last executing test programs: 2m35.841006476s ago: executing program 2 (id=775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xfffe, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 2m35.756075562s ago: executing program 2 (id=777): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x801) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/sockstat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/sockstat\x00') r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, 0x0) setgroups(0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000300)={0x1, 0x980900, 0x6ff7365bd9e46a6f}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x328, 0x20a, 0x278, 0x328, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {0xff}, 0x3c, 0x0, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x8638, [0x6, 0x4], 0x4, 0x0, 0xa, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @private0, @remote, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x1, 0x4}, {0xfffd, 0x2, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x20, 0x45, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r7 = socket(0x23, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x89e0, &(0x7f00000000c0)) 2m34.308790552s ago: executing program 2 (id=779): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x220800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000200)) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pread64(r2, &(0x7f0000000280)=""/44, 0x2c, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xf7) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x101080) creat(&(0x7f0000000100)='./file0\x00', 0x1e6) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) getpid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x168, 0x168, 0xd0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x100000000000000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x2, 0x7, [0x15, 0x20, 0x3, 0x6, 0x36, 0x3, 0x0, 0x1f, 0x7, 0x1b, 0x16, 0x33, 0x16, 0x3a, 0x8, 0x3e], 0x2, 0xff8, 0x77f03117}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0x0, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x5c}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x1, [0x8, 0x2a, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x24, 0x28, 0x18, 0x22, 0x5], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x407}}}, 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x2000000, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m33.354855168s ago: executing program 2 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async, rerun: 32) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r7, 0xffffffffffffffff, 0x0) (async) r8 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m32.546375584s ago: executing program 2 (id=784): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f210040290000000109021200010000000009"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000001240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) 2m28.112871966s ago: executing program 2 (id=795): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000000}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') read$FUSE(r2, &(0x7f0000001880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50, 0x0, r3, {0x7, 0x2b, 0xea7, 0x2040, 0x800, 0x400, 0x5e9, 0x6, 0x0, 0x0, 0x4, 0x9}}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000180)='./file5\x00', 0x3) r6 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000300)) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x8000000, 0x900900, 0x3}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x3f, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000041401002dbd70effddbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m11.635187351s ago: executing program 32 (id=795): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000000}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') read$FUSE(r2, &(0x7f0000001880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50, 0x0, r3, {0x7, 0x2b, 0xea7, 0x2040, 0x800, 0x400, 0x5e9, 0x6, 0x0, 0x0, 0x4, 0x9}}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000180)='./file5\x00', 0x3) r6 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000300)) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x8000000, 0x900900, 0x3}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x3f, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000041401002dbd70effddbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 17.117153738s ago: executing program 3 (id=1098): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0xc818) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r5, 0x0, &(0x7f00000003c0)) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000ea45327af0600d06050000000000000000000500000a05000100070000dd0c000300686173683a6e65740000000005000500070000000e0003006269746d61ffff697000000005000100070000000500050000000000100003006269746d61703a706f7274000500"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000a00050002020100010000000000d5ac2d8da400"], 0x12) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) 13.917811365s ago: executing program 3 (id=1105): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa0) fcntl$setlease(r2, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000000000000080000000200000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100000000000000000000009c1e76c50000"], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xc, 0xc9, 0x4}}}, 0x7) getpid() r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000026008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffeec) 13.792088806s ago: executing program 4 (id=1106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) getpid() r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012920000905", @ANYBLOB="da05f9"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, 0x0, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) io_uring_enter(0xffffffffffffffff, 0x1733, 0x6323, 0x20, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x40, @vifc_lcl_ifindex, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r3) syz_genetlink_get_family_id$ieee802154(0x0, r3) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 13.325981805s ago: executing program 5 (id=1107): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x5, 0x7000000}, {0x20, 0x4}}, 0x24, 0x3) 12.961111176s ago: executing program 3 (id=1109): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061101407000000001d000000000000009500000010000000cdb6b1d14da22c2b30fa229a5c52b08e8722f788ce1731c285e1009368e26a907b866308270329ea4a3278f033854ac0ba789132543e3779b1e0ead973e6cdad1a486b149e94e3b158009940088d1a38e21105f17c5e9b54f9df225f34"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) 10.249870203s ago: executing program 3 (id=1111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) read$char_usb(r2, &(0x7f0000000380)=""/140, 0x8c) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023896) close(r4) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xe6, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa120800450000d800000000002f8067b938000000000000248065580000000000060002100008000005039e000086dd090088be00000000100c00000100000000000000080022eb00000000200000000200000000000000000321c762ae742c11bd1be4ec1ca300000800655800000000086b041e089725fe37cbf9f56d9f5940c822e8ae662d1e9889a3c6c07a1f832b7db8a6fbb301b2a232cd341a43fd53"], 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) syz_usb_disconnect(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket(0x1e, 0x4, 0x0) 9.983064762s ago: executing program 1 (id=1114): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3dba1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="9d080f005911a77500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000340)='./file0/file0\x00', 0x7fe9fbb4a2889635) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2010800, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000300)={0x6, &(0x7f0000000440)=[{0xb6, 0x8, 0x1, 0xec}, {0x3, 0xc, 0x2, 0x8}, {0x1000, 0x9, 0xde, 0x619}, {0x0, 0x40, 0x81, 0x7}, {0x200, 0x1, 0xff, 0x3}, {0x1, 0xdb, 0x5a, 0x1ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x101100, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r5) 7.907870305s ago: executing program 1 (id=1116): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x220800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='ALTPCM '], 0xf7) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r3, r2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x101080) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, 0xfffffffffffffffe) creat(&(0x7f0000000100)='./file0\x00', 0x1e6) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x27, 0xff, 0xf}, 0x2c) getpid() r6 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r6, 0x9, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x2010, r7, 0x0) userfaultfd(0x801) 7.060481778s ago: executing program 1 (id=1117): socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07e2dfff03000400000204000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000f00000000000000000218120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095", @ANYRESHEX=r2, @ANYRESHEX=r5, @ANYRES16=r6], &(0x7f00000000c0)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r7}, 0x20) sendmmsg$inet6(r7, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200810, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') pread64(r10, &(0x7f0000010300)=""/152, 0x98, 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 7.024559494s ago: executing program 3 (id=1118): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = socket(0xf, 0x4, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0r1}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x5}}, @var={0xf, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x5f, 0x30, 0x30, 0x0, 0x61, 0x30, 0x2e]}}, &(0x7f0000000900)=""/4096, 0x49, 0x1000, 0x1, 0x3, 0x10000, @value=r6}, 0x28) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001980), 0xe4100, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r8, {0x10001}}, './file0\x00'}) r9 = socket$pppoe(0x18, 0x1, 0x0) lseek(r9, 0x0, 0x4) ioctl$sock_inet_SIOCGIFADDR(r9, 0x8915, &(0x7f0000001a40)={'nr0\x00', {0x2, 0x0, @loopback}}) fdatasync(r5) ioctl$int_in(r6, 0x5421, &(0x7f0000001a80)=0x8) ioctl$VHOST_SET_VRING_NUM(r8, 0x4008af10, &(0x7f0000001ac0)={0x0, 0x3}) ioctl$EVIOCGBITKEY(r8, 0x80404521, &(0x7f0000001b00)=""/17) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000001b40)={0x73622a85, 0xa, 0x2}) dup3(0xffffffffffffffff, r7, 0x80000) 5.667936886s ago: executing program 5 (id=1123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x11, 0x0, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r3}, 0xc) syz_usb_connect(0x6, 0x4a, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0) (async) syz_usb_connect(0x6, 0x4a, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0) 5.645791085s ago: executing program 4 (id=1124): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000048601, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000000c0)={0x1, 0x0, 0x1fb, 0x10001, 0xfffffffffffffffe, 0x6, 0x4, 0x1fc, 0x9, 0x102002c, 0x49200000, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000600)) 5.585783424s ago: executing program 0 (id=1125): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = socket(0xf, 0x4, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) r4 = open(0x0, 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000004c0)={0x1d, r9, 0x100000000000, {0x2, 0xff, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4048081) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x18}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.778028327s ago: executing program 5 (id=1128): r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000100)) 3.24820083s ago: executing program 5 (id=1129): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000600)=0x14) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0xfffffffe}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x4048010) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000000)={&(0x7f00007a9000/0x14000)=nil, 0x14000}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0xfffffffffffffd11, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r9, 0x835, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff], [0x3ff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={r1, r9, 0x0, 0x10, 0x3}) 2.251725246s ago: executing program 4 (id=1130): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x81, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="09000000e700140003007ef52f55", 0xe, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) 1.645530987s ago: executing program 4 (id=1131): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x8041) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='net/icmp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000ff83cfcadc197b685839eef2ff254972e17673f468b05a7a21168d5489650f82a4a0ddbf05c17a8de3ec0a4c7ba2801e842a83f8c81f3cb9f9be008f97df4d8c0000000000000000ab1edf9ddb605f76ec212b646d3d4a89fb8bf6d76b6952eb03ce949da0", @ANYRES32=0x0, @ANYBLOB="320a0500230800003c0012800b00010069703667726500002c00028014000700ff00000000000000000000000000000114000600000000000000030000000000000000010800040005000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) 1.640644172s ago: executing program 1 (id=1132): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sendmsg$kcm(r2, &(0x7f0000001740)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa1}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000380)="c89f29b271d25a0f768dee266b3f4d57ac6d10b7cf95325342b00a6c9b9905fcd7d532301e5f5116555d1e75fbcf45fa3331816e9cc109d5be63f33028b33969483cfba54fa6e134b8bf16a1ce34fe83488c38f9a6125bbf56f015232f16eed55c8a7eada2f4163687dd018a8594d9ae715104a7e6bd3e94441caae08ac5be0435617c5afad5811a8acb87d80b1f0a58760b527c2eb7e7f1a37705d117635204ad34e5557d7cca880ec402f7a8a652c0e898f93ea42ac9af2048c567988ad68ad5bf2d34f51a6f5f4e8930a4ea8a25c1805edd7881fa", 0xd6}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000280)="cd81757971058ffa5038db45453dccd29567664f6fcd2144", 0x18}, {&(0x7f0000000480)="466c0d09f1e70da52ded89b55e6d41ca3afc093bca3b9d99b350aedb2e29075c65ee79869b9cf5fcb4b17011b575fdaf150115b2d408b017c94ab0d509d981835826dd545005ba117ecc581f7aaa9b91bb44ab2a46acb005d5bc00814da9ea19b49abc98e10cd68b2fc0841368bb204d8c85d0d60a3f52e6e5900051c463bd322bbb900d3a57c6aaa535d18209961a44d9af", 0x92}, {&(0x7f00000015c0)="a1bfda7d", 0x4}, {&(0x7f0000001600)="f71d1136f9686af3acb312561da8e56e2dd2e76a628aab7ca0d8f1fb924636c6fcad8fe36d5e952e928312f7c1b3c14a8db2d980bdfb9ce60031c7cbbf8daad65a1b073d393d69d93aea04a7c3fcd519553b3cec9edd8b86aa112ff551f8adb286c36e1330371dce0a6b13110db57ac2fa68193f19b6315d88e11aed9540f07aff66490612c5d10aae38e79c12ee58e1a348cd0a58da182350a2c54b59537d30183afe6d7ff167419cdcd2a6c6cc2b64", 0xb0}], 0x6}, 0x4040840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) write$uinput_user_dev(r3, &(0x7f0000001780)={'syz0\x00', {}, 0x0, [0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x252, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4001, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x6cf5, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0xfffffffd, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0xfffffffd, 0x0, 0xaf3, 0x0, 0x0, 0x0, 0x5]}, 0x45c) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b000)=""/102400, 0x19000) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x6, &(0x7f0000001c00)) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[], 0x15) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) bind$unix(r1, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=ANY=[]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1.528978959s ago: executing program 4 (id=1133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1c759000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x1a0, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0xb4, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6f}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8000}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x52}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x1}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x5}]}}, @CTA_TUPLE_REPLY={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0x92a}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @remote}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x402}, @CTA_ZONE={0x6}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x80804}, 0x10) 1.372141564s ago: executing program 0 (id=1134): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x72, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x34, 0xffffffffffffffff, [{0x0, 0xa, "e256b28c59881681"}, {0x7, 0x5, "020007"}, {0x0, 0x2}, {0x2, 0x4, "cfa1"}, {0x0, 0xd, "8475be675de6a70a05a0dc"}, {0x0, 0x5, "6580a5"}, {0x0, 0x7, "73bc23f9ff"}]}]}}}}}}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x7eabfcf2497233c6, 0x0, 0x0) 1.253581045s ago: executing program 0 (id=1135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r5 = gettid() (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000000c0)={0x0, 0x1, 0x8000000000003, 0x10000}) (async) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x33, 0x800000000004, @tid=r0}, &(0x7f00000002c0)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, r5}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYRES8=r4, @ANYRESOCT=r0, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRES8=r1, @ANYRES16=r4], 0x84}}, 0x4890) (async) socket$kcm(0xa, 0x3, 0x3a) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40100, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff7f000000000000060000008500000018000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) write$char_usb(r10, &(0x7f0000000000)='-0', 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r10, 0x40045010, &(0x7f0000000340)=0x6d46ea66) (async) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = dup(r11) write$6lowpan_enable(r12, &(0x7f0000000000)='0', 0xfffffd2c) 1.134263363s ago: executing program 3 (id=1136): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x1}, 0x18) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x26) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000001100)=[{{&(0x7f0000000400)=@file={0x1, './cgroup/../file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000480)="52c19f4b0afe27b30768d694a21e79f6524f55f3a86cde064de2d156d41eeeffb29d88d318450c138de8d80327cd8e9427c8f32b7ba1ace8c3342f3cf971be87e891bc10357d366752a0326a9c400f3ec19d205c658a896deb26c0f289d7b943bf3697817f08cdb0729ae923cd2bcb2c9f0d50332a0eb99c50833b923e0dedb0b2b64af489", 0x85}, {&(0x7f0000000e80)="ceb90056e56a64ee79e03f93982c28d707222ee4aefd3bcbebbc805103be77ca126fe9204a7aab7e0ae4bc6c31c53325108950a20c4648d89d9296cd3c88fff9ea5e7dabf6ffd9610cf974f7abfd3cdacbfe7bf7fe50de05595b5c64b1b4767a59b7dbeee190e412d8215ea635784ea58e827a16a4068dc130c05dbca1483a2ac44eb583c9f48353654effe6a0a627bdd3c2f6202c33d9b0217f3034baf253d4507c544ef6305a0c176ade60ffe0934a3c35c52c8f25a6d8cca6043c68", 0xbd}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x20008000}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000800)="b563a3412f1cbe5e952756a5bc50c6ef50749f0500428ac6969c8649c6bc01c9cf340717f14bdb8e831aeaa5a50b61e6bf16319bdcbe51ff8ae2a1b693edb62e091b31041c320583849edff7b861805df7eaafa7a7bbb230e03e63a928ae58e52a997b03868cfa5ace970efb9ef7d43d53dca5f4ef741832d77c850c311edc6966487ce638c3f9d2edbd9910c75cbca9421ed6cc9e0740e2afd364e6e268da74654f183a5d70d6416c1c2ee65db91758a9f9dd9cfc179d0a24a4f4f04a37f43cfb570ffd6bab8485f982c3362806d285c11ecf3e748718268a917fe04df77851198cb6bb8ee3", 0xe6}, {&(0x7f0000000940)="b2042a1cfe51b99c798b0e97c0a84b450ea2", 0x12}, {&(0x7f0000000980)="0441594c8f2a66ba3a03da87fa2f9565e770754a8a6b355b975f0a7eea8ad5f94a37add85d31c2107807fdfeef277b305941d90df6a5384eb16617f0051166979438a002d668325e3d5acd3a543b9fb6bae1fa36bb3e55505d143c21ee63324b9f8e4ba79c66f29c440e703d0c1daa7f93c24a19125c421a252683a69f302a82a6d2781fc861744077d6a9a18ff5f551685715e45261a2a5f5bf0513ce23616a6803f11abb68626c43c8e1a8bec3648e5fd94dc65c12ae551cd37d47e82c6255b76736ae5239f960c804d0ce2cb825f5353e7ce44031e3eacecbd6aec18429dc66fbc57bb72abe1948af7c7b9c2cbc7b61a9e6852fd58481c3c0c565", 0xfc}, {&(0x7f0000000a80)="3ee13d8d2c876edbb6573a2aae04cc350c320a5ef26913821d890be9a1a1dcc98094500eaa", 0x25}, {&(0x7f0000005080)="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", 0x1018}], 0x5, 0x0, 0x0, 0x24048095}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000003080)="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", 0x1000}, {&(0x7f0000000b40)="62c0980fc82f31d6e29a448e3befee9866130bf87fb843242f90646400b37f5da10d92ea519f9e0775b88eb73fd465acbe060f4d667a4c13b55c0e69bc4948a9fbfe62111497ae68de8cc46ea3c918e4b0549d15e38662366648ea1c9b0edd0b8c46a42172baadf0a9b5e5e2c22ca4678bda1da8b8273455fcc06128377a27876d295ce6c1e311c0a0ad653ed9b5e9b3f09cc2dc603356434b1a91023ded9ae862f99c", 0xa3}, {&(0x7f0000000c00)="153a44e6f4120f4404345db9ef2f4b691169d1bd5ca45002aa184ea05e78bc96f489ec83fe0ced552c3553f136c1e9fa6ac2bc1ff64278", 0x37}, {&(0x7f0000000c40)="f2fca515634738767452d8263c3823b94623f3aa386305464fc8aac61f134dd3578b24bf871802c94f4c4594a1982846bb28ade241760fbb579d9bf2f44e6721d36cbac3e334553ec5fc937bb2748c64b7f525bcb583584071f0872397502e18881ad1ea76c5c2ea81ab908d51ebad8f", 0x70}], 0x4, 0x0, 0x0, 0x40}}, {{&(0x7f0000000d00)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000d80)="2e9abeac23ab21436a354d4d0092c9949a4deb3d8841e452d0afc0acc7871cf3b4d703ce44cdd3fbf62e110771b0f7c2c43e19d1c9973f914cf8b0ff8aa0c15ad79dbe81b8b055550c4b104b45d8a18a6fbbb8bcf892b665f49633494b20adb3524f68e193bfb55823079c7ea14ac1a36e88391b19a629b23b823ca33c8cff6fe2e7d639b6d896ef666a45247541b9d52a856fec7b08ff2858f9e05b8baf0c68881daa846745c3066d5277be4fbbc44808445e289c7a", 0xb6}], 0x1, 0x0, 0x0, 0x20000004}}, {{0x0, 0x0, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x48840}}], 0x5, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r11, &(0x7f00000003c0)={&(0x7f0000000140)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, 0x0, 0x0) 1.081595317s ago: executing program 0 (id=1137): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x40000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = creat(0x0, 0x6a) r7 = fanotify_init(0x20, 0x800) fanotify_mark(r7, 0x641, 0x1020, r6, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, 0x0) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000c00)) sendmsg$NFT_BATCH(r0, 0x0, 0x40880) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb5, 0xf9, 0xc8, 0x8, 0xfe9, 0xdb98, 0x300c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd4, 0x0, 0x0, 0x5b, 0x11, 0x58}}]}}]}}, 0x0) 0s ago: executing program 5 (id=1138): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000048601, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000000c0)={0x1, 0x0, 0x1fb, 0x10001, 0xfffffffffffffffe, 0x6, 0x4, 0x1fc, 0x9, 0x102002c, 0x49200000, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000600)) kernel console output (not intermixed with test programs): sb 3-1: new high-speed USB device number 25 using dummy_hcd [ 322.882357][ T8745] tmpfs: Bad value for 'mpol' [ 323.302713][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 323.329094][ T5932] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.338396][ T5932] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 323.351639][ T8729] netlink: 244 bytes leftover after parsing attributes in process `syz.3.783'. [ 323.452123][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.470499][ T1835] usbhid 4-1:0.0: can't add hid device: -71 [ 323.477083][ T5932] usb 3-1: config 0 descriptor?? [ 323.478479][ T1835] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 323.510217][ T1835] usb 4-1: USB disconnect, device number 35 [ 324.805060][ T5818] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 324.815998][ T5818] Bluetooth: hci1: Injecting HCI hardware error event [ 324.825885][ T5820] Bluetooth: hci1: hardware error 0x00 [ 324.914564][ T8762] random: crng reseeded on system resumption [ 325.061794][ T5863] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 325.347200][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 325.347215][ T30] audit: type=1400 audit(1760412399.228:802): avc: denied { read write } for pid=8766 comm="syz.3.791" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 325.554128][ T5863] usb 2-1: device descriptor read/64, error -71 [ 325.621115][ T30] audit: type=1400 audit(1760412399.228:803): avc: denied { open } for pid=8766 comm="syz.3.791" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 325.649412][ T30] audit: type=1400 audit(1760412399.228:804): avc: denied { ioctl } for pid=8766 comm="syz.3.791" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 325.657842][ T8770] netlink: 'syz.0.792': attribute type 4 has an invalid length. [ 325.676757][ T8755] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 325.691071][ T8770] netlink: 'syz.0.792': attribute type 4 has an invalid length. [ 325.705823][ T30] audit: type=1400 audit(1760412399.588:805): avc: denied { create } for pid=8769 comm="syz.0.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 325.815529][ T5863] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 325.954239][ T5863] usb 2-1: device descriptor read/64, error -71 [ 326.069523][ T5863] usb usb2-port1: attempt power cycle [ 326.079869][ T30] audit: type=1400 audit(1760412399.948:806): avc: denied { read } for pid=8773 comm="syz.4.793" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 326.134587][ T30] audit: type=1400 audit(1760412399.948:807): avc: denied { open } for pid=8773 comm="syz.4.793" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 326.167420][ T30] audit: type=1400 audit(1760412399.948:808): avc: denied { ioctl } for pid=8773 comm="syz.4.793" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 326.299831][ T30] audit: type=1400 audit(1760412399.958:809): avc: denied { create } for pid=8773 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 326.494317][ T5863] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 326.504390][ T30] audit: type=1400 audit(1760412399.958:810): avc: denied { read } for pid=8773 comm="syz.4.793" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 326.530026][ T5863] usb 2-1: device descriptor read/8, error -71 [ 326.575722][ T30] audit: type=1400 audit(1760412399.968:811): avc: denied { open } for pid=8773 comm="syz.4.793" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 326.604542][ T5932] usb 3-1: USB disconnect, device number 25 [ 326.693748][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'. [ 326.884392][ T5820] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 326.905426][ T8780] fuse: Unknown parameter '0x0000000000000004' [ 327.194258][ T8786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 327.341222][ T8795] lo speed is unknown, defaulting to 1000 [ 327.347350][ T8795] lo speed is unknown, defaulting to 1000 [ 327.355305][ T8795] lo speed is unknown, defaulting to 1000 [ 327.403543][ T8795] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 329.169689][ T8795] lo speed is unknown, defaulting to 1000 [ 329.189845][ T8795] lo speed is unknown, defaulting to 1000 [ 329.211281][ T8795] lo speed is unknown, defaulting to 1000 [ 329.229375][ T8795] lo speed is unknown, defaulting to 1000 [ 329.249602][ T8795] lo speed is unknown, defaulting to 1000 [ 329.807514][ T5934] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 329.922927][ T8811] FAULT_INJECTION: forcing a failure. [ 329.922927][ T8811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.936795][ T8811] CPU: 1 UID: 0 PID: 8811 Comm: syz.4.801 Not tainted syzkaller #0 PREEMPT(full) [ 329.936819][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 329.936829][ T8811] Call Trace: [ 329.936835][ T8811] [ 329.936841][ T8811] dump_stack_lvl+0x16c/0x1f0 [ 329.936867][ T8811] should_fail_ex+0x512/0x640 [ 329.936892][ T8811] _copy_from_user+0x2e/0xd0 [ 329.936916][ T8811] csum_and_copy_from_iter_full+0x21a/0x1f90 [ 329.936956][ T8811] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 329.936983][ T8811] ? rcu_is_watching+0x12/0xc0 [ 329.937001][ T8811] ? trace_kmalloc+0x2b/0xd0 [ 329.937025][ T8811] ? __kmalloc_node_track_caller_noprof+0x362/0x8a0 [ 329.937049][ T8811] ? __alloc_skb+0x166/0x380 [ 329.937071][ T8811] ? rcu_watching_snap_stopped_since+0xe1/0x110 [ 329.937097][ T8811] ip_generic_getfrag+0x170/0x270 [ 329.937122][ T8811] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 329.937145][ T8811] ? __alloc_skb+0x200/0x380 [ 329.937163][ T8811] ? __pfx___alloc_skb+0x10/0x10 [ 329.937185][ T8811] raw6_getfrag+0x22d/0x2a0 [ 329.937212][ T8811] __ip6_append_data+0x3e12/0x4740 [ 329.937246][ T8811] ? __pfx_raw6_getfrag+0x10/0x10 [ 329.937280][ T8811] ? __pfx___ip6_append_data+0x10/0x10 [ 329.937306][ T8811] ? __pfx_ip6_mtu+0x10/0x10 [ 329.937327][ T8811] ? ip6_setup_cork+0xc51/0x1530 [ 329.937356][ T8811] ip6_append_data+0x1ba/0x4c0 [ 329.937382][ T8811] ? __pfx_raw6_getfrag+0x10/0x10 [ 329.937408][ T8811] rawv6_sendmsg+0x163e/0x4860 [ 329.937445][ T8811] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 329.937468][ T8811] ? avc_has_perm_noaudit+0x149/0x3b0 [ 329.937490][ T8811] ? avc_has_perm+0x144/0x1f0 [ 329.937507][ T8811] ? __pfx_avc_has_perm+0x10/0x10 [ 329.937552][ T8811] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 329.937578][ T8811] ? inet_sendmsg+0x11c/0x140 [ 329.937594][ T8811] inet_sendmsg+0x11c/0x140 [ 329.937612][ T8811] sock_write_iter+0x509/0x610 [ 329.937637][ T8811] ? __pfx_sock_write_iter+0x10/0x10 [ 329.937674][ T8811] ? __pfx_file_has_perm+0x10/0x10 [ 329.937697][ T8811] do_iter_readv_writev+0x662/0x9e0 [ 329.937720][ T8811] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 329.937740][ T8811] ? selinux_file_permission+0x126/0x660 [ 329.937766][ T8811] ? bpf_lsm_file_permission+0x9/0x10 [ 329.937789][ T8811] ? security_file_permission+0x71/0x210 [ 329.937816][ T8811] ? rw_verify_area+0xcf/0x6c0 [ 329.937837][ T8811] vfs_writev+0x35f/0xde0 [ 329.937864][ T8811] ? __pfx_vfs_writev+0x10/0x10 [ 329.937903][ T8811] ? __fget_files+0x20e/0x3c0 [ 329.937923][ T8811] ? __fget_files+0x190/0x3c0 [ 329.937952][ T8811] ? do_writev+0x28c/0x340 [ 329.937970][ T8811] do_writev+0x28c/0x340 [ 329.937989][ T8811] ? __pfx_do_writev+0x10/0x10 [ 329.938017][ T8811] do_syscall_64+0xcd/0xfa0 [ 329.938039][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.938056][ T8811] RIP: 0033:0x7f017678eec9 [ 329.938076][ T8811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.938092][ T8811] RSP: 002b:00007f01749b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 329.938109][ T8811] RAX: ffffffffffffffda RBX: 00007f01769e6180 RCX: 00007f017678eec9 [ 329.938120][ T8811] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 329.938130][ T8811] RBP: 00007f01749b4090 R08: 0000000000000000 R09: 0000000000000000 [ 329.938140][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.938150][ T8811] R13: 00007f01769e6218 R14: 00007f01769e6180 R15: 00007ffdeee61558 [ 329.938176][ T8811] [ 330.764095][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 330.799494][ T5934] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 330.820180][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.828789][ T5934] usb 2-1: Product: syz [ 330.833275][ T5934] usb 2-1: Manufacturer: syz [ 330.838385][ T5934] usb 2-1: SerialNumber: syz [ 330.871063][ T5934] usb 2-1: config 0 descriptor?? [ 330.943673][ T5934] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 331.186644][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 331.186663][ T30] audit: type=1400 audit(1760412405.068:832): avc: denied { create } for pid=8815 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.212795][ T30] audit: type=1400 audit(1760412405.078:833): avc: denied { ioctl } for pid=8815 comm="syz.0.804" path="socket:[19237]" dev="sockfs" ino=19237 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.315325][ T30] audit: type=1400 audit(1760412405.198:834): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 331.595714][ T1835] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 332.374345][ T5934] gspca_sonixj: reg_w1 err -110 [ 332.544544][ T5934] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 333.115858][ T30] audit: type=1400 audit(1760412406.968:835): avc: denied { getopt } for pid=8820 comm="syz.4.806" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 333.164209][ T30] audit: type=1400 audit(1760412406.978:836): avc: denied { read } for pid=8820 comm="syz.4.806" path="socket:[19247]" dev="sockfs" ino=19247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 333.298466][ T1835] usb 1-1: Using ep0 maxpacket: 32 [ 333.311840][ T1835] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.324483][ T1835] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 333.333627][ T1835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.337025][ T5934] usb 2-1: USB disconnect, device number 53 [ 333.344009][ T1835] usb 1-1: config 0 descriptor?? [ 334.741330][ T5935] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 334.793858][ T8835] xt_TCPMSS: Only works on TCP SYN packets [ 334.896445][ T5935] usb 4-1: device descriptor read/64, error -71 [ 335.166922][ T8839] random: crng reseeded on system resumption [ 335.283172][ T8834] netlink: 40 bytes leftover after parsing attributes in process `syz.4.810'. [ 335.304543][ T30] audit: type=1400 audit(1760412409.158:837): avc: denied { ioctl } for pid=8832 comm="syz.4.810" path="socket:[20267]" dev="sockfs" ino=20267 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 335.314114][ T5935] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 335.463067][ T30] audit: type=1400 audit(1760412409.338:838): avc: denied { create } for pid=8848 comm="syz.4.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 335.494743][ T5935] usb 4-1: device descriptor read/64, error -71 [ 335.626169][ T5935] usb usb4-port1: attempt power cycle [ 335.818040][ T8852] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.983181][ T8852] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.004152][ T5935] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 336.037440][ T5935] usb 4-1: device descriptor read/8, error -71 [ 336.058253][ T8852] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.152852][ T8852] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.163385][ T30] audit: type=1400 audit(1760412410.028:839): avc: denied { mount } for pid=8856 comm="syz.1.815" name="/" dev="hugetlbfs" ino=19289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 336.615170][ T5898] usb 1-1: USB disconnect, device number 24 [ 336.695846][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.722717][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.723335][ T8864] netlink: 'syz.0.818': attribute type 1 has an invalid length. [ 336.745765][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.755189][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.799989][ T8864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.840453][ T8864] bond1: (slave veth5): Enslaving as an active interface with a down link [ 337.009239][ T8870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.818'. [ 337.019174][ T30] audit: type=1400 audit(1760412410.888:840): avc: denied { create } for pid=8863 comm="syz.0.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 337.094146][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 337.122464][ T30] audit: type=1400 audit(1760412410.888:841): avc: denied { write } for pid=8863 comm="syz.0.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 337.142575][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.174190][ T5935] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 337.196064][ T5935] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 337.208160][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 337.221909][ T5935] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 337.234581][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.243022][ T5935] usb 4-1: Product: syz [ 337.264700][ T5935] usb 4-1: Manufacturer: syz [ 337.269333][ T5935] usb 4-1: SerialNumber: syz [ 337.287145][ T5935] usb 4-1: config 0 descriptor?? [ 337.294603][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 337.295947][ T30] audit: type=1400 audit(1760412411.168:842): avc: denied { shutdown } for pid=8871 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 337.346073][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 337.356574][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.369840][ T30] audit: type=1400 audit(1760412411.238:843): avc: denied { create } for pid=8871 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.401278][ T30] audit: type=1400 audit(1760412411.238:844): avc: denied { bind } for pid=8871 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.404288][ T24] usb 5-1: Product: syz [ 337.439202][ T30] audit: type=1400 audit(1760412411.308:845): avc: denied { setopt } for pid=8871 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.458579][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.469681][ T30] audit: type=1400 audit(1760412411.308:846): avc: denied { accept } for pid=8871 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.489431][ T24] usb 5-1: Manufacturer: syz [ 337.494944][ T30] audit: type=1400 audit(1760412411.308:847): avc: denied { create } for pid=8871 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 337.517007][ T24] usb 5-1: SerialNumber: syz [ 337.534725][ T30] audit: type=1400 audit(1760412411.308:848): avc: denied { getopt } for pid=8871 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 337.537176][ T24] usb 5-1: config 0 descriptor?? [ 337.666564][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 337.917052][ T30] audit: type=1400 audit(1760412411.308:849): avc: denied { ioctl } for pid=8871 comm="syz.1.820" path="socket:[19384]" dev="sockfs" ino=19384 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 337.941592][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.296422][ T8883] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 338.314744][ T8883] tmpfs: Unknown parameter 'fsuuid' [ 339.174260][ T24] gspca_sonixj: reg_w1 err -110 [ 339.254187][ T24] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 339.862631][ T5898] usb 5-1: USB disconnect, device number 23 [ 339.949515][ T8880] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 340.289350][ T24] usb 4-1: USB disconnect, device number 39 [ 340.374834][ T8893] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 340.679150][ T8898] netlink: 108 bytes leftover after parsing attributes in process `syz.3.825'. [ 342.664198][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 342.664231][ T30] audit: type=1326 audit(1760412416.438:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 342.834118][ T5935] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 342.983029][ T30] audit: type=1326 audit(1760412416.438:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 343.008825][ T30] audit: type=1326 audit(1760412416.438:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 343.052579][ T30] audit: type=1326 audit(1760412416.438:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 343.131628][ T5935] usb 5-1: device descriptor read/64, error -71 [ 343.182286][ T30] audit: type=1326 audit(1760412416.438:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 343.287152][ T30] audit: type=1326 audit(1760412416.438:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 343.341744][ T30] audit: type=1326 audit(1760412416.438:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 343.384281][ T5935] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 343.408225][ T30] audit: type=1326 audit(1760412416.438:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 343.480349][ T30] audit: type=1326 audit(1760412416.438:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 343.483732][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 343.534158][ T5935] usb 5-1: device descriptor read/64, error -71 [ 343.548943][ T30] audit: type=1326 audit(1760412416.438:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.1.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 343.615344][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 343.649451][ T5935] usb usb5-port1: attempt power cycle [ 343.691347][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.704944][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.713687][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.721511][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.729145][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.788651][ T8918] lo speed is unknown, defaulting to 1000 [ 343.816898][ T8918] lo speed is unknown, defaulting to 1000 [ 343.927214][ T8908] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 344.044814][ T5935] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 344.074910][ T5935] usb 5-1: device descriptor read/8, error -71 [ 344.291015][ T8918] chnl_net:caif_netlink_parms(): no params data found [ 344.354166][ T5935] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 344.407901][ T5935] usb 5-1: device descriptor read/8, error -71 [ 344.453961][ T8926] netlink: 60 bytes leftover after parsing attributes in process `syz.3.831'. [ 344.589042][ T8929] ieee802154 phy0 wpan0: encryption failed: -22 [ 344.607167][ T5935] usb usb5-port1: unable to enumerate USB device [ 345.506229][ T8918] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.542055][ T8918] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.568398][ T8918] bridge_slave_0: entered allmulticast mode [ 345.597423][ T8918] bridge_slave_0: entered promiscuous mode [ 345.605949][ T8918] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.615669][ T8918] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.616032][ T8940] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 345.622951][ T8918] bridge_slave_1: entered allmulticast mode [ 345.658501][ T8918] bridge_slave_1: entered promiscuous mode [ 345.705438][ T8918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.751478][ T8918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.843116][ T5820] Bluetooth: hci5: command tx timeout [ 346.378427][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 346.628119][ T8918] team0: Port device team_slave_0 added [ 347.363329][ T8918] team0: Port device team_slave_1 added [ 347.474979][ T8955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.519735][ T8918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.531930][ T8918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.557851][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.570963][ T8918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.705230][ T8918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.728916][ T8918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.754921][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.925401][ T5820] Bluetooth: hci5: command tx timeout [ 347.932339][ T8918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.314944][ T8918] hsr_slave_0: entered promiscuous mode [ 348.355144][ T8918] hsr_slave_1: entered promiscuous mode [ 348.366572][ T8918] debugfs: 'hsr0' already exists in 'hsr' [ 348.372441][ T8918] Cannot create hsr debugfs directory [ 348.539604][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 348.539619][ T30] audit: type=1400 audit(1760412422.418:946): avc: denied { read write } for pid=8957 comm="syz.3.841" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 348.568706][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.590763][ T30] audit: type=1400 audit(1760412422.418:947): avc: denied { open } for pid=8957 comm="syz.3.841" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 349.929117][ T8976] netlink: 256 bytes leftover after parsing attributes in process `syz.1.843'. [ 349.947602][ T8971] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 349.954551][ T8976] netlink: 72 bytes leftover after parsing attributes in process `syz.1.843'. [ 349.994544][ T5820] Bluetooth: hci5: command tx timeout [ 350.400196][ T30] audit: type=1400 audit(1760412424.278:948): avc: denied { create } for pid=8983 comm="syz.0.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 350.419528][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.653294][ T30] audit: type=1400 audit(1760412424.298:949): avc: denied { create } for pid=8977 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 350.847643][ T30] audit: type=1400 audit(1760412424.378:950): avc: denied { name_bind 0x1000000 } for pid=8977 comm="syz.1.844" path="socket:[21896]" dev="sockfs" ino=21896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 350.872861][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.064234][ T30] audit: type=1400 audit(1760412424.408:951): avc: denied { mount } for pid=8983 comm="syz.0.845" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 351.111655][ T8918] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 351.153897][ T8918] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 351.168965][ T30] audit: type=1400 audit(1760412424.468:952): avc: denied { write } for pid=8983 comm="syz.0.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 352.160715][ T30] audit: type=1400 audit(1760412424.808:953): avc: denied { write } for pid=8977 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 352.180651][ T5818] Bluetooth: hci5: command tx timeout [ 352.394992][ T8918] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.449842][ T8918] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 352.858919][ T30] audit: type=1400 audit(1760412426.738:954): avc: denied { read } for pid=9002 comm="syz.1.849" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 353.034701][ T30] audit: type=1400 audit(1760412426.738:955): avc: denied { open } for pid=9002 comm="syz.1.849" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 353.532338][ T9014] trusted_key: encrypted_key: master key parameter '' is invalid [ 353.549105][ T8918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.577901][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 353.577916][ T30] audit: type=1400 audit(1760412427.448:957): avc: denied { create } for pid=9015 comm="syz.1.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 353.607722][ T8918] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.620987][ T2863] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.628265][ T2863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.658437][ T2863] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.665642][ T2863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.933158][ T8918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.945611][ T8918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.963472][ T9020] mkiss: ax0: crc mode is auto. [ 353.984731][ T5932] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 354.393733][ T30] audit: type=1400 audit(1760412427.948:958): avc: denied { accept } for pid=9011 comm="syz.4.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.494000][ T30] audit: type=1400 audit(1760412427.948:959): avc: denied { connect } for pid=9011 comm="syz.4.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.704189][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.740805][ T30] audit: type=1400 audit(1760412428.318:960): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 354.792350][ T30] audit: type=1400 audit(1760412428.418:961): avc: denied { search } for pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.804615][ T5932] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 354.876508][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.905475][ T30] audit: type=1400 audit(1760412428.418:962): avc: denied { search } for pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 354.919310][ T5932] usb 4-1: config 0 descriptor?? [ 355.004818][ T30] audit: type=1400 audit(1760412428.418:963): avc: denied { search } for pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.027861][ T30] audit: type=1400 audit(1760412428.418:964): avc: denied { read } for pid=5479 comm="dhcpcd" name="n103" dev="tmpfs" ino=5001 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 355.031802][ T5932] pwc: Askey VC010 type 2 USB webcam detected. [ 355.063598][ T8918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.115181][ T30] audit: type=1400 audit(1760412428.418:965): avc: denied { open } for pid=5479 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=5001 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 355.159589][ T30] audit: type=1400 audit(1760412428.418:966): avc: denied { getattr } for pid=5479 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=5001 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 355.475314][ T5932] pwc: recv_control_msg error -32 req 02 val 2b00 [ 355.482398][ T5932] pwc: recv_control_msg error -32 req 02 val 2700 [ 355.490174][ T5932] pwc: recv_control_msg error -32 req 02 val 2c00 [ 355.497118][ T5932] pwc: recv_control_msg error -32 req 04 val 1000 [ 355.504061][ T5932] pwc: recv_control_msg error -32 req 04 val 1300 [ 355.512158][ T5932] pwc: recv_control_msg error -32 req 04 val 1400 [ 355.670404][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 355.976020][ T8918] veth0_vlan: entered promiscuous mode [ 356.026554][ T8918] veth1_vlan: entered promiscuous mode [ 356.117872][ T8918] veth0_macvtap: entered promiscuous mode [ 356.166847][ T8918] veth1_macvtap: entered promiscuous mode [ 356.216190][ T9049] usb usb8: usbfs: process 9049 (syz.0.855) did not claim interface 0 before use [ 356.230302][ T8918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.267256][ T8918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.295344][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.310163][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.356904][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.404442][ T5818] Bluetooth: hci5: command 0x0405 tx timeout [ 356.494165][ T5934] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 356.538372][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.644314][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 356.702704][ T5934] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 356.713056][ T5934] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.745928][ T5934] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.769550][ T5934] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.779137][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.793956][ T5934] usb 1-1: Product: syz [ 356.799490][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.810036][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.821061][ T5934] usb 1-1: Manufacturer: syz [ 356.828255][ T5934] usb 1-1: SerialNumber: syz [ 356.841216][ T9051] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 356.962782][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.971463][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.281146][ T5934] usb 1-1: 0:2 : does not exist [ 357.359393][ T1206] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 357.523060][ T1206] usb 5-1: unable to get BOS descriptor or descriptor too short [ 357.531869][ T1206] usb 5-1: config 14 has an invalid interface number: 10 but max is 0 [ 357.554265][ T1206] usb 5-1: config 14 has no interface number 0 [ 357.605926][ T1206] usb 5-1: config 14 interface 10 has no altsetting 0 [ 357.618713][ T1206] usb 5-1: string descriptor 0 read error: -22 [ 357.625163][ T1206] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=39.3d [ 357.644319][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.714944][ T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 357.887646][ T42] usb 6-1: config 0 has no interfaces? [ 357.902221][ T42] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.927965][ T1206] usb 5-1: USB disconnect, device number 28 [ 357.939405][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.983969][ T42] usb 6-1: Product: syz [ 358.004812][ T42] usb 6-1: Manufacturer: syz [ 358.009450][ T42] usb 6-1: SerialNumber: syz [ 358.046707][ T42] usb 6-1: config 0 descriptor?? [ 358.277159][ T5934] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 358.373930][ T42] usb 6-1: USB disconnect, device number 2 [ 358.450370][ T5934] usb 1-1: USB disconnect, device number 25 [ 358.525278][ T5932] pwc: recv_control_msg error -71 req 02 val 2000 [ 358.539786][ T5932] pwc: recv_control_msg error -71 req 02 val 2100 [ 358.552849][ T6493] udevd[6493]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.594425][ T5932] pwc: recv_control_msg error -71 req 04 val 1500 [ 358.638845][ T5932] pwc: recv_control_msg error -71 req 02 val 2500 [ 358.664966][ T5932] pwc: recv_control_msg error -71 req 02 val 2400 [ 358.672236][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 358.672251][ T30] audit: type=1400 audit(1760412432.548:984): avc: denied { create } for pid=9066 comm="syz.3.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 358.715003][ T5932] pwc: recv_control_msg error -71 req 02 val 2600 [ 358.732142][ T5932] pwc: recv_control_msg error -71 req 02 val 2900 [ 358.751843][ T30] audit: type=1400 audit(1760412432.558:985): avc: denied { read write } for pid=9066 comm="syz.3.860" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 359.840001][ T5932] pwc: recv_control_msg error -71 req 02 val 2800 [ 359.846926][ T30] audit: type=1400 audit(1760412432.558:986): avc: denied { open } for pid=9066 comm="syz.3.860" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 359.870598][ T5932] pwc: recv_control_msg error -71 req 04 val 1100 [ 359.940332][ T9074] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 359.948989][ T9074] tmpfs: Unknown parameter 'fsuuid' [ 360.024949][ T5932] pwc: recv_control_msg error -71 req 04 val 1200 [ 360.292927][ T30] audit: type=1400 audit(1760412432.938:987): avc: denied { shutdown } for pid=9066 comm="syz.3.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 360.302665][ T5932] pwc: Registered as video103. [ 360.352107][ T5932] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 360.368972][ T5932] usb 4-1: USB disconnect, device number 40 [ 360.384562][ T30] audit: type=1400 audit(1760412433.008:988): avc: denied { name_connect } for pid=9066 comm="syz.3.860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 360.436730][ T30] audit: type=1400 audit(1760412433.768:989): avc: denied { ioctl } for pid=9066 comm="syz.3.860" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x556a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 360.691663][ T30] audit: type=1400 audit(1760412434.238:990): avc: denied { read } for pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=3271 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 361.401071][ T30] audit: type=1400 audit(1760412434.238:991): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3271 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 361.544285][ T30] audit: type=1400 audit(1760412434.238:992): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3271 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 361.658428][ T30] audit: type=1400 audit(1760412434.398:993): avc: denied { append } for pid=9078 comm="syz.4.863" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 362.028913][ T1835] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 362.206029][ T1835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 362.255369][ T1835] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 362.269347][ T1835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.293366][ T1835] usb 6-1: config 0 descriptor?? [ 362.420986][ T9099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9099 comm=syz.4.869 [ 362.688810][ T9104] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 362.703332][ T5935] usb 6-1: USB disconnect, device number 3 [ 362.705650][ T9104] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 362.720159][ T9104] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 363.089808][ T9112] lo speed is unknown, defaulting to 1000 [ 363.098434][ T9112] lo speed is unknown, defaulting to 1000 [ 363.354344][ T1835] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 363.934157][ T1835] usb 5-1: Using ep0 maxpacket: 32 [ 363.940692][ T1835] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.956703][ T1835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 363.963320][ T1835] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 364.124288][ T1835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.146539][ T1835] usb 5-1: config 0 descriptor?? [ 364.364366][ T42] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 364.438208][ T1835] usbhid 5-1:0.0: can't add hid device: -71 [ 364.447565][ T1835] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 364.468731][ T1835] usb 5-1: USB disconnect, device number 29 [ 364.524308][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 364.531022][ T42] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 364.542035][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.598628][ T42] usb 1-1: config 0 descriptor?? [ 364.832023][ T9123] random: crng reseeded on system resumption [ 364.838371][ T42] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 364.852629][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 364.852642][ T30] audit: type=1400 audit(1760412438.728:1007): avc: denied { firmware_load } for pid=42 comm="kworker/1:1" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 364.853113][ T42] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 364.948577][ T42] dib0700: firmware download failed at 7 with -22 [ 364.950685][ T9129] tipc: Started in network mode [ 364.983177][ T9129] tipc: Node identity 7eb643250ada, cluster identity 4711 [ 365.001285][ T9129] tipc: Enabled bearer , priority 0 [ 365.001384][ T42] usb 1-1: USB disconnect, device number 26 [ 365.295255][ T9129] tipc: Disabling bearer [ 367.573901][ T30] audit: type=1400 audit(1760412441.358:1008): avc: denied { bind } for pid=9156 comm="syz.3.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 367.604686][ T30] audit: type=1400 audit(1760412441.368:1009): avc: denied { connect } for pid=9156 comm="syz.3.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 367.634411][ T30] audit: type=1400 audit(1760412441.368:1010): avc: denied { accept } for pid=9156 comm="syz.3.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 369.228980][ T30] audit: type=1326 audit(1760412443.098:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 369.378955][ T9180] audit: audit_backlog=65 > audit_backlog_limit=64 [ 369.398110][ T9180] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 369.428409][ T30] audit: type=1326 audit(1760412443.098:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 369.484847][ T9180] audit: backlog limit exceeded [ 369.719329][ T30] audit: type=1326 audit(1760412443.098:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 369.886392][ T30] audit: type=1326 audit(1760412443.098:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 370.115958][ T30] audit: type=1326 audit(1760412443.098:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 370.155081][ T30] audit: type=1326 audit(1760412443.098:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 370.329797][ T30] audit: type=1326 audit(1760412443.098:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 370.353706][ T30] audit: type=1326 audit(1760412443.098:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 370.381017][ T30] audit: type=1326 audit(1760412443.098:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 370.404847][ T30] audit: type=1326 audit(1760412443.098:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 370.429827][ T30] audit: type=1326 audit(1760412443.098:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 370.462503][ T30] audit: type=1326 audit(1760412443.098:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 370.487964][ T30] audit: type=1326 audit(1760412443.098:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 371.730953][ T9194] vivid-008: kernel_thread() failed [ 372.354511][ T9195] netlink: 'syz.5.893': attribute type 4 has an invalid length. [ 372.638459][ T9195] syz.5.893 (9195) used greatest stack depth: 20112 bytes left [ 373.084223][ T5935] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 373.482507][ T5935] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 373.492841][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.543866][ T5935] usb 6-1: config 0 descriptor?? [ 374.008145][ T5935] usb 6-1: Cannot set MAC address [ 374.013443][ T5935] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 374.124265][ T5935] usb 6-1: USB disconnect, device number 4 [ 375.954542][ T5934] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 376.365072][ T5934] usb 5-1: Using ep0 maxpacket: 16 [ 376.395771][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 376.429094][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 376.460587][ T5934] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 376.477912][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 376.477927][ T30] audit: type=1400 audit(1760412450.358:1114): avc: denied { setopt } for pid=9237 comm="syz.3.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 376.514046][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.629414][ T5934] usb 5-1: Product: syz [ 376.655160][ T9234] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.699040][ T5934] usb 5-1: Manufacturer: syz [ 376.710597][ T5934] usb 5-1: SerialNumber: syz [ 376.741723][ T9234] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.760093][ T5934] usb 5-1: config 0 descriptor?? [ 376.786428][ T5934] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 376.821434][ T9234] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.891448][ T5934] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 376.913489][ T9234] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.943690][ T30] audit: type=1400 audit(1760412450.818:1115): avc: denied { name_bind } for pid=9243 comm="syz.5.907" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 376.965266][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.988964][ T9247] netlink: 34 bytes leftover after parsing attributes in process `syz.0.908'. [ 377.040581][ T9228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.069476][ T9228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.113424][ T5934] usb 5-1: USB disconnect, device number 30 [ 377.176828][ T5934] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 377.200536][ T5934] kobil_sct 5-1:0.0: device disconnected [ 377.299046][ T30] audit: type=1400 audit(1760412451.178:1116): avc: denied { ioctl } for pid=9250 comm="syz.5.910" path="pid:[4026533943]" dev="nsfs" ino=4026533943 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 377.564133][ T5932] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 377.693703][ T3526] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.739189][ T3526] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.752545][ T5932] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.776181][ T3526] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.784967][ T3526] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.801086][ T5932] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.853070][ T9255] netlink: 68 bytes leftover after parsing attributes in process `syz.4.912'. [ 377.885334][ T5932] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 377.915435][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 377.943858][ T5932] usb 6-1: SerialNumber: syz [ 378.249119][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.255468][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.375644][ T5932] usb 6-1: 0:2 : does not exist [ 378.380636][ T5932] usb 6-1: unit 5 not found! [ 379.238901][ T5932] usb 6-1: USB disconnect, device number 5 [ 379.294404][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 379.332798][ T6493] udevd[6493]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.456938][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 379.464501][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.475535][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.488125][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 379.498486][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.515968][ T24] usb 4-1: config 0 descriptor?? [ 380.033153][ T24] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 380.194955][ T9260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.726086][ T9260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.759890][ T24] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 380.822261][ T24] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 380.864785][ T24] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 380.871609][ T24] savu 0003:1E7D:2D5A.0015: unknown main item tag 0x0 [ 381.032991][ T9289] i2c i2c-0: Invalid block write size 33 [ 381.086808][ T30] audit: type=1400 audit(1760412454.928:1117): avc: denied { read } for pid=9282 comm="syz.0.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 381.847864][ T24] savu 0003:1E7D:2D5A.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 381.875938][ T24] usb 4-1: USB disconnect, device number 41 [ 381.960296][ T9293] fido_id[9293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 383.434816][ T30] audit: type=1400 audit(1760412457.318:1118): avc: denied { create } for pid=9312 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 383.729219][ T30] audit: type=1400 audit(1760412457.528:1119): avc: denied { connect } for pid=9312 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 383.780905][ T30] audit: type=1400 audit(1760412457.528:1120): avc: denied { setopt } for pid=9312 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 383.800196][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.224192][ T1835] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 384.390443][ T1835] usb 5-1: config 0 has no interfaces? [ 384.429841][ T1835] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.441648][ T1835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.475828][ T1835] usb 5-1: Product: syz [ 384.519968][ T1835] usb 5-1: Manufacturer: syz [ 384.540391][ T1835] usb 5-1: SerialNumber: syz [ 384.621821][ T1835] usb 5-1: config 0 descriptor?? [ 385.038436][ T24] usb 5-1: USB disconnect, device number 31 [ 385.284346][ T5932] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 385.444117][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 385.456128][ T5932] usb 1-1: config 174 has too many interfaces: 165, using maximum allowed: 32 [ 385.478058][ T5932] usb 1-1: config 174 contains an unexpected descriptor of type 0x1, skipping [ 385.497213][ T5932] usb 1-1: config 174 has an invalid descriptor of length 34, skipping remainder of the config [ 385.519425][ T5932] usb 1-1: config 174 has 0 interfaces, different from the descriptor's value: 165 [ 385.554059][ T5932] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 385.610453][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.772973][ T9338] ptrace attach of "./syz-executor exec"[5812] was attempted by ""[9338] [ 385.785913][ T30] audit: type=1400 audit(1760412459.668:1121): avc: denied { map } for pid=9337 comm="syz.4.933" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 386.057879][ T9334] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 386.064430][ T9334] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 386.071909][ T9334] vhci_hcd vhci_hcd.0: Device attached [ 386.246264][ T9346] sp0: Synchronizing with TNC [ 386.284390][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 386.286176][ T5935] vhci_hcd: vhci_device speed not set [ 386.414138][ T24] usb 5-1: device descriptor read/64, error -71 [ 386.419398][ T9346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.431430][ T9346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.524942][ T30] audit: type=1400 audit(1760412460.368:1122): avc: denied { read } for pid=9333 comm="syz.0.931" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 386.548033][ T5935] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 386.609143][ T30] audit: type=1400 audit(1760412460.378:1123): avc: denied { open } for pid=9333 comm="syz.0.931" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 386.685184][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 386.717996][ T9344] vhci_hcd: connection reset by peer [ 386.719525][ T5932] usb 1-1: string descriptor 0 read error: -71 [ 386.733129][ T386] vhci_hcd: stop threads [ 386.738343][ T386] vhci_hcd: release socket [ 386.738385][ T5932] usb 1-1: USB disconnect, device number 27 [ 386.757889][ T386] vhci_hcd: disconnect device [ 386.814529][ T24] usb 5-1: device descriptor read/64, error -71 [ 386.927885][ T30] audit: type=1400 audit(1760412460.808:1124): avc: denied { mounton } for pid=9349 comm="syz.5.936" path="/15/file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 386.934558][ T24] usb usb5-port1: attempt power cycle [ 387.026228][ T30] audit: type=1400 audit(1760412460.908:1125): avc: denied { map } for pid=9355 comm="syz.5.938" path="/dev/v4l-subdev0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 387.049821][ T30] audit: type=1400 audit(1760412460.908:1126): avc: denied { execute } for pid=9355 comm="syz.5.938" path="/dev/v4l-subdev0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 387.304090][ T5932] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 387.344243][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 387.365557][ T24] usb 5-1: device descriptor read/8, error -71 [ 387.466027][ T5932] usb 2-1: unable to get BOS descriptor or descriptor too short [ 387.474455][ T5932] usb 2-1: not running at top speed; connect to a high speed hub [ 387.486038][ T5932] usb 2-1: config 5 has an invalid interface number: 215 but max is 0 [ 387.499390][ T5932] usb 2-1: config 5 has no interface number 0 [ 387.505963][ T5932] usb 2-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 387.524285][ T5932] usb 2-1: config 5 interface 215 has no altsetting 0 [ 387.808094][ T5932] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 387.817305][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.843519][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 387.851954][ T5932] usb 2-1: Product: syz [ 387.861617][ T5932] usb 2-1: Manufacturer: syz [ 387.868648][ T5932] usb 2-1: SerialNumber: syz [ 388.009608][ T24] usb 5-1: device descriptor read/8, error -71 [ 388.081876][ T9353] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 388.175496][ T24] usb usb5-port1: unable to enumerate USB device [ 388.309909][ T5932] cypress_m8 2-1:5.215: DeLorme Earthmate USB converter detected [ 388.340171][ T5932] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 388.367285][ T5932] usb 2-1: USB disconnect, device number 54 [ 388.385243][ T9367] netlink: 'syz.0.940': attribute type 4 has an invalid length. [ 388.399045][ T5932] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 388.423707][ T5932] cypress_m8 2-1:5.215: device disconnected [ 389.477698][ T9383] fuse: Unknown parameter '' [ 389.522087][ T24] libceph: connect (1)[c::]:6789 error -101 [ 389.554708][ T9383] ceph: No mds server is up or the cluster is laggy [ 389.580010][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 389.647960][ T42] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 389.834273][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 389.869640][ T42] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 389.901697][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.913163][ T42] usb 1-1: Product: syz [ 389.940740][ T42] usb 1-1: Manufacturer: syz [ 389.945697][ T42] usb 1-1: SerialNumber: syz [ 389.967489][ T42] usb 1-1: config 0 descriptor?? [ 389.986006][ T42] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 391.636159][ T42] gspca_sonixj: reg_w1 err -110 [ 391.754571][ T5935] vhci_hcd: vhci_device speed not set [ 391.984135][ T42] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 392.095766][ T5934] usb 1-1: USB disconnect, device number 28 [ 392.223496][ T42] IPVS: starting estimator thread 0... [ 392.255041][ T9405] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 392.404122][ T9409] IPVS: using max 42 ests per chain, 100800 per kthread [ 393.634104][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 393.916497][ T9415] netlink: 'syz.0.954': attribute type 4 has an invalid length. [ 393.984197][ T24] usb 2-1: device descriptor read/64, error -71 [ 394.244201][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 394.351860][ T9404] ALSA: mixer_oss: invalid OSS volume '0x00007f4fe7b45000' [ 394.414954][ T24] usb 2-1: device descriptor read/64, error -71 [ 394.535405][ T24] usb usb2-port1: attempt power cycle [ 394.914238][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 394.945229][ T24] usb 2-1: device descriptor read/8, error -71 [ 395.131027][ T9419] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 395.142661][ T9419] block device autoloading is deprecated and will be removed. [ 395.249891][ T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 395.424113][ T5934] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 395.534231][ T24] usb 2-1: device not accepting address 58, error -71 [ 395.544976][ T24] usb usb2-port1: unable to enumerate USB device [ 395.741996][ T5934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 395.805144][ T5934] usb 4-1: not running at top speed; connect to a high speed hub [ 395.828096][ T5934] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 395.840747][ T5934] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 395.849416][ T5934] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 395.859334][ T5934] usb 4-1: config 129 has no interface number 0 [ 395.879304][ T5934] usb 4-1: config 129 has no interface number 1 [ 395.890168][ T5934] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 395.904135][ T24] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 395.913265][ T5934] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 395.941070][ T5934] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 396.005250][ T5934] usb 4-1: config 129 interface 135 has no altsetting 0 [ 396.012245][ T5934] usb 4-1: config 129 interface 5 has no altsetting 0 [ 396.041158][ T30] audit: type=1400 audit(1760412469.908:1127): avc: denied { bind } for pid=9432 comm="syz.4.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 396.063807][ T5934] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 396.093756][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.097980][ T9436] random: crng reseeded on system resumption [ 396.104322][ T30] audit: type=1400 audit(1760412469.908:1128): avc: denied { read } for pid=9432 comm="syz.4.960" path="socket:[23437]" dev="sockfs" ino=23437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 396.131465][ T5934] usb 4-1: Product: syz [ 396.139999][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 396.140052][ T5934] usb 4-1: Manufacturer: syz [ 396.164270][ T5934] usb 4-1: SerialNumber: syz [ 396.180088][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 396.186702][ T9433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.224910][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 396.234415][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.242549][ T24] usb 2-1: Product: syz [ 396.249635][ T24] usb 2-1: Manufacturer: syz [ 396.255524][ T24] usb 2-1: SerialNumber: syz [ 396.277078][ T9439] netlink: 68 bytes leftover after parsing attributes in process `syz.0.962'. [ 396.329043][ T24] usb 2-1: config 0 descriptor?? [ 396.955807][ T9441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.963'. [ 397.207626][ T5934] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 397.316593][ T5934] usb 4-1: MIDIStreaming interface descriptor not found [ 397.414883][ T5935] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 397.427493][ T30] audit: type=1400 audit(1760412471.298:1129): avc: denied { connect } for pid=9426 comm="syz.1.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 397.477825][ T5934] usb 4-1: USB disconnect, device number 42 [ 397.521358][ T5828] udevd[5828]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 397.634154][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 397.653703][ T5935] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 397.660314][ T7688] udevd[7688]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:129.5/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 397.683930][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.728211][ T5935] usb 5-1: Product: syz [ 397.740535][ T5935] usb 5-1: Manufacturer: syz [ 397.752416][ T5935] usb 5-1: SerialNumber: syz [ 397.764898][ T5935] usb 5-1: config 0 descriptor?? [ 397.802718][ T5935] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 398.044246][ T1835] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 398.135177][ T9468] netlink: 'syz.3.967': attribute type 4 has an invalid length. [ 398.226857][ T1835] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 398.241597][ T1835] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0 [ 398.291339][ T1835] usb 1-1: config 16 interface 0 has no altsetting 0 [ 398.314862][ T1835] usb 1-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 398.384513][ T30] audit: type=1400 audit(1760412472.248:1130): avc: denied { read } for pid=9463 comm="syz.5.966" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 398.444847][ T1835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.485638][ T6596] Bluetooth: hci6: Frame reassembly failed (-84) [ 398.494031][ T30] audit: type=1400 audit(1760412472.248:1131): avc: denied { open } for pid=9463 comm="syz.5.966" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 398.533286][ T30] audit: type=1400 audit(1760412472.248:1132): avc: denied { map } for pid=9463 comm="syz.5.966" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 399.295227][ T5935] gspca_sonixj: reg_w1 err -110 [ 399.391513][ T5935] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 400.018627][ T1206] usb 5-1: USB disconnect, device number 36 [ 400.062295][ T9461] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 400.154314][ T24] usb 2-1: USB disconnect, device number 59 [ 400.279520][ T1835] usb 1-1: string descriptor 0 read error: -71 [ 400.483055][ T5820] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 400.562292][ T1835] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 400.571019][ T1835] imon 1-1:16.0: unable to initialize intf0, err -19 [ 400.602688][ T1835] imon:imon_probe: failed to initialize context! [ 400.639790][ T1835] imon 1-1:16.0: unable to register, err -19 [ 400.715543][ T1835] usb 1-1: USB disconnect, device number 29 [ 402.568824][ T9504] FAULT_INJECTION: forcing a failure. [ 402.568824][ T9504] name failslab, interval 1, probability 0, space 0, times 0 [ 402.581840][ T9504] CPU: 0 UID: 0 PID: 9504 Comm: syz.1.979 Not tainted syzkaller #0 PREEMPT(full) [ 402.581861][ T9504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 402.581870][ T9504] Call Trace: [ 402.581874][ T9504] [ 402.581879][ T9504] dump_stack_lvl+0x16c/0x1f0 [ 402.581896][ T9504] should_fail_ex+0x512/0x640 [ 402.581909][ T9504] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 402.581924][ T9504] should_failslab+0xc2/0x120 [ 402.581940][ T9504] kmem_cache_alloc_noprof+0x75/0x6e0 [ 402.581951][ T9504] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 402.581969][ T9504] ? mas_preallocate+0xe6a/0x11f0 [ 402.581985][ T9504] ? mas_preallocate+0xe6a/0x11f0 [ 402.581997][ T9504] mas_preallocate+0xe6a/0x11f0 [ 402.582013][ T9504] ? __pfx_mas_preallocate+0x10/0x10 [ 402.582025][ T9504] ? rcu_is_watching+0x12/0xc0 [ 402.582040][ T9504] ? anon_vma_name+0x81/0x2f0 [ 402.582059][ T9504] __split_vma+0x34a/0x1070 [ 402.582072][ T9504] ? __pfx___split_vma+0x10/0x10 [ 402.582083][ T9504] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 402.582103][ T9504] vms_gather_munmap_vmas+0x3aa/0x1340 [ 402.582122][ T9504] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 402.582133][ T9504] ? move_page_tables+0xf9e/0x4230 [ 402.582148][ T9504] ? __pfx_copy_vma+0x10/0x10 [ 402.582163][ T9504] do_vmi_align_munmap+0x286/0x7e0 [ 402.582177][ T9504] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 402.582210][ T9504] do_vmi_munmap+0x204/0x3e0 [ 402.582223][ T9504] move_vma+0x801/0x1770 [ 402.582237][ T9504] ? __pfx_move_vma+0x10/0x10 [ 402.582257][ T9504] ? vrm_set_new_addr+0x208/0x290 [ 402.582270][ T9504] mremap_to+0x1b7/0x450 [ 402.582282][ T9504] do_mremap+0x13a8/0x2020 [ 402.582300][ T9504] ? __pfx_do_mremap+0x10/0x10 [ 402.582315][ T9504] ? ksys_write+0x190/0x250 [ 402.582333][ T9504] __do_sys_mremap+0x119/0x170 [ 402.582345][ T9504] ? __pfx___do_sys_mremap+0x10/0x10 [ 402.582356][ T9504] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 402.582384][ T9504] do_syscall_64+0xcd/0xfa0 [ 402.582397][ T9504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.582408][ T9504] RIP: 0033:0x7f066018eec9 [ 402.582418][ T9504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.582428][ T9504] RSP: 002b:00007f065e3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 402.582438][ T9504] RAX: ffffffffffffffda RBX: 00007f06603e6090 RCX: 00007f066018eec9 [ 402.582445][ T9504] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 00002000000d5000 [ 402.582451][ T9504] RBP: 00007f065e3d5090 R08: 0000200000ffd000 R09: 0000000000000000 [ 402.582458][ T9504] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 402.582464][ T9504] R13: 00007f06603e6128 R14: 00007f06603e6090 R15: 00007ffc8a3ff988 [ 402.582478][ T9504] [ 403.473737][ T9510] netlink: 'syz.3.980': attribute type 4 has an invalid length. [ 405.053344][ T9517] netlink: 'syz.1.981': attribute type 4 has an invalid length. [ 405.238737][ T9506] syz.0.978 (9506): drop_caches: 2 [ 405.738720][ T30] audit: type=1400 audit(1760412479.588:1133): avc: denied { create } for pid=9519 comm="syz.5.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 405.770143][ T30] audit: type=1400 audit(1760412479.598:1134): avc: denied { listen } for pid=9519 comm="syz.5.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 405.814226][ T30] audit: type=1400 audit(1760412479.598:1135): avc: denied { accept } for pid=9519 comm="syz.5.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 407.408549][ T9535] tmpfs: Unknown parameter 'fsuuid' [ 407.844214][ T9538] netlink: 'syz.4.987': attribute type 10 has an invalid length. [ 407.858374][ T9538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.866286][ T9538] team0: Port device bond0 added [ 407.880158][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 407.963864][ T9544] netlink: 68 bytes leftover after parsing attributes in process `syz.0.989'. [ 408.464022][ T9538] team0 (unregistering): Port device team_slave_0 removed [ 408.489887][ T9538] team0 (unregistering): Port device team_slave_1 removed [ 408.513388][ T30] audit: type=1400 audit(1760412482.388:1136): avc: denied { bind } for pid=9546 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.566245][ T9538] team0 (unregistering): Port device bond0 removed [ 408.596687][ T9552] Invalid logical block size (65024) [ 408.690316][ T9554] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 408.720248][ T9554] netlink: 68 bytes leftover after parsing attributes in process `syz.5.994'. [ 408.730091][ T9554] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.737748][ T9554] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.738172][ T9573] netlink: 'syz.0.998': attribute type 4 has an invalid length. [ 410.813057][ T9574] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 410.842264][ T9574] tmpfs: Unknown parameter 'fsuuid' [ 411.360964][ T9581] /dev/nullb0: Can't open blockdev [ 412.950116][ T30] audit: type=1400 audit(1760412486.828:1137): avc: denied { name_bind } for pid=9587 comm="syz.0.1005" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 413.123601][ T1835] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 414.114233][ T30] audit: type=1400 audit(1760412486.858:1138): avc: denied { read write } for pid=9587 comm="syz.0.1005" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 414.139425][ T30] audit: type=1400 audit(1760412486.858:1139): avc: denied { open } for pid=9587 comm="syz.0.1005" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 414.194904][ T1835] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 414.198382][ T9593] bad cache= option: noe*(3 -n[}ZP [ 414.198382][ T9593] [ 414.218008][ T30] audit: type=1400 audit(1760412487.088:1140): avc: denied { read } for pid=9590 comm="syz.1.1006" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 414.254475][ T30] audit: type=1400 audit(1760412487.088:1141): avc: denied { open } for pid=9590 comm="syz.1.1006" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 414.278437][ T9593] CIFS: VFS: bad cache= option: noe*(3 -n[}ZP [ 414.289289][ T30] audit: type=1400 audit(1760412487.098:1142): avc: denied { ioctl } for pid=9590 comm="syz.1.1006" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 414.481360][ T30] audit: type=1400 audit(1760412488.168:1143): avc: denied { ioctl } for pid=9575 comm="syz.4.1001" path="/dev/sg0" dev="devtmpfs" ino=750 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 414.677225][ T30] audit: type=1400 audit(1760412488.558:1144): avc: denied { bind } for pid=9604 comm="syz.1.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 414.707014][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1010'. [ 414.737954][ T9607] fuse: Bad value for 'group_id' [ 414.742934][ T9607] fuse: Bad value for 'group_id' [ 414.817418][ T30] audit: type=1400 audit(1760412488.688:1145): avc: denied { sqpoll } for pid=9587 comm="syz.0.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 414.841141][ T9589] FAULT_INJECTION: forcing a failure. [ 414.841141][ T9589] name failslab, interval 1, probability 0, space 0, times 0 [ 414.914297][ T9589] CPU: 1 UID: 0 PID: 9589 Comm: syz.0.1005 Not tainted syzkaller #0 PREEMPT(full) [ 414.914324][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 414.914334][ T9589] Call Trace: [ 414.914340][ T9589] [ 414.914348][ T9589] dump_stack_lvl+0x16c/0x1f0 [ 414.914373][ T9589] should_fail_ex+0x512/0x640 [ 414.914387][ T9589] ? fs_reclaim_acquire+0xae/0x150 [ 414.914405][ T9589] should_failslab+0xc2/0x120 [ 414.914421][ T9589] __kmalloc_noprof+0xdd/0x880 [ 414.914433][ T9589] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 414.914453][ T9589] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 414.914467][ T9589] tomoyo_realpath_from_path+0xc2/0x6e0 [ 414.914484][ T9589] ? tomoyo_profile+0x47/0x60 [ 414.914502][ T9589] tomoyo_path_number_perm+0x245/0x580 [ 414.914515][ T9589] ? tomoyo_path_number_perm+0x237/0x580 [ 414.914529][ T9589] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 414.914542][ T9589] ? find_held_lock+0x2b/0x80 [ 414.914566][ T9589] ? find_held_lock+0x2b/0x80 [ 414.914575][ T9589] ? hook_file_ioctl_common+0x145/0x410 [ 414.914589][ T9589] ? __fget_files+0x20e/0x3c0 [ 414.914606][ T9589] security_file_ioctl+0x9b/0x240 [ 414.914622][ T9589] __x64_sys_ioctl+0xb7/0x210 [ 414.914635][ T9589] do_syscall_64+0xcd/0xfa0 [ 414.914649][ T9589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.914661][ T9589] RIP: 0033:0x7fd5fb78eec9 [ 414.914671][ T9589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.914681][ T9589] RSP: 002b:00007fd5fc58d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.914692][ T9589] RAX: ffffffffffffffda RBX: 00007fd5fb9e5fa0 RCX: 00007fd5fb78eec9 [ 414.914699][ T9589] RDX: 0000200000000100 RSI: 0000000080044801 RDI: 0000000000000005 [ 414.914705][ T9589] RBP: 00007fd5fc58d090 R08: 0000000000000000 R09: 0000000000000000 [ 414.914711][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.914717][ T9589] R13: 00007fd5fb9e6038 R14: 00007fd5fb9e5fa0 R15: 00007fff46f35c78 [ 414.914734][ T9589] [ 414.915405][ T9589] ERROR: Out of memory at tomoyo_realpath_from_path. [ 415.583867][ T9617] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 416.316732][ T30] audit: type=1400 audit(1760412489.478:1146): avc: denied { create } for pid=9612 comm="syz.1.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 416.346699][ T1835] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 416.437396][ T9618] FAULT_INJECTION: forcing a failure. [ 416.437396][ T9618] name failslab, interval 1, probability 0, space 0, times 0 [ 416.763028][ T9618] CPU: 1 UID: 0 PID: 9618 Comm: syz.0.1013 Not tainted syzkaller #0 PREEMPT(full) [ 416.763055][ T9618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 416.763065][ T9618] Call Trace: [ 416.763071][ T9618] [ 416.763078][ T9618] dump_stack_lvl+0x16c/0x1f0 [ 416.763103][ T9618] should_fail_ex+0x512/0x640 [ 416.763120][ T9618] ? fs_reclaim_acquire+0xae/0x150 [ 416.763137][ T9618] should_failslab+0xc2/0x120 [ 416.763153][ T9618] __kmalloc_noprof+0xdd/0x880 [ 416.763165][ T9618] ? tomoyo_encode2+0x100/0x3e0 [ 416.763183][ T9618] ? tomoyo_encode2+0x100/0x3e0 [ 416.763197][ T9618] tomoyo_encode2+0x100/0x3e0 [ 416.763213][ T9618] tomoyo_encode+0x29/0x50 [ 416.763227][ T9618] tomoyo_realpath_from_path+0x18f/0x6e0 [ 416.763244][ T9618] ? tomoyo_profile+0x47/0x60 [ 416.763262][ T9618] tomoyo_path_number_perm+0x245/0x580 [ 416.763274][ T9618] ? tomoyo_path_number_perm+0x237/0x580 [ 416.763287][ T9618] ? io_schedule_timeout+0x124/0x150 [ 416.763299][ T9618] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 416.763326][ T9618] ? hook_file_ioctl_common+0x36/0x410 [ 416.763336][ T9618] ? hook_file_ioctl_common+0xc5/0x410 [ 416.763347][ T9618] ? hook_file_ioctl_common+0x145/0x410 [ 416.763360][ T9618] ? __x64_sys_ioctl+0x94/0x210 [ 416.763374][ T9618] security_file_ioctl+0x9b/0x240 [ 416.763390][ T9618] __x64_sys_ioctl+0xb7/0x210 [ 416.763402][ T9618] do_syscall_64+0xcd/0xfa0 [ 416.763416][ T9618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.763427][ T9618] RIP: 0033:0x7fd5fb78eec9 [ 416.763437][ T9618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.763448][ T9618] RSP: 002b:00007fd5fc56c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.763459][ T9618] RAX: ffffffffffffffda RBX: 00007fd5fb9e6090 RCX: 00007fd5fb78eec9 [ 416.763466][ T9618] RDX: 0000200000000240 RSI: 0000000000008933 RDI: 0000000000000004 [ 416.763472][ T9618] RBP: 00007fd5fc56c090 R08: 0000000000000000 R09: 0000000000000000 [ 416.763478][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.763484][ T9618] R13: 00007fd5fb9e6128 R14: 00007fd5fb9e6090 R15: 00007fff46f35c78 [ 416.763498][ T9618] [ 416.763529][ T9618] ERROR: Out of memory at tomoyo_realpath_from_path. [ 416.930399][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.105777][ T1835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 417.105800][ T1835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 417.107865][ T1835] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 417.107884][ T1835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.107897][ T1835] usb 4-1: Product: syz [ 417.107906][ T1835] usb 4-1: Manufacturer: syz [ 417.107930][ T1835] usb 4-1: SerialNumber: syz [ 417.109317][ T1835] usb 4-1: config 0 descriptor?? [ 417.111060][ T1835] hub 4-1:0.0: bad descriptor, ignoring hub [ 417.111075][ T1835] hub 4-1:0.0: probe with driver hub failed with error -5 [ 417.113973][ T1835] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 417.408932][ T9627] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1015'. [ 417.503553][ T9628] FAULT_INJECTION: forcing a failure. [ 417.503553][ T9628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.503623][ T9628] CPU: 0 UID: 0 PID: 9628 Comm: syz.3.1011 Not tainted syzkaller #0 PREEMPT(full) [ 417.503643][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.503654][ T9628] Call Trace: [ 417.503660][ T9628] [ 417.503667][ T9628] dump_stack_lvl+0x16c/0x1f0 [ 417.503693][ T9628] should_fail_ex+0x512/0x640 [ 417.503718][ T9628] _copy_to_user+0x32/0xd0 [ 417.503744][ T9628] simple_read_from_buffer+0xcb/0x170 [ 417.503768][ T9628] proc_fail_nth_read+0x197/0x240 [ 417.503795][ T9628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.503822][ T9628] ? rw_verify_area+0xcf/0x6c0 [ 417.503842][ T9628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.503868][ T9628] vfs_read+0x1e4/0xcf0 [ 417.503893][ T9628] ? __pfx___mutex_lock+0x10/0x10 [ 417.503915][ T9628] ? __pfx_vfs_read+0x10/0x10 [ 417.503944][ T9628] ? __fget_files+0x20e/0x3c0 [ 417.503975][ T9628] ksys_read+0x12a/0x250 [ 417.503997][ T9628] ? __pfx_ksys_read+0x10/0x10 [ 417.504023][ T9628] do_syscall_64+0xcd/0xfa0 [ 417.504049][ T9628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.504065][ T9628] RIP: 0033:0x7f4fe998d8dc [ 417.504079][ T9628] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 417.504095][ T9628] RSP: 002b:00007f4fe7bb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.504112][ T9628] RAX: ffffffffffffffda RBX: 00007f4fe9be6180 RCX: 00007f4fe998d8dc [ 417.504123][ T9628] RDX: 000000000000000f RSI: 00007f4fe7bb40a0 RDI: 000000000000000a [ 417.504134][ T9628] RBP: 00007f4fe7bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 417.504144][ T9628] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 417.504153][ T9628] R13: 00007f4fe9be6218 R14: 00007f4fe9be6180 R15: 00007ffda8fed888 [ 417.504179][ T9628] [ 418.267888][ T1835] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 418.331509][ T1835] usb 4-1: USB disconnect, device number 43 [ 418.409553][ T7688] udevd[7688]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.448871][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 418.448885][ T30] audit: type=1400 audit(1760412492.328:1149): avc: denied { lock } for pid=9632 comm="syz.0.1017" path="socket:[24999]" dev="sockfs" ino=24999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 418.507631][ T30] audit: type=1400 audit(1760412492.388:1150): avc: denied { setopt } for pid=9632 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 421.231031][ T9666] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 421.270719][ T9666] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1024'. [ 421.774231][ T9677] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1027'. [ 422.147634][ T9682] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1026'. [ 423.598028][ T9694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9694 comm=syz.3.1031 [ 423.612780][ T9694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=9694 comm=syz.3.1031 [ 423.629921][ T9694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9694 comm=syz.3.1031 [ 423.647036][ T9694] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.050767][ T30] audit: type=1400 audit(1760412497.848:1151): avc: denied { append } for pid=9692 comm="syz.3.1031" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 424.394087][ T1206] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 424.914160][ T1835] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 425.514182][ T1206] usb 4-1: Using ep0 maxpacket: 16 [ 425.529186][ T1206] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 425.540954][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.552149][ T1206] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 129 [ 426.000574][ T1206] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 426.010641][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.029793][ T1206] usb 4-1: config 0 descriptor?? [ 426.134201][ T1835] usb 5-1: device descriptor read/64, error -71 [ 426.226494][ T9715] FAULT_INJECTION: forcing a failure. [ 426.226494][ T9715] name failslab, interval 1, probability 0, space 0, times 0 [ 426.239982][ T9715] CPU: 0 UID: 0 PID: 9715 Comm: syz.5.1036 Not tainted syzkaller #0 PREEMPT(full) [ 426.240010][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.240020][ T9715] Call Trace: [ 426.240025][ T9715] [ 426.240032][ T9715] dump_stack_lvl+0x16c/0x1f0 [ 426.240057][ T9715] should_fail_ex+0x512/0x640 [ 426.240076][ T9715] ? fs_reclaim_acquire+0xae/0x150 [ 426.240102][ T9715] should_failslab+0xc2/0x120 [ 426.240126][ T9715] __kmalloc_noprof+0xdd/0x880 [ 426.240145][ T9715] ? tomoyo_encode2+0x100/0x3e0 [ 426.240172][ T9715] ? tomoyo_encode2+0x100/0x3e0 [ 426.240192][ T9715] tomoyo_encode2+0x100/0x3e0 [ 426.240218][ T9715] tomoyo_encode+0x29/0x50 [ 426.240239][ T9715] tomoyo_mount_acl+0x144/0x850 [ 426.240258][ T9715] ? bpf_ksym_find+0x127/0x1c0 [ 426.240278][ T9715] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 426.240295][ T9715] ? is_bpf_text_address+0x94/0x1a0 [ 426.240314][ T9715] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 426.240327][ T9715] ? unwind_get_return_address+0x59/0xa0 [ 426.240359][ T9715] ? tomoyo_domain+0xbb/0x150 [ 426.240367][ T9715] ? tomoyo_profile+0x47/0x60 [ 426.240385][ T9715] tomoyo_mount_permission+0x16d/0x420 [ 426.240399][ T9715] ? tomoyo_mount_permission+0x14f/0x420 [ 426.240413][ T9715] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 426.240436][ T9715] security_sb_mount+0x9b/0x260 [ 426.240450][ T9715] path_mount+0x158/0x23a0 [ 426.240469][ T9715] ? __pfx_path_mount+0x10/0x10 [ 426.240485][ T9715] ? kmem_cache_free+0x2d4/0x6c0 [ 426.240498][ T9715] ? putname+0x154/0x1a0 [ 426.240516][ T9715] ? putname+0x154/0x1a0 [ 426.240530][ T9715] ? putname+0x154/0x1a0 [ 426.240548][ T9715] ? __x64_sys_mount+0x293/0x310 [ 426.240562][ T9715] __x64_sys_mount+0x293/0x310 [ 426.240578][ T9715] ? __pfx___x64_sys_mount+0x10/0x10 [ 426.240595][ T9715] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 426.240609][ T9715] do_syscall_64+0xcd/0xfa0 [ 426.240622][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.240633][ T9715] RIP: 0033:0x7f5dbad8eec9 [ 426.240642][ T9715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.240653][ T9715] RSP: 002b:00007f5dbbc15038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 426.240663][ T9715] RAX: ffffffffffffffda RBX: 00007f5dbafe6090 RCX: 00007f5dbad8eec9 [ 426.240670][ T9715] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 426.240676][ T9715] RBP: 00007f5dbbc15090 R08: 0000200000000800 R09: 0000000000000000 [ 426.240683][ T9715] R10: 0000000000010008 R11: 0000000000000246 R12: 0000000000000002 [ 426.240689][ T9715] R13: 00007f5dbafe6128 R14: 00007f5dbafe6090 R15: 00007ffd8075f9d8 [ 426.240703][ T9715] [ 426.244739][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 426.585609][ T5935] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 426.864611][ T1835] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 426.897193][ T1206] usbhid 4-1:0.0: can't add hid device: -71 [ 426.903868][ T1206] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 426.943677][ T1206] usb 4-1: USB disconnect, device number 44 [ 426.955754][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 426.973141][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 426.987641][ T5935] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 426.989370][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 426.997392][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.008509][ T1835] usb 5-1: device descriptor read/64, error -71 [ 427.017326][ T5935] usb 2-1: Product: syz [ 427.035901][ T5935] usb 2-1: Manufacturer: syz [ 427.042288][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 427.042819][ T5935] usb 2-1: SerialNumber: syz [ 427.084525][ T9723] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1039'. [ 427.087008][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 427.094516][ T5935] usb 2-1: config 0 descriptor?? [ 427.103072][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.158667][ T1835] usb usb5-port1: attempt power cycle [ 427.196207][ T9709] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 427.294266][ T5863] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 427.482415][ T5863] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 427.563536][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.581154][ T5863] usb 6-1: Product: syz [ 427.585611][ T5863] usb 6-1: Manufacturer: syz [ 427.590216][ T5863] usb 6-1: SerialNumber: syz [ 427.600681][ T5863] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 427.715811][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 428.691520][ T1835] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 428.709310][ T30] audit: type=1400 audit(1760412501.928:1152): avc: denied { rename } for pid=9707 comm="syz.0.1034" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 428.955128][ T1835] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 429.171587][ T42] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 429.230709][ T6596] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.242626][ T1835] usb 5-1: Using ep0 maxpacket: 8 [ 429.258475][ T6596] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.274460][ T6596] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.283908][ T1835] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 429.294208][ T1835] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 429.302952][ T6596] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.311830][ T1835] usb 5-1: Product: syz [ 429.321146][ T1835] usb 5-1: Manufacturer: syz [ 429.359226][ T1206] usb 2-1: USB disconnect, device number 60 [ 429.373698][ T9732] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1041'. [ 429.423830][ T1835] usb 5-1: SerialNumber: syz [ 429.492469][ T1835] usb 5-1: config 0 descriptor?? [ 429.541940][ T1835] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 429.653352][ T5935] usb 1-1: USB disconnect, device number 30 [ 429.659517][ T30] audit: type=1400 audit(1760412503.528:1153): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 429.690416][ T24] usb 6-1: USB disconnect, device number 6 [ 429.710915][ T9735] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1042'. [ 430.202363][ T30] audit: type=1400 audit(1760412504.078:1154): avc: denied { open } for pid=9736 comm="syz.0.1043" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 430.234824][ T42] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 430.261561][ T42] ath9k_htc: Failed to initialize the device [ 430.312680][ T30] audit: type=1400 audit(1760412504.188:1155): avc: denied { ioctl } for pid=9724 comm="syz.4.1040" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 430.315702][ T24] usb 6-1: ath9k_htc: USB layer deinitialized [ 430.341001][ T9725] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 430.479787][ T9725] Error validating options; rc = [-22] [ 430.490961][ T30] audit: type=1400 audit(1760412504.188:1156): avc: denied { set_context_mgr } for pid=9724 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 430.588091][ T1835] gspca_zc3xx: reg_r err -110 [ 430.593065][ T1835] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 430.642847][ T9746] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 430.856482][ T30] audit: type=1400 audit(1760412504.728:1157): avc: denied { call } for pid=9724 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 430.882803][ T1206] usb 5-1: USB disconnect, device number 40 [ 430.916538][ T30] audit: type=1400 audit(1760412504.728:1158): avc: denied { transfer } for pid=9724 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 431.187699][ T9750] Invalid source name [ 431.191749][ T9750] UBIFS error (pid: 9750): cannot open "./file0", error -22 [ 432.069877][ T30] audit: type=1400 audit(1760412505.158:1159): avc: denied { watch } for pid=9747 comm="syz.5.1045" path="/29/file0" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 432.099965][ T30] audit: type=1400 audit(1760412505.158:1160): avc: denied { watch_sb watch_reads } for pid=9747 comm="syz.5.1045" path="/29/file0" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 432.730451][ T6133] wlan1: Trigger new scan to find an IBSS to join [ 433.563764][ T9758] ptrace attach of "./syz-executor exec"[5821] was attempted by "./syz-executor exec"[9758] [ 433.624425][ T30] audit: type=1400 audit(1760412507.478:1161): avc: denied { connect } for pid=9757 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 434.234120][ T42] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 435.017882][ T42] usb 5-1: device descriptor read/64, error -71 [ 435.504277][ T42] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 435.834852][ T42] usb 5-1: device descriptor read/64, error -71 [ 435.986330][ T42] usb usb5-port1: attempt power cycle [ 436.049530][ T9778] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 436.056096][ T9778] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 436.107468][ T9778] vhci_hcd vhci_hcd.0: Device attached [ 436.344119][ T42] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 436.364530][ T42] usb 5-1: device descriptor read/8, error -71 [ 436.375041][ T1835] usb 44-1: SetAddress Request (2) to port 0 [ 436.388756][ T1835] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 436.634249][ T42] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 436.761870][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'. [ 436.848625][ T30] audit: type=1400 audit(1760412510.728:1162): avc: denied { bind } for pid=9784 comm="syz.4.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 436.914265][ T42] usb 5-1: device not accepting address 44, error -71 [ 436.936958][ T30] audit: type=1400 audit(1760412510.768:1163): avc: denied { listen } for pid=9784 comm="syz.4.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 436.958881][ T42] usb usb5-port1: unable to enumerate USB device [ 436.970674][ T9779] vhci_hcd: connection reset by peer [ 436.994233][ T36] vhci_hcd: stop threads [ 437.009676][ T36] vhci_hcd: release socket [ 437.038162][ T36] vhci_hcd: disconnect device [ 437.065906][ T30] audit: type=1400 audit(1760412510.938:1164): avc: denied { ioctl } for pid=9784 comm="syz.4.1055" path="socket:[25843]" dev="sockfs" ino=25843 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 438.142395][ T36] wlan1: Trigger new scan to find an IBSS to join [ 438.404220][ T9794] 9pnet_fd: Insufficient options for proto=fd [ 438.520028][ T9801] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 439.609678][ T9794] macvtap1: entered promiscuous mode [ 439.615101][ T9794] macvtap1: entered allmulticast mode [ 439.681875][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.691575][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.094800][ T6596] wlan1: Creating new IBSS network, BSSID 22:d2:28:99:03:50 [ 440.224189][ T42] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 440.385815][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 440.448301][ T42] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 440.561336][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.925241][ T42] usb 4-1: Product: syz [ 440.930082][ T42] usb 4-1: Manufacturer: syz [ 440.937307][ T30] audit: type=1326 audit(1760412514.758:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 440.964870][ T42] usb 4-1: SerialNumber: syz [ 440.974627][ T42] usb 4-1: config 0 descriptor?? [ 440.989015][ T42] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 440.996717][ T30] audit: type=1326 audit(1760412514.768:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 441.020181][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.043620][ T30] audit: type=1326 audit(1760412514.768:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 441.068570][ T30] audit: type=1326 audit(1760412514.768:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 441.188015][ T30] audit: type=1326 audit(1760412514.768:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 441.211530][ T30] audit: type=1326 audit(1760412514.768:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 441.235074][ T30] audit: type=1326 audit(1760412514.768:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 441.544633][ T42] gspca_sonixj: reg_w1 err -110 [ 441.552846][ T42] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 442.162142][ T30] audit: type=1326 audit(1760412514.768:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 442.185712][ T30] audit: type=1326 audit(1760412514.768:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 442.209299][ T1835] usb 44-1: device descriptor read/8, error -110 [ 442.231423][ T30] audit: type=1326 audit(1760412514.768:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 442.254826][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.276967][ T30] audit: type=1326 audit(1760412514.768:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 442.311408][ T30] audit: type=1326 audit(1760412514.768:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 442.337096][ T30] audit: type=1326 audit(1760412514.768:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 442.395676][ T30] audit: type=1326 audit(1760412514.768:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 442.446681][ T30] audit: type=1326 audit(1760412514.768:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 442.473862][ T30] audit: type=1326 audit(1760412514.768:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 442.523415][ T9842] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.1067'. [ 442.535115][ T30] audit: type=1326 audit(1760412514.768:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.1.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066018eec9 code=0x7fc00000 [ 442.753775][ T1835] usb usb44-port1: attempt power cycle [ 443.024101][ T1206] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 443.947882][ T1835] usb usb44-port1: unable to enumerate USB device [ 444.026180][ T5934] usb 4-1: USB disconnect, device number 45 [ 444.154100][ T1206] usb 1-1: Using ep0 maxpacket: 16 [ 444.222258][ T1206] usb 1-1: config 0 has an invalid interface number: 162 but max is 0 [ 444.231409][ T1206] usb 1-1: config 0 has no interface number 0 [ 445.249820][ T1206] usb 1-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice=be.57 [ 445.304977][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.315389][ T9858] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 445.444502][ T1206] usb 1-1: Product: syz [ 445.448949][ T1206] usb 1-1: Manufacturer: syz [ 445.454506][ T1206] usb 1-1: SerialNumber: syz [ 445.455685][ T9858] tmpfs: Unknown parameter 'fsuuid' [ 445.493055][ T1206] usb 1-1: config 0 descriptor?? [ 445.738239][ T9862] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 445.828485][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 445.904187][ T1206] usb 1-1: can't set config #0, error -71 [ 445.920346][ T1206] usb 1-1: USB disconnect, device number 31 [ 446.316355][ T9871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.546146][ T9887] tmpfs: Unknown parameter 'fsuuid' [ 451.774063][ T5934] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 451.974074][ T5934] usb 2-1: device descriptor read/64, error -71 [ 452.233711][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 452.233754][ T30] audit: type=1326 audit(1760412526.098:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbad8eec9 code=0x7fc00000 [ 452.275193][ T30] audit: type=1326 audit(1760412526.098:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbad8eec9 code=0x7fc00000 [ 452.300133][ T30] audit: type=1326 audit(1760412526.098:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbad8eec9 code=0x7fc00000 [ 452.324564][ T5934] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 452.372886][ T30] audit: type=1326 audit(1760412526.098:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbad8eec9 code=0x7fc00000 [ 452.444624][ T30] audit: type=1326 audit(1760412526.098:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbad8eec9 code=0x7fc00000 [ 452.468095][ T5934] usb 2-1: device descriptor read/64, error -71 [ 452.544067][ T30] audit: type=1326 audit(1760412526.098:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbad8eec9 code=0x7fc00000 [ 452.585758][ T5934] usb usb2-port1: attempt power cycle [ 452.740674][ T30] audit: type=1326 audit(1760412526.098:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbad8eec9 code=0x7fc00000 [ 452.824051][ T30] audit: type=1326 audit(1760412526.098:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbad8eec9 code=0x7fc00000 [ 452.905559][ T30] audit: type=1326 audit(1760412526.098:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbad8eec9 code=0x7fc00000 [ 453.043536][ T5934] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 453.054333][ T30] audit: type=1326 audit(1760412526.098:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.5.1083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbad8eec9 code=0x7fc00000 [ 453.254450][ T5934] usb 2-1: device not accepting address 63, error -71 [ 454.475607][ T9913] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 454.564307][ T9928] pimreg: entered allmulticast mode [ 456.337007][ T9941] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.625904][ T9941] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.029515][ T9941] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.039525][ T9955] netlink: 'syz.3.1095': attribute type 4 has an invalid length. [ 457.047941][ T9955] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1095'. [ 457.395341][ T9950] syzkaller0: entered promiscuous mode [ 457.450599][ T9950] syzkaller0: entered allmulticast mode [ 457.482000][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 457.482012][ T30] audit: type=1400 audit(1760412531.358:1300): avc: denied { append } for pid=9957 comm="syz.3.1096" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 457.563887][ T9941] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.676240][ T9947] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 457.724007][ T75] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.762959][ T75] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.800499][ T75] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.804442][ T9964] netlink: 'syz.1.1099': attribute type 5 has an invalid length. [ 457.890287][ T6133] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.914635][ T1206] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 457.963536][ T30] audit: type=1400 audit(1760412531.838:1301): avc: denied { ioctl } for pid=9963 comm="syz.1.1099" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 458.072687][ T30] audit: type=1400 audit(1760412531.838:1302): avc: denied { append } for pid=9963 comm="syz.1.1099" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 458.134646][ T9975] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 458.144496][ T30] audit: type=1400 audit(1760412532.018:1303): avc: denied { kexec_image_load } for pid=9944 comm="syz.0.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 458.219741][ T5934] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 458.255168][ T1206] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 458.302538][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.325311][ T1206] usb 4-1: Product: syz [ 458.329993][ T9975] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1102'. [ 458.344043][ T1206] usb 4-1: Manufacturer: syz [ 458.348680][ T1206] usb 4-1: SerialNumber: syz [ 458.435321][ T1206] usb 4-1: config 0 descriptor?? [ 458.487607][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.503228][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.613899][ T5934] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 458.644364][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.663409][ T5818] Bluetooth: hci4: unknown advertising packet type: 0x17 [ 458.663480][ T5818] Bluetooth: hci4: unknown advertising packet type: 0x09 [ 458.677096][ T5818] Bluetooth: hci4: Dropping invalid advertising data [ 458.677893][ T5934] usb 2-1: config 0 descriptor?? [ 458.684603][ T5818] Bluetooth: hci4: unknown advertising packet type: 0x40 [ 458.702188][ T5818] Bluetooth: hci4: Malformed LE Event: 0x02 [ 459.232518][ T5934] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 459.261191][ T5934] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 459.282389][ T5934] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 459.310514][ T5934] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 459.435076][ T5934] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 459.692288][ T5934] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 459.968134][ T5934] playstation 0003:054C:0DF2.0017: Failed to retrieve feature with reportID 9: -32 [ 460.049215][ T9987] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 460.075659][ T9987] tmpfs: Unknown parameter 'fsuuid' [ 460.394194][ T5934] playstation 0003:054C:0DF2.0017: Failed to retrieve DualSense pairing info: -32 [ 460.403532][ T5934] playstation 0003:054C:0DF2.0017: Failed to get MAC address from DualSense [ 460.480116][ T5934] playstation 0003:054C:0DF2.0017: Failed to create dualsense. [ 460.532360][ T5934] playstation 0003:054C:0DF2.0017: probe with driver playstation failed with error -32 [ 460.770912][ T1206] usb-storage 4-1:0.0: USB Mass Storage device detected [ 460.869348][ T9993] Cannot find add_set index 0 as target [ 460.918738][ T1206] usb 4-1: USB disconnect, device number 46 [ 461.041167][ T5935] usb 2-1: USB disconnect, device number 65 [ 461.117010][ T9998] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1105'. [ 461.294081][ T42] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 461.445494][ T42] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 461.457502][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 461.477297][ T42] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 461.486593][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.496798][ T42] usb 5-1: Product: syz [ 461.505357][ T42] usb 5-1: Manufacturer: syz [ 461.510466][ T42] usb 5-1: SerialNumber: syz [ 461.538729][ T42] usb 5-1: config 0 descriptor?? [ 464.506717][T10014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1110'. [ 464.824217][ T1206] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 466.631738][T10023] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 466.821538][ T1206] usb 4-1: Using ep0 maxpacket: 8 [ 466.842752][ T1206] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 466.851207][ T1206] usb 4-1: config 0 has no interface number 0 [ 466.862132][ T1206] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 466.873294][ T1206] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 466.885628][ T1206] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 466.896830][ T1206] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 466.911590][ T1206] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 466.931654][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.973893][ T30] audit: type=1400 audit(1760412540.848:1304): avc: denied { write } for pid=10031 comm="syz.0.1115" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 466.978035][ T1206] usb 4-1: config 0 descriptor?? [ 466.996871][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.372818][ T1206] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 467.672788][ T30] audit: type=1400 audit(1760412541.528:1305): avc: denied { getopt } for pid=10030 comm="syz.1.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 467.674189][ T1206] usb 4-1: USB disconnect, device number 47 [ 467.707485][ T42] IPVS: starting estimator thread 0... [ 467.823793][ T5820] Bluetooth: hci5: command 0x0405 tx timeout [ 467.830588][ T1206] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 467.876797][ T30] audit: type=1400 audit(1760412541.758:1306): avc: denied { map } for pid=10031 comm="syz.0.1115" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 467.919950][ T30] audit: type=1400 audit(1760412541.758:1307): avc: denied { execute } for pid=10031 comm="syz.0.1115" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 467.976167][T10037] IPVS: using max 76 ests per chain, 182400 per kthread [ 468.357627][ T1206] libceph: connect (1)[b::]:6789 error -101 [ 468.371977][ T1206] libceph: mon0 (1)[b::]:6789 connect error [ 468.470039][T10047] ceph: No mds server is up or the cluster is laggy [ 468.656694][ T5935] libceph: connect (1)[b::]:6789 error -101 [ 468.674434][ T5935] libceph: mon0 (1)[b::]:6789 connect error [ 468.684984][T10053] afs: Unknown parameter '4nBCt*8YV"dvF%$T\MhI+n's!*# [5gUQ%poVYKS&Mb' [ 468.817340][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 469.064283][ T42] usb 5-1: USB disconnect, device number 45 [ 469.066734][ T30] audit: type=1400 audit(1760412542.908:1308): avc: denied { ioctl } for pid=10057 comm="syz.0.1122" path="socket:[26373]" dev="sockfs" ino=26373 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 469.121892][ T30] audit: type=1400 audit(1760412542.918:1309): avc: denied { append } for pid=10057 comm="syz.0.1122" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 469.166084][ T5935] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 469.207442][ T30] audit: type=1400 audit(1760412542.918:1310): avc: denied { open } for pid=10057 comm="syz.0.1122" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 469.231720][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.534089][ T42] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 469.554031][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 469.566645][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 469.755318][ T5935] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 469.774332][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.826459][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 469.838517][ T5935] usb 2-1: Product: syz [ 469.843043][ T5935] usb 2-1: Manufacturer: syz [ 469.848620][ T5935] usb 2-1: SerialNumber: syz [ 469.855916][ T42] usb 5-1: config 0 has no interfaces? [ 469.857513][ T5935] usb 2-1: config 0 descriptor?? [ 469.867823][ T42] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 469.877268][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.888713][ T42] usb 5-1: Product: syz [ 469.896321][ T42] usb 5-1: Manufacturer: syz [ 469.906629][ T42] usb 5-1: SerialNumber: syz [ 469.920645][ T42] usb 5-1: config 0 descriptor?? [ 470.113660][T10009] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 470.137788][ T42] usb 5-1: USB disconnect, device number 46 [ 470.336992][ T30] audit: type=1400 audit(1760412544.218:1311): avc: denied { mounton } for pid=10069 comm="syz.5.1126" path="/proc/155/task" dev="proc" ino=26805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 471.376129][ T42] usb 2-1: USB disconnect, device number 66 [ 471.561001][T10080] vxcan1: tx drop: invalid sa for name 0x0000100000000000 [ 472.834451][T10086] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.100773][T10086] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.170626][T10089] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1131'. [ 473.262110][T10086] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.885459][T10086] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.944557][ T30] audit: type=1400 audit(1760412547.808:1312): avc: denied { append } for pid=10105 comm="syz.0.1137" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 474.284144][ T30] audit: type=1400 audit(1760412547.958:1313): avc: denied { write } for pid=10102 comm="syz.3.1136" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 474.387464][ T9629] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.434118][ T5935] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 474.608744][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.624406][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.655797][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.211891][ T5935] usb 1-1: config 12 has an invalid interface number: 212 but max is 0 [ 475.221972][ T5935] usb 1-1: config 12 has no interface number 0 [ 475.242266][ T5935] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 475.252323][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.278489][ T5935] usb 1-1: Product: syz [ 475.317224][ T5935] usb 1-1: Manufacturer: syz [ 475.346285][ T5935] usb 1-1: SerialNumber: syz [ 475.389974][ T5935] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 475.429661][ T5935] dvb-usb: bulk message failed: -22 (2/0) [ 475.464176][ T5935] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 475.512592][ T5935] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) error while loading driver (-19) [ 475.516002][ T42] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 475.531188][ T31] INFO: task syz.2.795:8798 blocked for more than 144 seconds. [ 475.534275][ T5935] dvb_usb_cxusb 1-1:12.212: probe with driver dvb_usb_cxusb failed with error -22 [ 475.560530][ T31] Not tainted syzkaller #0 [ 475.687999][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.710331][ T31] task:syz.2.795 state:D stack:21952 pid:8798 tgid:8781 ppid:5811 task_flags:0x400140 flags:0x00080003 [ 475.725355][ T31] Call Trace: [ 475.729602][ T42] usb 6-1: config 0 has no interfaces? [ 475.735721][ T31] [ 475.739704][ T31] __schedule+0x1190/0x5de0 [ 475.740598][ T42] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.755382][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 475.761522][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.769945][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.775653][ T42] usb 6-1: Product: syz [ 475.780052][ T31] ? __lock_acquire+0x622/0x1c90 [ 475.785272][ T42] usb 6-1: Manufacturer: syz [ 475.790025][ T31] ? __pfx___schedule+0x10/0x10 [ 475.796067][ T42] usb 6-1: SerialNumber: syz [ 475.800989][ T31] ? find_held_lock+0x2b/0x80 [ 475.806739][ T31] ? schedule+0x2d7/0x3a0 [ 475.811912][ T42] usb 6-1: config 0 descriptor?? [ 475.817919][ T31] schedule+0xe7/0x3a0 [ 475.822669][ T31] schedule_timeout+0x257/0x290 [ 475.830985][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 475.837561][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 475.845167][ T31] __wait_for_common+0x2fc/0x4e0 [ 475.851301][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 475.858407][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 475.864301][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 475.870666][ T31] disable_device+0x16f/0x280 [ 475.880241][ T31] ? __pfx_disable_device+0x10/0x10 [ 475.885876][ T31] __ib_unregister_device+0x2b4/0x480 [ 475.891551][ T31] ? get_device+0x2a/0x40 [ 475.896895][ T31] ? ib_device_put+0x10/0xa0 [ 475.901974][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 475.908155][ T31] nldev_dellink+0x21f/0x320 [ 475.912979][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 475.918758][ T31] ? lock_acquire+0x179/0x350 [ 475.923718][ T31] ? cap_capable+0xb3/0x250 [ 475.928477][ T31] ? bpf_lsm_capable+0x9/0x10 [ 475.934269][ T31] ? security_capable+0x7e/0x260 [ 475.940318][ T31] ? ns_capable+0xd7/0x110 [ 475.945073][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 475.952081][ T31] rdma_nl_rcv_msg+0x38a/0x6e0 [ 475.957521][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 475.963179][ T31] ? __lock_acquire+0x622/0x1c90 [ 475.969341][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 475.976489][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 475.983797][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 475.989456][ T31] netlink_unicast+0x5aa/0x870 [ 475.995354][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 476.000877][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 476.007039][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.012656][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.018600][ T31] ____sys_sendmsg+0xa98/0xc70 [ 476.023792][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 476.037030][ T42] usb 6-1: USB disconnect, device number 7 [ 476.057364][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.064218][ T31] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 476.071767][ T31] ? __rcu_read_unlock+0x2bc/0x550 [ 476.078176][ T31] ___sys_sendmsg+0x134/0x1d0 [ 476.083190][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.088970][ T31] ? __lock_acquire+0x622/0x1c90 [ 476.095693][ T31] __sys_sendmsg+0x16d/0x220 [ 476.100567][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 476.106852][ T31] ? find_held_lock+0x2b/0x80 [ 476.111803][ T31] ? do_user_addr_fault+0x843/0x1370 [ 476.118331][ T31] do_syscall_64+0xcd/0xfa0 [ 476.123129][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.129480][ T31] RIP: 0033:0x7fe93e98eec9 [ 476.135749][ T31] RSP: 002b:00007fe93c7f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.145428][ T31] RAX: ffffffffffffffda RBX: 00007fe93ebe6270 RCX: 00007fe93e98eec9 [ 476.155894][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000c [ 476.164232][ T31] RBP: 00007fe93ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 476.172532][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.191181][ T31] R13: 00007fe93ebe6308 R14: 00007fe93ebe6270 R15: 00007ffd1935fa78 [ 476.219635][ T31] [ 476.228814][ T31] [ 476.228814][ T31] Showing all locks held in the system: [ 476.251906][ T31] 4 locks held by kworker/u8:1/13: [ 476.262009][ T31] #0: ffff88801bad4948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 476.290348][ T31] #1: ffffc90000127d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 476.305823][ T31] #2: ffffffff900e4f70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 476.315747][ T31] #3: ffff88802a9d8700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 476.329920][ T31] 1 lock held by khungtaskd/31: [ 476.336271][ T31] #0: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 476.346327][ T31] 3 locks held by kworker/0:2/1206: [ 476.351723][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 476.364229][ T31] #1: ffffc9000400fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 476.377341][ T31] #2: ffff88807be38240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b6/0x6da0 [ 476.388691][ T31] 2 locks held by getty/5571: [ 476.393438][ T31] #0: ffff88814dd030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 476.403536][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 476.414262][ T31] 2 locks held by syz.2.795/8798: [ 476.419384][ T31] #0: ffffffff9ae945b8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 476.430892][ T31] #1: ffff88802a9d8700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 476.444810][ T31] 1 lock held by syz.3.1136/10104: [ 476.449996][ T31] [ 476.452748][ T31] ============================================= [ 476.452748][ T31] [ 476.466995][ T31] NMI backtrace for cpu 1 [ 476.467014][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 476.467037][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 476.467049][ T31] Call Trace: [ 476.467056][ T31] [ 476.467064][ T31] dump_stack_lvl+0x116/0x1f0 [ 476.467094][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 476.467125][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 476.467149][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 476.467181][ T31] watchdog+0xf3f/0x1170 [ 476.467205][ T31] ? rcu_is_watching+0x12/0xc0 [ 476.467226][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.467242][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 476.467268][ T31] ? __kthread_parkme+0x19e/0x250 [ 476.467292][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.467310][ T31] kthread+0x3c5/0x780 [ 476.467336][ T31] ? __pfx_kthread+0x10/0x10 [ 476.467364][ T31] ? rcu_is_watching+0x12/0xc0 [ 476.467382][ T31] ? __pfx_kthread+0x10/0x10 [ 476.467408][ T31] ret_from_fork+0x675/0x7d0 [ 476.467431][ T31] ? __pfx_kthread+0x10/0x10 [ 476.467456][ T31] ret_from_fork_asm+0x1a/0x30 [ 476.467492][ T31] [ 476.467500][ T31] Sending NMI from CPU 1 to CPUs 0: [ 476.588511][ C0] NMI backtrace for cpu 0 [ 476.588527][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 476.588543][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 476.588551][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 476.588571][ C0] Code: f7 74 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 05 24 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 476.588584][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 476.588596][ C0] RAX: 00000000022ead27 RBX: 0000000000000000 RCX: ffffffff8b6622a9 [ 476.588605][ C0] RDX: 0000000000000000 RSI: ffffffff8db032d9 RDI: ffffffff8bf1e2c0 [ 476.588613][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 476.588622][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 476.588630][ C0] R13: ffffffff8e097a00 R14: ffffffff90832dd0 R15: 0000000000000000 [ 476.588638][ C0] FS: 0000000000000000(0000) GS:ffff8881249d9000(0000) knlGS:0000000000000000 [ 476.588652][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.588660][ C0] CR2: 0000200000396030 CR3: 000000007a21e000 CR4: 00000000003526f0 [ 476.588669][ C0] Call Trace: [ 476.588673][ C0] [ 476.588678][ C0] default_idle+0x13/0x20 [ 476.588695][ C0] default_idle_call+0x6c/0xb0 [ 476.588711][ C0] do_idle+0x38d/0x500 [ 476.588726][ C0] ? __pfx_do_idle+0x10/0x10 [ 476.588738][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 476.588758][ C0] cpu_startup_entry+0x4f/0x60 [ 476.588770][ C0] rest_init+0x16b/0x2b0 [ 476.588787][ C0] ? acpi_subsystem_init+0x133/0x180 [ 476.588802][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 476.588817][ C0] start_kernel+0x3f6/0x4e0 [ 476.588832][ C0] x86_64_start_reservations+0x18/0x30 [ 476.588846][ C0] x86_64_start_kernel+0x130/0x190 [ 476.588860][ C0] common_startup_64+0x13e/0x148 [ 476.588884][ C0] [ 476.603847][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 476.603872][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 476.603890][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 476.603900][ T31] Call Trace: [ 476.603906][ T31] [ 476.603913][ T31] dump_stack_lvl+0x3d/0x1f0 [ 476.603937][ T31] vpanic+0x640/0x6f0 [ 476.603963][ T31] panic+0xca/0xd0 [ 476.603980][ T31] ? __pfx_panic+0x10/0x10 [ 476.603999][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 476.604021][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 476.604046][ T31] ? watchdog+0xe48/0x1170 [ 476.604060][ T31] ? watchdog+0xe3b/0x1170 [ 476.604076][ T31] watchdog+0xe59/0x1170 [ 476.604093][ T31] ? rcu_is_watching+0x12/0xc0 [ 476.604109][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.604122][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 476.604142][ T31] ? __kthread_parkme+0x19e/0x250 [ 476.604162][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.604176][ T31] kthread+0x3c5/0x780 [ 476.604197][ T31] ? __pfx_kthread+0x10/0x10 [ 476.604218][ T31] ? rcu_is_watching+0x12/0xc0 [ 476.604233][ T31] ? __pfx_kthread+0x10/0x10 [ 476.604254][ T31] ret_from_fork+0x675/0x7d0 [ 476.604273][ T31] ? __pfx_kthread+0x10/0x10 [ 476.604293][ T31] ret_from_fork_asm+0x1a/0x30 [ 476.604321][ T31] [ 476.910929][ T31] Kernel Offset: disabled [ 476.915235][ T31] Rebooting in 86400 seconds..