358][ T1222] usb 2-1: too many configurations: 66, using maximum allowed: 8 [ 440.147715][ T1222] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 440.201433][ T1222] usb 2-1: can't read configurations, error -61 [ 440.222042][ T1222] usb usb2-port1: attempt power cycle [ 440.249299][ T9826] syzkaller0: entered promiscuous mode [ 440.275318][ T9826] syzkaller0: entered allmulticast mode [ 440.580984][ T5716] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 440.595828][ T1222] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 440.652375][ T30] audit: type=1400 audit(1785095759.330:1107): avc: denied { read write } for pid=9828 comm="syz.2.925" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 440.739637][ T30] audit: type=1400 audit(1785095759.330:1108): avc: denied { open } for pid=9828 comm="syz.2.925" path="/182/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 440.774988][ T1222] usb 2-1: device descriptor read/8, error -71 [ 440.853754][ T9843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.928'. [ 440.887364][ T30] audit: type=1107 audit(1785095759.570:1109): pid=9841 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ti1[Po [ 440.887364][ T30] /v,L92MeX7xWϨ fXKSRUrj[jט\ȩ(,%90.: sϨ-I!>g&"/\Y=L3{!҃2Ԧpj>;ۺ/ٴف]a 'v-<$%Q5leFr=/a# [ 440.887364][ T30] Вh0VZ2' [ 441.134710][ T29] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 441.300258][ T5716] usb 6-1: Using ep0 maxpacket: 8 [ 441.500378][ T1222] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 441.642687][ T1222] usb 2-1: Using ep0 maxpacket: 32 [ 441.753488][ T1222] usb 2-1: unable to get BOS descriptor or descriptor too short [ 441.898900][ T1222] usb 2-1: too many endpoints for config 1 interface 2 altsetting 1: 128, using maximum allowed: 30 [ 441.988710][ T1222] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 442.287911][ T9852] xt_hashlimit: size too large, truncated to 1048576 [ 442.547824][ T1222] usb 2-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 128 [ 442.586496][ T1222] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 443.054287][ T1222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.217313][ T1222] usb 2-1: Product: syz [ 443.282298][ T1222] usb 2-1: Manufacturer: 庢៕ꍳ뽢㜩ૢå둦뤧찻閜㿆豙⃒Ì [ 443.412015][ T1222] usb 2-1: SerialNumber: syz [ 443.560685][ T5716] usb 6-1: device descriptor read/all, error -71 [ 447.261700][ T1222] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 447.403007][ T9865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.932'. [ 447.634423][ T1222] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 447.764210][ T1222] usb 2-1: USB disconnect, device number 47 [ 447.849710][ T30] audit: type=1400 audit(1785095766.551:1110): avc: denied { write } for pid=9873 comm="syz.5.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 447.903797][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.969734][ T1222] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 449.079466][ T5716] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 449.172666][ T1222] usb 2-1: device descriptor read/64, error -71 [ 449.273540][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 449.335761][ T5806] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 449.547780][ T5716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 449.572291][ T5716] usb 3-1: config 8 has an invalid interface number: 220 but max is 1 [ 449.581928][ T5716] usb 3-1: config 8 has an invalid descriptor of length 140, skipping remainder of the config [ 449.593840][ T5716] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 449.618595][ T5716] usb 3-1: config 8 has no interface number 0 [ 449.636091][ T5716] usb 3-1: config 8 interface 220 has no altsetting 0 [ 449.656010][ T5716] usb 3-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 449.669344][ T1222] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 449.670721][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.687952][ T5716] usb 3-1: Product: syz [ 449.696674][ T5716] usb 3-1: Manufacturer: syz [ 449.718791][ T5716] usb 3-1: SerialNumber: syz [ 449.723962][ T5806] usb 5-1: Using ep0 maxpacket: 8 [ 449.756861][ T5806] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 449.774261][ T5806] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 449.829356][ T1222] usb 2-1: device descriptor read/64, error -71 [ 449.834288][ T5806] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 449.851283][ T5806] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.894013][ T5806] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 449.905389][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.966064][ T1222] usb usb2-port1: attempt power cycle [ 449.979336][ T10] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 450.030520][ T5967] ------------[ cut here ]------------ [ 450.036314][ T5967] time_after(jiffies, warn_timeout) [ 450.036323][ T5967] WARNING: io_uring/io-wq.c:1370 at io_wq_put_and_exit+0x36c/0x9d0, CPU#1: syz.0.32/5967 [ 450.051999][ T5967] Modules linked in: [ 450.056061][ T5967] CPU: 1 UID: 0 PID: 5967 Comm: syz.0.32 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.067235][ T5967] Tainted: [L]=SOFTLOCKUP [ 450.071731][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 450.082338][ T5967] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 450.088382][ T5967] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 5f 0e 68 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 0f 73 f1 fc 4d 85 ff 79 aa e8 65 78 f1 fc 90 <0f> 0b 90 eb 9f e8 5a 78 f1 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 450.108942][ T5967] RSP: 0018:ffffc90004a078c0 EFLAGS: 00010293 [ 450.115682][ T5967] RAX: 0000000000000000 RBX: ffff88807daec000 RCX: ffffffff8518e431 [ 450.124167][ T5967] RDX: ffff88802bc2ca80 RSI: ffffffff8518e43b RDI: ffff88802bc2ca80 [ 450.132603][ T5967] RBP: fffffbfff1d01e50 R08: 0000000000000007 R09: 0000000000000000 [ 450.140898][ T5967] R10: ffffffffffffe8bb R11: 0000000000000000 R12: 00000001000022bb [ 450.149182][ T5967] R13: 0000000000001b58 R14: ffff88807daec018 R15: ffffffffffffe8bb [ 450.157510][ T5967] FS: 00007f477d1d56c0(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000 [ 450.166810][ T5967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.173861][ T5967] CR2: 00007ff2d91ffff8 CR3: 00000000549b0000 CR4: 00000000003526f0 [ 450.182354][ T5967] Call Trace: [ 450.185786][ T5967] [ 450.188836][ T5967] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 450.194824][ T5967] ? __pfx___might_resched+0x10/0x10 [ 450.200433][ T5967] ? io_wq_set_exit_on_idle+0x156/0x290 [ 450.206405][ T5967] io_uring_clean_tctx+0x114/0x180 [ 450.211770][ T5967] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 450.217628][ T5967] ? percpu_counter_add_batch+0xb9/0x230 [ 450.223528][ T5967] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 450.230319][ T5967] io_uring_cancel_generic+0x798/0x7f0 [ 450.235986][ T5967] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 450.242206][ T5967] ? __pfx___file_ref_put+0x10/0x10 [ 450.247616][ T5967] ? __pfx_autoremove_wake_function+0x10/0x10 [ 450.253947][ T5967] ? fput+0xd9/0x100 [ 450.257996][ T5967] ? io_uring_unreg_ringfd+0xca/0x140 [ 450.263865][ T5967] do_exit+0x344/0x2ae0 [ 450.268260][ T5967] ? __pfx_do_exit+0x10/0x10 [ 450.273074][ T5967] ? do_raw_spin_lock+0x128/0x260 [ 450.278315][ T5967] ? find_held_lock+0x2b/0x80 [ 450.283442][ T5967] ? get_signal+0x7e0/0x21e0 [ 450.288482][ T5967] do_group_exit+0xd5/0x2a0 [ 450.293286][ T5967] get_signal+0x1ec7/0x21e0 [ 450.297972][ T5967] ? __pfx_get_signal+0x10/0x10 [ 450.303026][ T5967] ? do_futex+0x190/0x440 [ 450.307524][ T5967] arch_do_signal_or_restart+0x91/0x7e0 [ 450.313290][ T5967] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 450.319713][ T5967] exit_to_user_mode_loop+0x139/0x6f0 [ 450.325293][ T5967] ? rcu_is_watching+0x12/0xc0 [ 450.330249][ T5967] do_syscall_64+0x666/0x870 [ 450.335011][ T5967] ? clear_bhb_loop+0x40/0x90 [ 450.339883][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.345984][ T5967] RIP: 0033:0x7f477ef9de99 [ 450.350575][ T5967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.370924][ T5967] RSP: 002b:00007f477d1d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 450.379740][ T5967] RAX: fffffffffffffe00 RBX: 00007f477f226098 RCX: 00007f477ef9de99 [ 450.388008][ T5967] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f477f226098 [ 450.396303][ T5967] RBP: 00007f477f226090 R08: 0000000000000000 R09: 0000000000000000 [ 450.404573][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.412861][ T5967] R13: 00007f477f226128 R14: 00007ffc1f6878c0 R15: 00007ffc1f6879a8 [ 450.421167][ T5967] [ 450.424296][ T5967] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 450.431559][ T5967] CPU: 1 UID: 0 PID: 5967 Comm: syz.0.32 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.442202][ T5967] Tainted: [L]=SOFTLOCKUP [ 450.446505][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 450.456537][ T5967] Call Trace: [ 450.459807][ T5967] [ 450.462713][ T5967] dump_stack_lvl+0x100/0x190 [ 450.467366][ T5967] vpanic+0x552/0x970 [ 450.471330][ T5967] ? __pfx_vpanic+0x10/0x10 [ 450.475807][ T5967] panic+0xd1/0xe0 [ 450.479513][ T5967] ? __pfx_panic+0x10/0x10 [ 450.483916][ T5967] ? check_panic_on_warn+0x1f/0x90 [ 450.489003][ T5967] check_panic_on_warn.cold+0x19/0x34 [ 450.494346][ T5967] ? io_wq_put_and_exit+0x36c/0x9d0 [ 450.499530][ T5967] __warn.cold+0x191/0x318 [ 450.503929][ T5967] __report_bug+0x30f/0x440 [ 450.508414][ T5967] ? io_wq_put_and_exit+0x36c/0x9d0 [ 450.513598][ T5967] ? __pfx___report_bug+0x10/0x10 [ 450.518597][ T5967] ? do_raw_spin_lock+0x128/0x260 [ 450.523596][ T5967] ? find_held_lock+0x2b/0x80 [ 450.528248][ T5967] ? __wait_for_common+0x1f3/0x4c0 [ 450.533342][ T5967] ? rcu_is_watching+0x12/0xc0 [ 450.538084][ T5967] ? io_wq_put_and_exit+0x36c/0x9d0 [ 450.543267][ T5967] report_bug+0xb2/0x220 [ 450.547501][ T5967] ? io_wq_put_and_exit+0x36c/0x9d0 [ 450.552685][ T5967] handle_bug+0x16a/0x2a0 [ 450.556998][ T5967] exc_invalid_op+0x17/0x50 [ 450.561477][ T5967] asm_exc_invalid_op+0x1a/0x20 [ 450.566298][ T5967] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 450.572087][ T5967] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 5f 0e 68 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 0f 73 f1 fc 4d 85 ff 79 aa e8 65 78 f1 fc 90 <0f> 0b 90 eb 9f e8 5a 78 f1 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 450.591667][ T5967] RSP: 0018:ffffc90004a078c0 EFLAGS: 00010293 [ 450.597706][ T5967] RAX: 0000000000000000 RBX: ffff88807daec000 RCX: ffffffff8518e431 [ 450.605658][ T5967] RDX: ffff88802bc2ca80 RSI: ffffffff8518e43b RDI: ffff88802bc2ca80 [ 450.613601][ T5967] RBP: fffffbfff1d01e50 R08: 0000000000000007 R09: 0000000000000000 [ 450.621542][ T5967] R10: ffffffffffffe8bb R11: 0000000000000000 R12: 00000001000022bb [ 450.629497][ T5967] R13: 0000000000001b58 R14: ffff88807daec018 R15: ffffffffffffe8bb [ 450.637457][ T5967] ? io_wq_put_and_exit+0x361/0x9d0 [ 450.642662][ T5967] ? io_wq_put_and_exit+0x36b/0x9d0 [ 450.647875][ T5967] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 450.653416][ T5967] ? __pfx___might_resched+0x10/0x10 [ 450.658687][ T5967] ? io_wq_set_exit_on_idle+0x156/0x290 [ 450.664226][ T5967] io_uring_clean_tctx+0x114/0x180 [ 450.669342][ T5967] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 450.674965][ T5967] ? percpu_counter_add_batch+0xb9/0x230 [ 450.680592][ T5967] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 450.687130][ T5967] io_uring_cancel_generic+0x798/0x7f0 [ 450.692586][ T5967] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 450.698548][ T5967] ? __pfx___file_ref_put+0x10/0x10 [ 450.703742][ T5967] ? __pfx_autoremove_wake_function+0x10/0x10 [ 450.709783][ T5967] ? fput+0xd9/0x100 [ 450.713652][ T5967] ? io_uring_unreg_ringfd+0xca/0x140 [ 450.719011][ T5967] do_exit+0x344/0x2ae0 [ 450.723161][ T5967] ? __pfx_do_exit+0x10/0x10 [ 450.727747][ T5967] ? do_raw_spin_lock+0x128/0x260 [ 450.732759][ T5967] ? find_held_lock+0x2b/0x80 [ 450.737434][ T5967] ? get_signal+0x7e0/0x21e0 [ 450.742007][ T5967] do_group_exit+0xd5/0x2a0 [ 450.746483][ T5967] get_signal+0x1ec7/0x21e0 [ 450.750976][ T5967] ? __pfx_get_signal+0x10/0x10 [ 450.755817][ T5967] ? do_futex+0x190/0x440 [ 450.760133][ T5967] arch_do_signal_or_restart+0x91/0x7e0 [ 450.765670][ T5967] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 450.771816][ T5967] exit_to_user_mode_loop+0x139/0x6f0 [ 450.777178][ T5967] ? rcu_is_watching+0x12/0xc0 [ 450.781931][ T5967] do_syscall_64+0x666/0x870 [ 450.786520][ T5967] ? clear_bhb_loop+0x40/0x90 [ 450.791192][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.797081][ T5967] RIP: 0033:0x7f477ef9de99 [ 450.801492][ T5967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.821078][ T5967] RSP: 002b:00007f477d1d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 450.829466][ T5967] RAX: fffffffffffffe00 RBX: 00007f477f226098 RCX: 00007f477ef9de99 [ 450.837430][ T5967] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f477f226098 [ 450.845391][ T5967] RBP: 00007f477f226090 R08: 0000000000000000 R09: 0000000000000000 [ 450.853343][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.861294][ T5967] R13: 00007f477f226128 R14: 00007ffc1f6878c0 R15: 00007ffc1f6879a8 [ 450.869247][ T5967] [ 450.872464][ T5967] Kernel Offset: disabled [ 450.876762][ T5967] Rebooting in 86400 seconds..