last executing test programs: 4m59.613851925s ago: executing program 2 (id=535): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000180)={0x9, 0x83, 0xfffd, 0x9dff, 0xe, "8003e3ffff070900"}) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x80) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 4m59.45723083s ago: executing program 2 (id=536): r0 = socket$netlink(0x10, 0x3, 0x0) clock_nanosleep(0x4, 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x14, 0x1, 0x4, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) 4m59.44262516s ago: executing program 2 (id=537): r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="80030000", @ANYRES16=r0, @ANYBLOB="010029bd7000fedbdf2502000000080001"], 0x380}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd2f, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40104}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@dev, @empty, 0x0}, &(0x7f0000000080)=0xc) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000100)=0x14) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @remote}, &(0x7f0000000180)=0xc) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x2, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x30}, @mcast1, 0x8, 0x8000, 0x1ff, 0x4}}) (async, rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x857753f84f5e78b9, &(0x7f0000000380)={@multicast2, @multicast1, 0x0}, &(0x7f00000003c0)=0xc) (async, rerun: 32) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r13}, 0x14) (async) sendmmsg$inet6(r11, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000d8c800000000000000bb", @ANYRES32=r13], 0x28}}], 0x1, 0x0) (async, rerun: 32) r14 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r15, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r16}, 0x14) (async, rerun: 64) setsockopt$inet6_mreq(r14, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}, r16}, 0x14) (async, rerun: 64) sendmmsg$inet6(r14, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fe80a71b62a1000000000000000000bb", @ANYRES32=r16], 0x28}}], 0x1, 0x0) (async) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r17, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="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", @ANYRES32=r19, @ANYBLOB="1400038004000500040004000800020010000000"], 0x34}}, 0x0) (async, rerun: 64) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x604fa4612877d7ef}, 0xc, &(0x7f0000000800)={&(0x7f0000000b40)=ANY=[@ANYBLOB="ec030000", @ANYRES16=r0, @ANYBLOB="040026bd7000fcdbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="6c0102803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040003000601344a000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001040000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="5c02028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000038000100f3fe01006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400be04000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000500000000003c00010024000100757365725f6c696e6b7570000000000000000000000000000000e4ff000000000500030006000000f200040008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400aa67ffff38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400200000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES64=r4, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000010000008000600", @ANYRES32=r19, @ANYBLOB], 0x3ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 64) syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100300000008e4087f0140000102030109028d00030101900e080b0101010b200009040000000101200009240106000a1500500c24030307033902080900800904010000010220000904010101010220000824020d0000000210240103c101040000000801000080b70905010908"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 4m59.359865233s ago: executing program 2 (id=538): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x420, 0x0) close_range(r1, r1, 0x0) 4m59.309571585s ago: executing program 2 (id=539): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) socket(0x18, 0x2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x800) prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) modify_ldt$write(0x1, &(0x7f0000000900)={0x404, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) syz_clone(0x8100400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x3}}, 0x2e) getsockopt(r3, 0x111, 0x4, 0x0, &(0x7f0000000080)) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x4, @none}, 0xe) 4m59.214050788s ago: executing program 2 (id=541): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x7) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x7) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) read(r2, &(0x7f0000000240)=""/211, 0xd3) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) unshare(0x62040200) (async) unshare(0x62040200) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160006000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r10, 0xe0035000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r10, 0xe0035000) madvise(&(0x7f000012c000/0x3000)=nil, 0x3000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) 4m44.115051592s ago: executing program 32 (id=541): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x7) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x7) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) read(r2, &(0x7f0000000240)=""/211, 0xd3) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) unshare(0x62040200) (async) unshare(0x62040200) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160006000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r10, 0xe0035000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r10, 0xe0035000) madvise(&(0x7f000012c000/0x3000)=nil, 0x3000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) 2m20.821470878s ago: executing program 3 (id=1909): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) (rerun: 64) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000000c0)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa1c3, 0x6) (async, rerun: 32) r2 = socket(0x11, 0x3, 0x8000) (rerun: 32) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r3}}]}) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async, rerun: 32) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800, 0xf0cb2f4a0c2cfc5d, 0x0) (async) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$unix(0x1, 0x1, 0x0) (async) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r5, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x8fa}}, 0x50) (async) read$FUSE(r4, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r7}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x3, 0x1, 0x2, {0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10}}}, 0x3a) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 2m20.800683939s ago: executing program 3 (id=1910): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x4100, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0x0, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) 2m20.742361741s ago: executing program 3 (id=1911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$9p(r2, &(0x7f0000000080), 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x8a, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed3000000000000000000000000000000000000000000000200"], 0xb8}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1}}], 0x1, 0x84) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) 2m20.74212473s ago: executing program 3 (id=1912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x200804, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) getpid() r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x101c01, 0xcd) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000480)={0xd6f0, 0x0, 0x0, 0xffffff7d}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x1) fcntl$getflags(r6, 0x401) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x72, 0x7f, 0x13, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x8, 0xfffffff8, 0x8, 0xfc, 0xff, 0x0, '\x00', 0x0, 0x40000000000}) fstat(r4, &(0x7f0000000340)) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) setfsgid(0xee01) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0xe) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m20.696432583s ago: executing program 3 (id=1913): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d303030303019baf6773030302c757365725f69643d00000024e6d03d8c5b6e11", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="11bbccc29c0cf5d708685c2e73f02c00"]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) pselect6(0x40, &(0x7f0000000600)={0x2, 0x8, 0x35, 0xc5, 0x7ff, 0xffffffffffffd8e3, 0xfffffffffffffff7, 0xc7}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000780)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200b270000002708c2868517b2dc8c0192e477e3abfb8b660983292ccb283b35ea240987"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, &(0x7f0000002040)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff9, 0x8, 0x1, {0x22, 0x9b2}}}}, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f00000021c0)={0x0, 0xa, 0x1, 0x3}, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0xffffffffffffffa4) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000002140)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000b00)=ANY=[], 0x14}}, 0xc000881) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "000112070001b108", "8b3de2aabceef22f419e593e00d7452b16000000000200", "e73400", "000000d900"}, 0x38) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000004540)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c01000019000100fcffffff10000000ffffffff0000000000000000000000006401010200000000000000000000000000000000f7fb20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}}, 0x4080) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0xffffffffffffffb4, r5, {0x7, 0x29, 0x0, 0x11812410, 0x800, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x7f, {0x3, 0x80000, 0x7fffffff, 0x1ffff7ffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x0, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x7e0e, r6, r7, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x0, 0xa0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000008000090400000178eaf50009050137"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) 2m20.532971848s ago: executing program 3 (id=1914): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500fe8000000072080003000500000000", 0x39}], 0x1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000140)) r3 = dup(r2) getgroups(0x3, &(0x7f0000000040)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) setgid(r4) write$UHID_INPUT2(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='\f\x00'], 0x6) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7fffffff}, 0x1c) 2m20.379360273s ago: executing program 33 (id=1914): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500fe8000000072080003000500000000", 0x39}], 0x1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000140)) r3 = dup(r2) getgroups(0x3, &(0x7f0000000040)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) setgid(r4) write$UHID_INPUT2(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='\f\x00'], 0x6) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7fffffff}, 0x1c) 2m16.756881776s ago: executing program 5 (id=1972): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_pgetevents(0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd28, 0x100000, {{}, {0x0, 0x4107}, {0x14, 0x18, {0xffefffff, 0x80000001, 0x1, 0x2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x50c4) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x40d0}, 0x1404cc09) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth1_vlan\x00', &(0x7f0000000100)=@ethtool_ts_info}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793f10d105012000020ef1b2fb0902"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 2m15.433902621s ago: executing program 5 (id=1974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002fc0), r0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000003000)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000804) 2m15.433119911s ago: executing program 5 (id=1975): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000700000000001400020077673000000000000000000000000000900108802c0100801400040002004e207f0000010000000000000000e80009801c000080060001000200000008000200ac14143205000300000000007c000080060001000200000008000200640101020500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200ac1414810500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000f2fd0080060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000216fe8000000000000000000000000000bb050003000100000024000100000000000000000000000000000000000000000000000000000000000000000006000500000000005c000080060005000800000008000a000101000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) madvise(&(0x7f0000619000/0x1000)=nil, 0x1000, 0x17) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, 0x0, &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5004, 0x80000001, @loopback, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="780000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r5 = dup3(r1, r0, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_cmd={0x2a, 0x7ffffffe, 0x1000, 0x4a78, 0x4, 0x0, 0xf, 0x4, 0x0, 0x6, 0x3, 0x0, 0x5, 0x0, 0x10, 0xf996, [0x2, 0x400]}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2m15.366023184s ago: executing program 5 (id=1976): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) unshare(0x30010080) (async) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) (async) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0\x00') (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) socketpair(0x26, 0x800, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x1f7, @vifc_lcl_addr=@private=0xa010101, @empty}, 0x10) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @pic={0x3, 0xaa, 0x4, 0x1, 0x4, 0x6, 0x13, 0x4, 0x9, 0x4, 0xfc, 0x9, 0x9, 0x1, 0xc7, 0x8}}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) (async) r6 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r6, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x0, 0x6, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="208302000000a079"], 0x0, 0x0}) (async) syz_usb_control_io(r6, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="000fa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r6, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m14.58004204s ago: executing program 5 (id=1985): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0xffa3, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, r6}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r4, 0xd00, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9a4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20040004) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 2m14.57749265s ago: executing program 5 (id=1986): mlockall(0x7) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) mlockall(0x2) 2m14.433935886s ago: executing program 34 (id=1986): mlockall(0x7) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) mlockall(0x2) 6.428675132s ago: executing program 1 (id=2816): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x10010001, @local, 0x4}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@multicast1=0xe0000306]}]}}}], 0x18}}], 0x1, 0x4880) setresuid(0xee00, 0xee01, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = userfaultfd(0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000000c0)={0xc, 0x8, 0x40, 0x7, 0x13, "71feaf33c32ed6fe90107884be157e88b3e578"}) write$snapshot(r2, &(0x7f0000000200)="d459f626017ced43234c1ff0874aba6bb66539c2b49647e68f88daf7e79a4b481bd09b9c99e936657c8c3507d648a1251b25aa6f4f88e530982ec4e5b60161f47d3909b84f47e4318a2e523bda0bf8f4b6d53aac7b974d0dac283237e7951a8ea81e783923e44fa5cf2a9e20bda3b65ca39e8354fdaaf9174005d529413f6663f7763e84a48bed0a1deefb9b33f45a4aa4c3d4415616fd19764df4ed487b558c17a29b3ecc587c45ad7353ce8ca33abd7e68ecd211beaff4bb72bbd75b74d59d", 0xc0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x9, 0x101}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r6 = dup(r5) read(r6, &(0x7f00000001c0)=""/1, 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0x7354a64e, 0x4) write$binfmt_script(r11, &(0x7f0000010100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009) 3.722322053s ago: executing program 6 (id=2840): syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902b00003010000000904008000010100000a24010800000201020d2406000003080000000000000c24020601010608000010000c24020800000300000000000924060506010129000924030001030005000c240206"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x80, 0x40, 0x0, 0x7fff, {{0x9, 0x4, 0x0, 0x9, 0x24, 0x64, 0x0, 0x8, 0x73, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2b}, {[@generic={0x86, 0xf, "d43789a86fdf410a8e49fe5422"}, @noop]}}}}}) syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902b00003010000000904008000010100000a24010800000201020d2406000003080000000000000c24020601010608000010000c24020800000300000000000924060506010129000924030001030005000c240206"], 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x80, 0x40, 0x0, 0x7fff, {{0x9, 0x4, 0x0, 0x9, 0x24, 0x64, 0x0, 0x8, 0x73, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2b}, {[@generic={0x86, 0xf, "d43789a86fdf410a8e49fe5422"}, @noop]}}}}}) (async) 3.376468105s ago: executing program 1 (id=2844): mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x1cef000) remap_file_pages(&(0x7f0000d98000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x100) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB='rlog_pages=0']) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, 0x0, 0x20000000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0xc014) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000002300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xcc0}, 0x4000000) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) 3.052808136s ago: executing program 1 (id=2845): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/rcu_expedited', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB='-', @ANYRESHEX, @ANYBLOB="38bc22c1"], 0x28) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x18) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchmodat(r5, &(0x7f00000002c0)='./file0/../file0\x00', 0x160) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r2, 0x3, 0x4) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0xc) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000440)={0xe, {0x9, 0xd, 0x40, 0xeb, "1b0e2dfd2ec2a76f304417456771da2a7f53c7459ff4c855897b02c098ec635353fb5c879fa84aaa67904b52fa37f187b1559e12f03d9aa81a9c4919530f780b29b5c82cab7c548c185d764b7fe1ae14e642ddd8d5a5fcf9c92a5e613b9d8af5a9e80cbe77fadff1959d8b458536305fe8d3c1bfe31d342f68789bd12568a94af04b84d9911791397bd2c796dc95cb3b78d2b789e053cd579460ac26977b45ce610e5ce2ad29f924a3ff83c8acb0be3e75da09c9a09acc61f6742890de62d86d18158c1de2259ec537e07af041c992fa1c0e0f7f3760260b327b21de4e3fe7d056fb4a26d32b7a906e3050"}}, 0xf7) 2.890302441s ago: executing program 4 (id=2847): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = epoll_create1(0x80000) close_range(r0, r2, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xff510000) 2.695587869s ago: executing program 4 (id=2848): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x38a1, 0xffff, 0xaeb, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f9}, [], {0x14, 0x3e8}}, 0x28}}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) (async) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x8, r8, 0x500}, 0x10) getsockopt$inet_tcp_buf(r5, 0x6, 0x1f, 0x0, &(0x7f0000000100)) (async) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) (async) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$UI_GET_VERSION(r9, 0x8004552d, &(0x7f0000000240)) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r11 = socket(0x8000000010, 0x2, 0x0) write(r11, &(0x7f00000003c0)="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", 0xfc) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240800000000001c000000000000000003008400000006f2024088fa0000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 2.673677019s ago: executing program 1 (id=2849): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r0, &(0x7f00000001c0)='./file1\x00', r1, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 2.561365233s ago: executing program 4 (id=2851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1dc7, &(0x7f0000000200)={0x0, 0xd5ab, 0x2, 0x12000001}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0x3c5f, &(0x7f0000000340)={0x0, 0x1c, 0x8, 0x5, 0x372}, &(0x7f00000002c0), &(0x7f0000000140), &(0x7f0000000000)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="00c89baaef78d2e2bc058900591687ca00008100", 0x14}, {&(0x7f0000000100)="aa1ff3", 0x3}], 0x2) 2.449146947s ago: executing program 4 (id=2852): setuid(0xee01) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000000)='f', 0x1, 0x24044084, 0x0, 0x0) capset(&(0x7f0000004240)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000000, 0x0, 0x7fff}) prctl$PR_CAPBSET_DROP(0x18, 0x1) r1 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x8) fchdir(r2) (async) r3 = fsopen(&(0x7f0000000300)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_setscheduler(r4, 0x6, &(0x7f0000000140)) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x0) 2.158274826s ago: executing program 6 (id=2853): socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x1, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000000)={0xffff, 0xff, 0x3}) setns(r4, 0x24020000) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 2.084421579s ago: executing program 6 (id=2854): unshare(0x64000600) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x7}) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r3, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000000840)=""/121, 0x79}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/206, 0xce}, {&(0x7f0000004b80)=""/4102, 0x1006}, {&(0x7f00000009c0)=""/75, 0x4b}, {&(0x7f0000000a40)=""/26, 0x1a}], 0x6}, 0xb}], 0x3, 0x40000000, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bind$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) utimensat(r7, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) renameat2(r8, &(0x7f0000000080)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00', 0x1) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 1.895388126s ago: executing program 4 (id=2855): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1e3880, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x7}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe851000) sendmmsg(0xffffffffffffffff, &(0x7f0000004680), 0x0, 0x20004045) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x38) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x74490) 1.658240754s ago: executing program 0 (id=2856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0xfffffffd, @empty, 0xfffffffc}, 0x2, {[0x0, 0x41, 0xfffffffe, 0x2, 0xffffffff, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x6000, 0xfffffff8, 0x7, 0x400, 0x0, [{0x8, 0x8, 0x9, '\x00', 0xc}, {0x60, 0x0, 0x0, '\x00', 0x9}, {0x1, 0x0, 0x1, '\x00', 0x55}, {0x7, 0x7, 0x40, '\x00', 0xe7}, {0xc8, 0x4, 0x7, '\x00', 0x4}, {0x7, 0xb2, 0xd0, '\x00', 0x61}, {0x7, 0x62, 0x2, '\x00', 0x1}, {0x8, 0x1, 0x2, '\x00', 0x9}, {0xae, 0x3, 0xc, '\x00', 0x5}, {0x0, 0xa, 0x8, '\x00', 0x11}, {0x36, 0xc2, 0x5, '\x00', 0xec}, {0x3e, 0x1, 0xed, '\x00', 0x2}, {0x3, 0x56, 0x4, '\x00', 0x5}, {0xca, 0x2, 0x8a, '\x00', 0x7}, {0xb, 0x1, 0x7, '\x00', 0x1}, {0xde, 0x6, 0x1, '\x00', 0x29}, {0x6, 0x81, 0xa, '\x00', 0x80}, {0x9, 0x36, 0x0, '\x00', 0x4}, {0x2, 0x3, 0xe3, '\x00', 0x5}, {0x10, 0x39, 0x8, '\x00', 0x2}, {0xff, 0x10, 0x4, '\x00', 0x4}, {0x1, 0xb, 0x6, '\x00', 0x5}, {0x2, 0x6, 0xf, '\x00', 0xa0}, {0x9, 0x40, 0x0, '\x00', 0x6}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x1, 0x7, 0x9, 0x2, 0x106c, 0x4000100, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x10001, 0x0, 0x108000], 0x1, 0x8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.46600437s ago: executing program 0 (id=2857): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/rcu_expedited', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB='-', @ANYRESHEX, @ANYBLOB="38bc22c1"], 0x28) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x18) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchmodat(r5, &(0x7f00000002c0)='./file0/../file0\x00', 0x160) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r2, 0x3, 0x4) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0xc) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000440)={0xe, {0x9, 0xd, 0x40, 0xeb, "1b0e2dfd2ec2a76f304417456771da2a7f53c7459ff4c855897b02c098ec635353fb5c879fa84aaa67904b52fa37f187b1559e12f03d9aa81a9c4919530f780b29b5c82cab7c548c185d764b7fe1ae14e642ddd8d5a5fcf9c92a5e613b9d8af5a9e80cbe77fadff1959d8b458536305fe8d3c1bfe31d342f68789bd12568a94af04b84d9911791397bd2c796dc95cb3b78d2b789e053cd579460ac26977b45ce610e5ce2ad29f924a3ff83c8acb0be3e75da09c9a09acc61f6742890de62d86d18158c1de2259ec537e07af041c992fa1c0e0f7f3760260b327b21de4e3fe7d056fb4a26d32b7a906e3050"}}, 0xf7) 1.436604781s ago: executing program 6 (id=2858): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f00000001c0)={0x101ff, 0x200, 0x140, &(0x7f0000000280)=[0x85bd, 0x8, 0x0, 0x40000000001, 0x0, 0xc, 0x1, 0x0, 0x1, 0xfffffffd, 0x400, 0x3, 0xfffffffffffffff7, 0x8, 0x7fff, 0x7, 0x800, 0xe147, 0x1, 0x401, 0x5, 0xc0, 0x3, 0x5, 0x5, 0x0, 0x5, 0x8, 0x10, 0xc0, 0x3, 0x1000, 0x343, 0x2, 0x1, 0x5, 0x779, 0xe, 0x6, 0x7, 0xc5, 0xffff, 0x1, 0x1, 0x67b6487a, 0x1, 0xd9c, 0x1406, 0x6, 0x3, 0x8, 0xffffffffffffffff, 0x3, 0x6, 0xf783, 0xeb69, 0x7, 0xed0, 0xcd, 0x6, 0x1, 0x4f21, 0xcc, 0x10, 0xffffffffffffff44, 0xd, 0x4, 0xd7a1, 0x6, 0xbb07, 0xffffffff80000001, 0x400, 0x3bd, 0x101, 0x8001, 0xffffffff00000000, 0xbfc, 0x8, 0x40000000000000, 0x8, 0xdd, 0xffff, 0xffffffffffff6150, 0x400000100000001, 0x8, 0xfffffffffffffff8, 0xe, 0xffffffffffff8528, 0x648, 0x9b3, 0x5, 0x9, 0x6, 0x9, 0x1, 0x5, 0x0, 0x8, 0x7, 0x7, 0x1, 0x35f5, 0x1, 0x7fffffffffffffff, 0x4, 0xfe, 0x9, 0x6, 0x7, 0x1, 0x64, 0x9, 0x8004, 0x7, 0x6b94, 0x8000, 0x8, 0x8001, 0x8, 0xffffffffffffff99, 0x8, 0x0, 0x9, 0x271d, 0x8, 0x0, 0x100, 0x7fffffff]}) r1 = socket$can_raw(0x1d, 0x3, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000280), 0x31) capset(&(0x7f0000001440)={0x19980330}, &(0x7f0000001400)={0x0, 0x2, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r3}) request_key(&(0x7f0000000200)='blacklist\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000680)='F\x17S\xaf\xae\xc3\x17\xa7]\x03z\x7f{H\xeb\xba\xafn\xb6\xd4U\x83\xe6\xd0\xbd\x16\xfc\x10\xe6[\xa5h\xd3\xc4a\xebN\xf082\x85\x02\xf2\x00%\x1d\xa3_\xcd\xb3\x88T\x02!6\xd1\xcc%\xbaP6(\x98\x1c\xde\x13RR\x89\xf3#0\x9dF\x88&\xb6\xda|}\xb7\\\xddD\x83\xc2\x8e\xc1\xe7\xafb5\x19kP\x00\x00\xf2\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xee^7\x1bN\x83\xef\xcb\x87\x0fpe\xed\x13d\xeaP\xc2\xd2\xb4`\x82\xe3\xe5\x12\x7fq\xe9\v\xe9<\xfb\xb6E\xe68=\x160\xfb\x84&\xe9\xab\xe9\x84\x9c\xde\xd90\x16\x066k\x965\x1dM;\xe3+\x90(\xec\x81x\xeae\xa3\xb0mS\xa5\x02\x06c\xdb(\xb5\x89\xd3J\x9b\x05\xe2)z\xbb\x9fcuhz\xca<\xd9', r3) keyctl$link(0x8, r4, r4) syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 1.370313894s ago: executing program 1 (id=2859): prlimit64(0x0, 0xe, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x40000091, 0x0, 0x3}]}) 1.194809219s ago: executing program 6 (id=2860): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x5, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0xe41, 0x0, 0x9e5e111c47e3504f) 1.16412439s ago: executing program 4 (id=2861): r0 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000010007fd500fe01b2a4a280930a06000000a843089100fe801100080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000640)=[@nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18}, @wrmsr={0x65, 0x20, {0x24e, 0x6}}, @nested_create_vm={0x12d, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x27b5, 0x1000}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xf1, 0x4, 0x3}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0xa0, {0x2, 0x1, [@nested_amd_vmload={0x182, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x7f7, 0x100000000}}, @wr_drn={0x68, 0x20, {0x3, 0x4}}]}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0x7fff, 0x10000, 0xffffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control_nat=0x6006, 0x4, 0x10000, 0x3}}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x6}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host64=0x2c00, 0x8, 0x6, 0x1ff}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x77, 0x5, 0x3, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control32=0x401c, 0x1, 0x4ec9297e, 0xb}}, @code={0xa, 0x5d, {"66baf80cb8a0fce585ef66bafc0cedc401fff03e8f09a098390fc7ba00800000b9800000c00f3235000400000f3026672667420fdb94e500800000c4c20d38e1c4a245a81764e143470f1c36"}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host_nat=0x6c02, 0x0, 0xa, 0x3}}, @nested_load_syzos={0x136, 0x80, {0x1, 0xddd, [@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x0, 0x8}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x2}]}}, @wrmsr={0x65, 0x20, {0xa03, 0x2}}], 0x455}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000580)={[0x2, 0xe, 0x3, 0xa, 0x4d, 0x1, 0x6, 0x7, 0xffffffff, 0x7, 0x7, 0x9, 0x3, 0x9, 0x3, 0x1], 0xffffffff, 0x800}) r2 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 1.16371343s ago: executing program 1 (id=2862): ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x8, 0x204, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x60004) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000180)={0x1, 0x0, @pic={0x6, 0x3, 0x80, 0x9, 0x2, 0x5, 0x9, 0x1, 0xb, 0x9, 0x8, 0x0, 0x4, 0x8, 0x8e, 0xff}}) r1 = signalfd(r0, &(0x7f00000003c0)={[0x20cf]}, 0x8) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000440)=@attr_other={0x0, 0x2, 0x37, &(0x7f0000000400)=0x414}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x8, 0x10, 0xffffffff, 0xf, {{0x6, 0x4, 0x0, 0x3, 0x18, 0x65, 0x0, 0x3, 0x2f, 0x0, @loopback, @private=0xa010101, {[@noop]}}}}}) sendmsg(r2, &(0x7f0000001880)={&(0x7f0000000500)=@xdp={0x2c, 0xa, r3, 0x22}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)="378569424fe43bf4b0233abc06", 0xd}], 0x1, &(0x7f0000000600)=[{0x100, 0x88, 0x3ff, "14435b4ddcbb2e8dc1f03687ad1db9e1fe36b0733fb87deaffe9f2694b0bfe3ee57b5d2352f19776705409d974690f024c52a96432d13e4d4b11898210421a2984ae82d7878ecc473a4e53598d2a716555f2a08890cc9b1dfac40f6721f4e5fdbc4f8634b26f5599ee8235bc2b3d53633862bc787eb0e6c04891083e2fba8e4cf5e50865d50348d1ede3490ed164e9dfb776ab43f27bc2deb2e6aa1bb04accffc9a7100ea3a9544c3919a3f34a750aaf1446c06b477742ec332edc55116fda19313e9671ddf49a8f1c8aa8d3a68d003148cc09bf18445da99708b98f2ca0a63ef2a72148e50c3b02da22c3bf"}, {0x80, 0x103, 0x3, "d76320f2b1c9b470a5371ef09d5e74a614d9addfb4c6b3dbc7f8ca25a89c3119d46ef925b8192c9b6a21e42780a64b20ed057351aa8a5ab74ba8b93a3aa4a64f2a1c2d08d20564e424ab66ce99c6976418f7767a29fc1f35da4d0f9836938e7a57c37408b2f05b2ea082"}, {0x88, 0x10b, 0x401, "d28931ac2d8d694400e103f4267a9dfc6084a50afbd555a547e3ce8273095ab40c96718d3e29f78f635b34d9fc05a844355f4a11d4082fcd94d46ebed81344b27f6a324f824439aaac806627be57e20511e79a81d381fe6c0fdd13c9edc69f2b1677029f5ad86ed7af0cbd633d16e2f11ff381"}, {0x48, 0x0, 0x4, "4830b171400da1ba849aab10153c2d8e373b68542023510801d2f5e21a5e04b7868c60f175e656e0b82ce369cea26f00d5082fae72b9"}, {0x1010, 0x102, 0x9, "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"}], 0x1260}, 0x88) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0xa0, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x1a}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x1c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2a}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}, @NL80211_ATTR_SSID={0x10, 0x34, @random="b781510172ec5fdad3ac60db"}, @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x13}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x6}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x4}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_PRIVACY={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000085) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000001a80)={0xe, 0x0, 0x722b, 0x26a6, 0x800}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000001b00)) fchmod(r1, 0x0) sendto$packet(r1, &(0x7f0000001f00)="c86d34a109364254ada40d4b3bf6bec27cc3bbc3367d17b1ddc5ee7b220137ea292b63d301b3fd86eb43c4e136e2ff12d9b68e95fd80f14b5796ec18985bf5d42bad78151d27f5ecd1b63ee8f67c3c97ae01903e0956f74e1eae038e4398817de7b16a870dd08b4a81a990b681b80637c5fb6279282882a089a6f51fe9dc26524e9fc27e91b8d6da77551b28b4fd53704931650a28f1e0f5f62a2bb29f1a04e387367238b082ca7efab1885ee468", 0xae, 0x884, &(0x7f0000001fc0)={0x11, 0x4, r3, 0x1, 0xb, 0x6, @broadcast}, 0x14) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x2, 0x4) vmsplice(r1, &(0x7f00000020c0)=[{&(0x7f0000002000)="aa70c92368a1176a73bc0bd4c1d6f1bc71248a36fa96fa973410aac3a2886f8f25a6a48c9a6302316638a9d8f4821bb483feb22361fb4f81aaec42d25c8a61810f2682bf3ab25fca4327104c0cc2380c7aa0da83dcf4d0f7add2ca466dde4f8e65bbfd9a6ae29ae3d7e69b7fb846983914c171da98b93a1d5c6a327900d4419f7060cb9a77", 0x85}], 0x1, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000002100)={[0xe62, 0x4e, 0xffffffff, 0x2, 0x101, 0xfffffffffffffff6, 0x5, 0x8, 0xb89, 0x7f, 0x7fff, 0x2, 0x1, 0x8, 0x4, 0x24c], 0x0, 0x90820}) sendmmsg(r1, &(0x7f0000003840)=[{{&(0x7f00000021c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x1, 0x4, 0x3, {0xa, 0x4e23, 0x400, @mcast2, 0x8}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002240)="907c3c1fa80e1db7819af410a7e66209f4b1d22d2df7ce83b187981b19f1307aa9642f777f583238c0dbb4373c2e28323b7319dc37858ba9cbf43d56fb91842c9dce3751cf3a2f21f522d67989998c2e6e7930f6e77ef2d768beeda3b1133c912fb61a0004b546dac0b0813adc6090cb399b7d4c2ed51ae0bfa3599775819e6d0bbababc70d6b74b584fc53d85bacb4ac6c593c56cf1d4", 0x97}, {&(0x7f0000002300)="a14081d23bdb44a98484cce066b75f054feba3f39d326936a726b14b7431887db4661fc097abd534fa455ac11e5d91c9c58df5d2948ad63f1edb73b839a0cde998df1c5ae863c1e0ddf23e26169ea5b903cb7c4c142d811db40787001e7c83fb19ff6f581656670d62005cd595dea67e190b80df43d14a48e3b2b31b6dc69ab8209e817009caab0b1c46e938cb905aa344093fa4282b11a4fb63882a1cd4c1306bd9dde1bac3953ea57f15e15d7f2be6a8c154aeb4e628ed4fe13d110c8cab56a3e69f0b59c6e1ce43741ef7cbfe9aa1ca67438c961886ffaec7d2cefbb3", 0xde}, {&(0x7f0000002400)="e7f5d9fbfbadd37e5532ca55d22757dc6e58e65b362746d71726a34fb8209aee359e505543c8c025267580795cf3277ddac6846cf3765362e134ba877edc", 0x3e}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)="5b84a8766d35d0acdd9d8a20f4b0b9fab6c2fcdd33de21ce25575cede1e453bbee8c55b55842a9229ef3e082d90e4235083725fe9f7f6c9a3ca3c88f57c5726825db174231d6fa950e85608876a73e8b150aea63b197ac65a78689c5411e985fe59e3c3f52d2666b3895d3cb06d8b70494a22352864b67", 0x77}], 0x5, &(0x7f0000003540)=[{0xd0, 0x102, 0x6, "da9c9cdf0ebbd0f8e0aa2c1a027ac7db8d5913cc268f38a1012cad49b5afb7c70136ec393b337d83f3ffefe6c3f43e484269abc1864e5b3daf511fb04d41b2d37fc56d38dc81eb5264d353b5078f861909eef92ed79e1d1bc400cfabde1d1e688a12693a47c176928a473a5b222e7e87d009124dcafacaa1454f1822b81b8d6ebad8cd0505d5f502a071496abe8d2e0db2b0d3b52a891a1b404b14d529e9a2efa996fc61d21f333b1f52e14a32526e74c0eca9b12078917d6f965fbbbf3f"}], 0xd0}}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003640)="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", 0xfd}, {&(0x7f0000003740)="0d7457aae5db0180acd5497f470aac6c8c4ad8a91caa7126e4d456830e1c877c595bf92c388ca0af9ea488d5de53e6e6dbbc57964b064210b6d0f3272e61e83ebced4f6ac2c3001fe36145ec30964fcbdefada2b74d0ce5883a5b2c63f7c98ef576fd13aa2507ab5fbde556955c7ddc8475ce11b84a7c5489c494cbd4a4170eff780ee0a9528a7416b66ed956221db0af5bb9bcdaf928791b356b4520d0a3bc3de0444b681", 0xa5}], 0x2}}], 0x2, 0x4004000) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = accept4(r2, &(0x7f00000038c0)=@hci, &(0x7f0000003940)=0x80, 0x400) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000003980)=@req3={0x6, 0x8, 0x8, 0x4, 0x4, 0x6f, 0x5}, 0x1c) syz_usb_connect$cdc_ncm(0x0, 0x78, &(0x7f00000039c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x0, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "2fb3"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x8, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0xfffc, 0xa}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7fff, 0x4, 0x3cbd}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xf, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x9b, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x4, 0x9}}}}}}}]}}, &(0x7f0000003bc0)={0xa, &(0x7f0000003a40)={0xa, 0x6, 0x300, 0xb5, 0x0, 0x1, 0x8, 0x3}, 0x32, &(0x7f0000003a80)={0x5, 0xf, 0x32, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x4, 0x2}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x7ffffff, 0xf0f, 0x0, [0x18000, 0xff0000, 0xc030, 0xff00f0, 0x3f3f]}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000003ac0)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000003b00)=@lang_id={0x4, 0x3, 0x1809}}, {0x33, &(0x7f0000003b40)=@string={0x33, 0x3, "6614ce8e1c8d1a2a5a91c6c0bb2f30814bcac5e872bcdb68fd27f98a920e9ae5b58810799464666c29c66b0bf3f632d4cd"}}, {0x4, &(0x7f0000003b80)=@lang_id={0x4, 0x3, 0x1001}}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000003dc0)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003c80)={0xfc, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x2, 0x2, 0x0, {0x3, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x4}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xef3ca9e4406032c}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x7, 0x0, {0x2, 0x42f, 0x0, 0x9, 0x0, 0x1}, 0x1, 0x100, 0xb8}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x2, 0x2, 0x0, {0x7fc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x2, 0x3}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x3, 0xff, 0x3, 0x4, 0x2, 0x3b9, 0x7, 0x75b1, 0x4, 0x81, 0xa, 0x4, 0xd57a, 0x6, 0xfff, 0xc000]}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x393, 0xc49, 0x0, 0x9, 0x3, 0x7, 0x1000, 0x8, 0x0, 0x9, 0xffff, 0x0, 0x3, 0xb9, 0x3, 0xfff9]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4080}, 0x800) r7 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r7, 0x4010ae74, &(0x7f0000003e00)={0x400, 0x10000, 0xe}) read$FUSE(r7, &(0x7f0000003e40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x7, &(0x7f0000005e80)={0x0, 0x2b, 0x0, @tid=r8}, &(0x7f0000005ec0)) 1.010355915s ago: executing program 6 (id=2863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0xfffffffe, 0x1}, 0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r1) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r3, &(0x7f0000000180)='1\x00', 0x2) 881.48358ms ago: executing program 0 (id=2865): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f000000a480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="a47c13", 0x3}], 0x1}}], 0x1, 0x24044c45) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0x1, 0x8, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x7, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000000, 0x0, 0x6], [0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x5, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x5d71, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0xff, 0x5, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x800000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c, 0x0, 0x6, 0x0, 0x1, 0x1d, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000, 0x4, 0x91a, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xfffffffc, 0xffffffff, 0x1, 0x0, 0x0, 0x8f4, 0x400000, 0x0, 0x0, 0x10200000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x4]}, 0x45c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x1029577e49}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={0x200, 0x9, 0x26}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xb3, 0x39da], 0x30000, 0x201053}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c602b0304000e0580a7b6070d63e286a5cefe", 0x5ac) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) 703.643206ms ago: executing program 0 (id=2866): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) msync(&(0x7f0000461000/0x4000)=nil, 0x4000, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 562.277751ms ago: executing program 0 (id=2867): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x2000000) r1 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003000000408c0d020140000102030109026e000301046008080b0001012430010904000000010130000a2401f50a0045d1000009042100000102"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000a00)={0x14, &(0x7f0000000940)={0x40, 0x4, 0x74, {0x74, 0x11, "7b47e382442996be8c0a10859e3cead928931ab7b4849436c49dc45198a07112d93880943201d1af9cec3ced9effdf32071840a398916a7dc7f362d24898c7bf7c2facfcb7d9940929a10b0e9c47522b3523e9dc996a167ce86c191df7aed0a3565a6d7eb6dab3fb46134ad326b6a19999e2"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a40)={0x0, 0x16, 0xfe, "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"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000c00)={0x20, 0x81, 0x1, 'W'}, &(0x7f0000000c40)={0x20, 0x82, 0x3, "831b33"}, &(0x7f0000000c80)={0x20, 0x83, 0x3, "02c1f5"}, &(0x7f0000000cc0)={0x20, 0x84, 0x2, "b997"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, 'eC#'}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x20, 0x11, 0xd4, {0xd4, 0xe, "b12959d7b564995cc82f51842f4c7d4b61b3ecfeae6b6bc46c27a1f6f5bf365c0ebaa5ca4a1bd6e7348d5d017cc949960f78fda371c473860adef34e28c3712bce0a0f8e62d8b9193bf60524015494839e8a376fd47669a65a373b6df4b599438b79f7c1a7ff50fdba47b4670a2bd6efe3ad27ad0235661959111513ffdc9a99de725b4a073647e8c954aa7c9162812e92e7bd8f8f18436ebf7b7e76979ba47990a25dda37c723e71d7364bce1f9ff2b53f39f5d597d2aa65d85037f56bdfc9b923ffa401dbe3a3bede575f52b751389ac5d"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000600)={0x20, 0x30, 0xd0, "78a10246377b5e73dbf7fdd631df26fb02544f4bfadb819ad4317097d895cadbc77379e57c29ee5b29056467cc6a801e254f34a1dff6e6c09fcce3a646e64e50a2c4f47e75aaf8bf15a487ee592015ae175ffda446c156c4bc25dc5bb3f1b26f9fd9fbed4a4d28be034b8d7fbd54c507ae466cf5cefbe8a69e7be67e18ce7c0055b1cf0cd9ad9623106ffb34e8b12a3d639e9859a01cd098d2545376978a460c4f95516ea86c01bcab9069709b72fd0d6d506c803821263967e6d405271e9fdeb8315e51deda5b462a168e7e4727b5c1"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000780)={0x20, 0x81, 0x2, "e3e7"}, &(0x7f00000007c0)={0x20, 0x82, 0x2, "c283"}, &(0x7f0000000800)={0x20, 0x83, 0x2, 'Or'}, &(0x7f0000000840)={0x20, 0x84, 0x3, "d80f3e"}, &(0x7f0000000880)={0x20, 0x85, 0x3, "b5528c"}}) syz_usb_control_io$uac3(r1, 0x0, 0x0) 0s ago: executing program 0 (id=2868): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0xffffff7f) kernel console output (not intermixed with test programs): filesystem on ./file0 not supported as upperdir [ 321.647527][ T7974] overlay: filesystem on ./file0 not supported as upperdir [ 321.675765][ T7984] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2402'. [ 321.685092][ T7984] gretap0: entered promiscuous mode [ 321.691443][ T7984] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2402'. [ 321.700643][ T7984] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2402'. [ 321.710228][ T7985] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2402'. [ 321.719187][ T7985] 0ªî{X¹¦: renamed from gretap0 [ 321.724726][ T7985] 0ªî{X¹¦: left promiscuous mode [ 321.729810][ T7985] 0ªî{X¹¦: entered allmulticast mode [ 321.735878][ T7985] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 321.761210][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.770097][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.780221][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.789882][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.810749][ T7992] KVM: debugfs: duplicate directory 7992-6 [ 322.037674][ T379] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 322.127680][ T31] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 322.167945][ T379] usb 1-1: device descriptor read/64, error -71 [ 322.257712][ T31] usb 7-1: device descriptor read/64, error -71 [ 322.407727][ T379] usb 1-1: device descriptor read/64, error -71 [ 322.507796][ T31] usb 7-1: device descriptor read/64, error -71 [ 322.527659][ T436] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 322.647699][ T379] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 322.678702][ T436] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.688919][ T436] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.698687][ T436] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 322.707781][ T436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 322.715777][ T436] usb 2-1: SerialNumber: syz [ 322.757711][ T31] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 322.787689][ T379] usb 1-1: device descriptor read/64, error -71 [ 322.887776][ T31] usb 7-1: device descriptor read/64, error -71 [ 322.924546][ T436] usb 2-1: 0:2 : does not exist [ 322.931230][ T436] usb 2-1: USB disconnect, device number 84 [ 322.942226][ T4029] udevd[4029]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 323.027688][ T379] usb 1-1: device descriptor read/64, error -71 [ 323.127765][ T31] usb 7-1: device descriptor read/64, error -71 [ 323.137806][ T379] usb usb1-port1: attempt power cycle [ 323.237751][ T31] usb usb7-port1: attempt power cycle [ 323.477703][ T379] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 323.498818][ T379] usb 1-1: device descriptor read/8, error -71 [ 323.577682][ T31] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 323.598676][ T31] usb 7-1: device descriptor read/8, error -71 [ 323.628779][ T379] usb 1-1: device descriptor read/8, error -71 [ 323.677666][ T380] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 323.728760][ T31] usb 7-1: device descriptor read/8, error -71 [ 323.827692][ T380] usb 2-1: Using ep0 maxpacket: 8 [ 323.833986][ T380] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 323.842316][ T380] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 323.850466][ T380] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.860576][ T380] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 323.869523][ T379] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 323.877140][ T380] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.891617][ T380] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 323.900719][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.908816][ T380] usb 2-1: Product: syz [ 323.913046][ T380] usb 2-1: Manufacturer: syz [ 323.917741][ T380] usb 2-1: SerialNumber: syz [ 323.922929][ T379] usb 1-1: device descriptor read/8, error -71 [ 323.929674][ T380] usb 2-1: config 0 descriptor?? [ 323.935415][ T380] hub 2-1:0.0: bad descriptor, ignoring hub [ 323.941463][ T380] hub 2-1:0.0: probe with driver hub failed with error -5 [ 323.982289][ T31] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 323.990527][ T8030] incfs: Options parsing error. -22 [ 323.995766][ T8030] incfs: mount failed -22 [ 324.009503][ T31] usb 7-1: device descriptor read/8, error -71 [ 324.058796][ T379] usb 1-1: device descriptor read/8, error -71 [ 324.079648][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.088533][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.139890][ T31] usb 7-1: device descriptor read/8, error -71 [ 324.187670][ T379] usb usb1-port1: unable to enumerate USB device [ 324.257710][ T31] usb usb7-port1: unable to enumerate USB device [ 324.587792][ T379] usb 2-1: USB disconnect, device number 85 [ 325.141752][ T8057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.150460][ T8057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.207696][ T379] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 325.297688][ T31] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 325.348444][ T36] audit: type=1400 audit(7100059398.348:1352): avc: denied { ioctl } for pid=8060 comm="syz.1.2431" path="/149/file0" dev="tmpfs" ino=808 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 325.372912][ T379] usb 1-1: Using ep0 maxpacket: 32 [ 325.382916][ T379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.397012][ T379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.406876][ T379] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 325.416021][ T379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.425545][ T379] usb 1-1: config 0 descriptor?? [ 325.427768][ T31] usb 7-1: device descriptor read/64, error -71 [ 325.435718][ T379] hub 1-1:0.0: USB hub found [ 325.632920][ T379] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 325.677738][ T31] usb 7-1: device descriptor read/64, error -71 [ 325.687885][ T3941] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 325.817693][ T3941] usb 2-1: device descriptor read/64, error -71 [ 325.917697][ T31] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 326.035827][ T379] hid-generic 0003:046D:C31C.0029: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 326.047898][ T31] usb 7-1: device descriptor read/64, error -71 [ 326.057682][ T3941] usb 2-1: device descriptor read/64, error -71 [ 326.287718][ T31] usb 7-1: device descriptor read/64, error -71 [ 326.297739][ T3941] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 326.397824][ T379] usb 1-1: USB disconnect, device number 46 [ 326.399385][ T31] usb usb7-port1: attempt power cycle [ 326.427700][ T3941] usb 2-1: device descriptor read/64, error -71 [ 326.667706][ T3941] usb 2-1: device descriptor read/64, error -71 [ 326.747726][ T31] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 326.768766][ T31] usb 7-1: device descriptor read/8, error -71 [ 326.777928][ T3941] usb usb2-port1: attempt power cycle [ 326.898854][ T31] usb 7-1: device descriptor read/8, error -71 [ 326.943778][ T8074] netlink: 'syz.0.2436': attribute type 22 has an invalid length. [ 327.128465][ T3941] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 327.137812][ T31] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 327.148717][ T3941] usb 2-1: device descriptor read/8, error -71 [ 327.158860][ T31] usb 7-1: device descriptor read/8, error -71 [ 327.278921][ T3941] usb 2-1: device descriptor read/8, error -71 [ 327.289276][ T31] usb 7-1: device descriptor read/8, error -71 [ 327.397743][ T31] usb usb7-port1: unable to enumerate USB device [ 327.517662][ T3941] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 327.538775][ T3941] usb 2-1: device descriptor read/8, error -71 [ 327.668801][ T3941] usb 2-1: device descriptor read/8, error -71 [ 327.777802][ T3941] usb usb2-port1: unable to enumerate USB device [ 328.185528][ T36] audit: type=1400 audit(7100059401.178:1353): avc: denied { setattr } for pid=8081 comm="syz.4.2439" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 328.329940][ T8089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.338456][ T379] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 328.340702][ T8089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.468093][ T8091] fuse: Unknown parameter '0xffffffffffffffffÿÿÿÿ' [ 328.488653][ T379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.499822][ T379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.509587][ T379] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 328.518669][ T379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.527233][ T379] usb 7-1: config 0 descriptor?? [ 328.935353][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.944082][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.954111][ T379] playstation 0003:054C:0DF2.002A: unknown main item tag 0x0 [ 328.961635][ T379] playstation 0003:054C:0DF2.002A: item fetching failed at offset 4/5 [ 328.970205][ T379] playstation 0003:054C:0DF2.002A: Parse failed [ 328.976590][ T379] playstation 0003:054C:0DF2.002A: probe with driver playstation failed with error -22 [ 329.019513][ T8101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.028109][ T8101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.162944][ T3941] usb 7-1: USB disconnect, device number 37 [ 329.247687][ T379] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 329.398671][ T379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 329.409691][ T379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.421071][ T379] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 329.430363][ T379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.438415][ T379] usb 2-1: Product: syz [ 329.442594][ T379] usb 2-1: Manufacturer: syz [ 329.447202][ T379] usb 2-1: SerialNumber: syz [ 329.452511][ T379] usb 2-1: config 0 descriptor?? [ 329.458363][ T379] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 329.464714][ T379] usb 2-1: No valid video chain found. [ 329.659669][ T379] usb 2-1: USB disconnect, device number 90 [ 329.917660][ T3941] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 330.067655][ T3941] usb 7-1: Using ep0 maxpacket: 16 [ 330.076251][ T3941] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.084420][ T3941] usb 7-1: config 0 has no interface number 0 [ 330.090684][ T3941] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.101656][ T3941] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.111528][ T3941] usb 7-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 330.120647][ T3941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.129748][ T3941] usb 7-1: config 0 descriptor?? [ 330.214124][ T8118] kvm: user requested TSC rate below hardware speed [ 330.222858][ T8118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8118 comm=syz.1.2453 [ 330.235715][ T36] audit: type=1400 audit(7100059403.238:1354): avc: denied { connect } for pid=8117 comm="syz.1.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 330.397646][ T31] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 330.539322][ T3941] usbhid 7-1:0.1: can't add hid device: -71 [ 330.545290][ T3941] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 330.554434][ T3941] usb 7-1: USB disconnect, device number 38 [ 330.561962][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 330.571260][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 330.579885][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.590024][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.600635][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.609772][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.617824][ T350] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 330.625443][ T31] usb 1-1: Product: syz [ 330.629663][ T31] usb 1-1: Manufacturer: syz [ 330.634451][ T31] usb 1-1: SerialNumber: syz [ 330.778737][ T350] usb 2-1: config 5 has an invalid interface number: 66 but max is 0 [ 330.786906][ T350] usb 2-1: config 5 has no interface number 0 [ 330.793049][ T350] usb 2-1: config 5 interface 66 has no altsetting 0 [ 330.801337][ T350] usb 2-1: New USB device found, idVendor=7d94, idProduct=77d3, bcdDevice=81.05 [ 330.810462][ T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.818512][ T350] usb 2-1: Product: syz [ 330.822698][ T350] usb 2-1: Manufacturer: syz [ 330.827317][ T350] usb 2-1: SerialNumber: syz [ 331.037259][ T350] usb-storage 2-1:5.66: USB Mass Storage device detected [ 331.049748][ T31] usb 1-1: 0:2 : does not exist [ 331.058664][ T31] usb 1-1: USB disconnect, device number 47 [ 331.071851][ T8125] netlink: 'syz.6.2455': attribute type 25 has an invalid length. [ 331.091324][ T350] usb 2-1: USB disconnect, device number 91 [ 331.554880][ T36] audit: type=1400 audit(7100059404.548:1355): avc: denied { write } for pid=8150 comm="syz.1.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 331.584396][ T8156] netlink: 'syz.1.2463': attribute type 8 has an invalid length. [ 331.592277][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2463'. [ 331.707653][ T350] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 331.857691][ T350] usb 7-1: Using ep0 maxpacket: 16 [ 331.864125][ T350] usb 7-1: config index 0 descriptor too short (expected 126, got 99) [ 331.872509][ T350] usb 7-1: config 1 descriptor has 1 excess byte, ignoring [ 331.879783][ T31] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 331.887400][ T350] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 331.899893][ T350] usb 7-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice= 0.40 [ 331.908995][ T350] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.917008][ T350] usb 7-1: Product: syz [ 331.921192][ T350] usb 7-1: Manufacturer: syz [ 331.925801][ T350] usb 7-1: SerialNumber: syz [ 332.048967][ T31] usb 2-1: config 162 has an invalid interface number: 79 but max is 1 [ 332.057425][ T31] usb 2-1: config 162 has an invalid interface number: 183 but max is 1 [ 332.065871][ T31] usb 2-1: config 162 has no interface number 0 [ 332.072271][ T31] usb 2-1: config 162 has no interface number 1 [ 332.078627][ T31] usb 2-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 332.091928][ T31] usb 2-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 332.102977][ T31] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 332.114210][ T31] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 332.125533][ T31] usb 2-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 332.139718][ T31] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 332.151235][ T31] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 332.162720][ T31] usb 2-1: config 162 interface 183 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 332.172993][ T31] usb 2-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 332.186389][ T31] usb 2-1: config 162 interface 79 has no altsetting 0 [ 332.193776][ T31] usb 2-1: config 162 interface 183 has no altsetting 0 [ 332.202505][ T31] usb 2-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 332.212347][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.220590][ T31] usb 2-1: Product: syz [ 332.224902][ T31] usb 2-1: Manufacturer: syz [ 332.229765][ T31] usb 2-1: SerialNumber: syz [ 332.437210][ T31] pl2303 2-1:162.79: required endpoints missing [ 332.446339][ T31] pl2303 2-1:162.183: pl2303 converter detected [ 332.453441][ T31] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 332.464878][ T31] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 332.474473][ T31] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 332.483578][ T31] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 332.492165][ T31] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 332.501476][ T31] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 332.510320][ T31] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 332.518863][ T31] pl2303 2-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 332.527366][ T31] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 332.536218][ T31] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 332.545090][ T31] pl2303 2-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 332.554710][ T31] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 332.566026][ T31] usb 2-1: USB disconnect, device number 92 [ 332.576135][ T31] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 332.584490][ T31] pl2303 2-1:162.183: device disconnected [ 332.872508][ T8176] kvm: kvm [8175]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x9 [ 332.932518][ T8178] fuse: Bad value for 'user_id' [ 332.937470][ T8178] fuse: Bad value for 'user_id' [ 332.944735][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.959789][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.034407][ T8185] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 333.207783][ T31] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 333.327676][ T436] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 333.359145][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 333.367284][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 333.375826][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.386429][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.396789][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.405953][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.414178][ T31] usb 1-1: Product: syz [ 333.418404][ T31] usb 1-1: Manufacturer: syz [ 333.423037][ T31] usb 1-1: SerialNumber: syz [ 333.484321][ T8191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.487742][ T436] usb 2-1: Using ep0 maxpacket: 16 [ 333.494693][ T8191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.499787][ T436] usb 2-1: no configurations [ 333.508518][ T8191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2475'. [ 333.511093][ T436] usb 2-1: can't read configurations, error -22 [ 333.521348][ T8191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.534529][ T8191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.572590][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.581165][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.647665][ T436] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 333.797646][ T436] usb 2-1: Using ep0 maxpacket: 16 [ 333.803240][ T436] usb 2-1: no configurations [ 333.807949][ T436] usb 2-1: can't read configurations, error -22 [ 333.814393][ T436] usb usb2-port1: attempt power cycle [ 333.834297][ T31] usb 1-1: 0:2 : does not exist [ 333.841074][ T31] usb 1-1: USB disconnect, device number 48 [ 333.850311][ T7256] udevd[7256]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 334.102685][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2478'. [ 334.157670][ T436] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 334.178605][ T436] usb 2-1: Using ep0 maxpacket: 16 [ 334.184316][ T436] usb 2-1: no configurations [ 334.189343][ T436] usb 2-1: can't read configurations, error -22 [ 334.242216][ T8213] random: crng reseeded on system resumption [ 334.272706][ T36] audit: type=1400 audit(7100059407.268:1356): avc: denied { ioctl } for pid=8212 comm="syz.4.2481" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 334.326684][ T8214] syzkaller1: entered promiscuous mode [ 334.329259][ T436] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 334.332575][ T8214] syzkaller1: entered allmulticast mode [ 334.368096][ T436] usb 2-1: Using ep0 maxpacket: 16 [ 334.376002][ T436] usb 2-1: no configurations [ 334.382436][ T436] usb 2-1: can't read configurations, error -22 [ 334.391362][ T436] usb usb2-port1: unable to enumerate USB device [ 334.492800][ T350] usb 7-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 334.514372][ T350] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 334.528271][ T350] usb 7-1: USB disconnect, device number 39 [ 334.541965][ T4029] udevd[4029]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 334.600208][ T8227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.608758][ T8227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.618851][ T8227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.627433][ T8227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.629319][ T379] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 334.644343][ T36] audit: type=1326 audit(7100059407.638:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8226 comm="syz.4.2486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e5d99c819 code=0x0 [ 334.755435][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.764049][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.777705][ T379] usb 1-1: device descriptor read/64, error -71 [ 334.827698][ T350] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 334.977750][ T350] usb 7-1: Using ep0 maxpacket: 8 [ 334.983888][ T350] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 334.992255][ T350] usb 7-1: config 179 has no interface number 0 [ 334.998577][ T350] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 335.009681][ T350] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 335.020936][ T350] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 335.027749][ T379] usb 1-1: device descriptor read/64, error -71 [ 335.032080][ T350] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 335.050081][ T350] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 335.063396][ T350] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 335.072456][ T350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.081534][ T8225] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 335.277762][ T379] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 335.297111][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.308497][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.417727][ T379] usb 1-1: device descriptor read/64, error -71 [ 335.530864][ T350] usb 7-1: USB disconnect, device number 40 [ 335.536940][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 335.536974][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 335.657676][ T379] usb 1-1: device descriptor read/64, error -71 [ 335.767761][ T379] usb usb1-port1: attempt power cycle [ 336.111534][ T379] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 336.138773][ T379] usb 1-1: device descriptor read/8, error -71 [ 336.156690][ T8248] UHID_CREATE from different security context by process 462 (syz.1.2492), this is not allowed. [ 336.164326][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.176645][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.186223][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.194822][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.281320][ T379] usb 1-1: device descriptor read/8, error -71 [ 336.343761][ T8255] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2494'. [ 336.347800][ T350] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 336.488687][ T350] usb 7-1: device descriptor read/64, error -71 [ 336.517707][ T379] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 336.538817][ T379] usb 1-1: device descriptor read/8, error -71 [ 336.617682][ T380] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 336.668853][ T379] usb 1-1: device descriptor read/8, error -71 [ 336.727746][ T350] usb 7-1: device descriptor read/64, error -71 [ 336.735275][ T8266] KVM: debugfs: duplicate directory 8266-6 [ 336.769117][ T380] usb 2-1: unable to get BOS descriptor or descriptor too short [ 336.777736][ T380] usb 2-1: config 1 has an invalid interface number: 33 but max is 2 [ 336.785853][ T380] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.796134][ T379] usb usb1-port1: unable to enumerate USB device [ 336.802864][ T380] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 336.811849][ T380] usb 2-1: config 1 has no interface number 1 [ 336.819819][ T380] usb 2-1: string descriptor 0 read error: -22 [ 336.826004][ T380] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 336.835070][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.977723][ T350] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 337.107730][ T350] usb 7-1: device descriptor read/64, error -71 [ 337.347679][ T350] usb 7-1: device descriptor read/64, error -71 [ 337.457788][ T350] usb usb7-port1: attempt power cycle [ 337.487029][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.495780][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.757685][ T31] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 337.807701][ T350] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 337.828883][ T350] usb 7-1: device descriptor read/8, error -71 [ 337.907675][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 337.915682][ T31] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40 [ 337.924791][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.932910][ T31] usb 1-1: Product: syz [ 337.937102][ T31] usb 1-1: Manufacturer: syz [ 337.941800][ T31] usb 1-1: SerialNumber: syz [ 337.958796][ T350] usb 7-1: device descriptor read/8, error -71 [ 338.047584][ T380] usb 2-1: BAAD HEADSET c_chmask mismatch [ 338.057957][ T380] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 338.061580][ T7256] udevd[7256]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 338.132474][ T8290] SELinux: Context system_u:object_r:system_map_t:s0 is not valid (left unmapped). [ 338.138252][ T36] audit: type=1400 audit(7100059411.128:1358): avc: denied { relabelfrom } for pid=8289 comm="syz.4.2506" name="PACKET" dev="sockfs" ino=50375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 338.165693][ T36] audit: type=1400 audit(7100059411.158:1359): avc: denied { relabelto } for pid=8289 comm="syz.4.2506" name="PACKET" dev="sockfs" ino=50375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=packet_socket permissive=1 trawcon="system_u:object_r:system_map_t:s0" [ 338.170613][ T31] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 338.206134][ T31] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 338.213194][ T31] usb 1-1: unit 4 not found! [ 338.219714][ T350] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 338.233215][ T31] usb 1-1: USB disconnect, device number 53 [ 338.242469][ T350] usb 7-1: device descriptor read/8, error -71 [ 338.248709][ T4029] udevd[4029]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 338.257945][ T436] usb 2-1: USB disconnect, device number 97 [ 338.398742][ T350] usb 7-1: device descriptor read/8, error -71 [ 338.507758][ T350] usb usb7-port1: unable to enumerate USB device [ 338.935090][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2512'. [ 338.944136][ T436] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 338.973275][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.982829][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.992636][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.996106][ T8310] syz_tun: entered allmulticast mode [ 339.006490][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.015304][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.024101][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.077747][ T436] usb 1-1: device descriptor read/64, error -71 [ 339.247684][ T350] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 339.317682][ T436] usb 1-1: device descriptor read/64, error -71 [ 339.397811][ T350] usb 2-1: Using ep0 maxpacket: 16 [ 339.404281][ T350] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 339.412512][ T350] usb 2-1: config 1 has no interface number 0 [ 339.418640][ T350] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 339.428660][ T350] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 339.438837][ T350] usb 2-1: config 1 interface 105 has no altsetting 0 [ 339.447083][ T350] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 339.456189][ T350] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 339.464371][ T350] usb 2-1: Product: syz [ 339.468580][ T350] usb 2-1: Manufacturer: syz [ 339.473184][ T350] usb 2-1: SerialNumber: syz [ 339.478962][ T8310] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 339.486139][ T8310] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 339.497670][ T380] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 339.567655][ T436] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 339.647700][ T380] usb 7-1: Using ep0 maxpacket: 8 [ 339.654446][ T380] usb 7-1: unable to get BOS descriptor or descriptor too short [ 339.664672][ T380] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.673788][ T380] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.681865][ T380] usb 7-1: Product: syz [ 339.686162][ T380] usb 7-1: Manufacturer: syz [ 339.690803][ T380] usb 7-1: SerialNumber: syz [ 339.707650][ T436] usb 1-1: device descriptor read/64, error -71 [ 339.752898][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.761558][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.770996][ T36] audit: type=1400 audit(7100059412.768:1360): avc: denied { view } for pid=8318 comm="syz.4.2517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 339.896810][ T8310] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 339.898968][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.906299][ T8310] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 339.914516][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.927744][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.936294][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.944570][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.953138][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.960993][ T436] usb 1-1: device descriptor read/64, error -71 [ 339.963074][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.977456][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.986868][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.996236][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.007832][ T380] usb 7-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 340.016358][ T380] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 340.022590][ T380] usb 7-1: 1:1 : invalid channels 0 [ 340.028119][ T380] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 340.040664][ T380] usb 7-1: USB disconnect, device number 45 [ 340.087819][ T436] usb usb1-port1: attempt power cycle [ 340.129157][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.137793][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.198120][ T36] audit: type=1400 audit(7100059413.198:1361): avc: denied { create } for pid=8309 comm="syz.1.2514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 340.427649][ T436] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 340.448746][ T436] usb 1-1: device descriptor read/8, error -71 [ 340.578742][ T436] usb 1-1: device descriptor read/8, error -71 [ 340.817643][ T436] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 340.838731][ T436] usb 1-1: device descriptor read/8, error -71 [ 340.878121][ T8339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.886727][ T8339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.898758][ T8339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.907298][ T8339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.968830][ T436] usb 1-1: device descriptor read/8, error -71 [ 341.027643][ T31] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 341.077812][ T436] usb usb1-port1: unable to enumerate USB device [ 341.177637][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 341.183912][ T31] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 341.192264][ T31] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 341.200427][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.210567][ T31] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 341.219505][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.233939][ T31] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 341.243057][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.251184][ T31] usb 7-1: Product: syz [ 341.255372][ T31] usb 7-1: Manufacturer: syz [ 341.260036][ T31] usb 7-1: SerialNumber: syz [ 341.265390][ T31] usb 7-1: config 0 descriptor?? [ 341.271244][ T31] hub 7-1:0.0: bad descriptor, ignoring hub [ 341.277193][ T31] hub 7-1:0.0: probe with driver hub failed with error -5 [ 341.429396][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.438036][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.447390][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.456168][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.465346][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.473982][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.483696][ T8337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.492863][ T8337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.607880][ T380] usb 7-1: USB disconnect, device number 46 [ 342.009753][ T350] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 342.029364][ T350] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 342.042562][ T350] usb 2-1: USB disconnect, device number 98 [ 342.087682][ T31] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 342.116113][ T8351] netlink: 'syz.6.2531': attribute type 27 has an invalid length. [ 342.124966][ T8351] 0ªî{X¹¦: left allmulticast mode [ 342.247692][ T31] usb 1-1: device descriptor read/64, error -71 [ 342.447682][ T307] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 342.497741][ T31] usb 1-1: device descriptor read/64, error -71 [ 342.507864][ T436] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 342.599221][ T307] usb 7-1: unable to get BOS descriptor or descriptor too short [ 342.607770][ T307] usb 7-1: config 1 has an invalid interface number: 33 but max is 2 [ 342.616081][ T307] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.626317][ T307] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 342.637313][ T307] usb 7-1: config 1 has no interface number 1 [ 342.643559][ T436] usb 2-1: device descriptor read/64, error -71 [ 342.652069][ T307] usb 7-1: string descriptor 0 read error: -22 [ 342.658389][ T307] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 342.667974][ T307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.737689][ T31] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 342.840641][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.849397][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.857905][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.866504][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.878012][ T31] usb 1-1: device descriptor read/64, error -71 [ 342.888020][ T436] usb 2-1: device descriptor read/64, error -71 [ 343.117661][ T31] usb 1-1: device descriptor read/64, error -71 [ 343.127891][ T436] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 343.245972][ T31] usb usb1-port1: attempt power cycle [ 343.261289][ T436] usb 2-1: device descriptor read/64, error -71 [ 343.517683][ T436] usb 2-1: device descriptor read/64, error -71 [ 343.607860][ T31] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 343.627903][ T436] usb usb2-port1: attempt power cycle [ 343.634293][ T31] usb 1-1: device descriptor read/8, error -71 [ 343.770240][ T31] usb 1-1: device descriptor read/8, error -71 [ 343.893131][ T307] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 343.904354][ T307] usb 7-1: USB disconnect, device number 47 [ 343.916391][ T8384] netlink: 'syz.4.2543': attribute type 4 has an invalid length. [ 343.924312][ T8384] netlink: 3649 bytes leftover after parsing attributes in process `syz.4.2543'. [ 343.977672][ T436] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 343.998816][ T436] usb 2-1: device descriptor read/8, error -71 [ 344.017853][ T31] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 344.047912][ T31] usb 1-1: device descriptor read/8, error -71 [ 344.129791][ T436] usb 2-1: device descriptor read/8, error -71 [ 344.178965][ T31] usb 1-1: device descriptor read/8, error -71 [ 344.287878][ T31] usb usb1-port1: unable to enumerate USB device [ 344.367677][ T436] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 344.388655][ T436] usb 2-1: device descriptor read/8, error -71 [ 344.519179][ T436] usb 2-1: device descriptor read/8, error -71 [ 344.556732][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 344.610528][ T8396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.622289][ T8396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.637842][ T436] usb usb2-port1: unable to enumerate USB device [ 345.137668][ T482] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 345.289426][ T482] usb 1-1: Using ep0 maxpacket: 32 [ 345.297804][ T482] usb 1-1: unable to get BOS descriptor or descriptor too short [ 345.305041][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.307164][ T482] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.324418][ T482] usb 1-1: New USB device found, idVendor=2a39, idProduct=47d4, bcdDevice= 0.40 [ 345.334068][ T482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.342414][ T482] usb 1-1: Product: syz [ 345.345034][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.346729][ T482] usb 1-1: Manufacturer: syz [ 345.361727][ T482] usb 1-1: SerialNumber: syz [ 345.590585][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.599217][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.697694][ T436] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 345.850493][ T436] usb 2-1: unable to get BOS descriptor or descriptor too short [ 345.859057][ T436] usb 2-1: config 1 has an invalid interface number: 33 but max is 2 [ 345.867210][ T436] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.877384][ T436] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 345.886387][ T436] usb 2-1: config 1 has no interface number 1 [ 345.894765][ T436] usb 2-1: string descriptor 0 read error: -22 [ 345.901073][ T436] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 345.910390][ T436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.336891][ T8427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.345736][ T8427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.567681][ T697] Bluetooth: hci0: command 0x1003 tx timeout [ 346.573764][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 346.605479][ T8436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.614176][ T8436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.837662][ T307] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 346.977690][ T307] usb 7-1: device descriptor read/64, error -71 [ 347.124168][ T436] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 347.149579][ T436] usb 2-1: USB disconnect, device number 103 [ 347.165811][ T8441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.177732][ T8441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.217688][ T307] usb 7-1: device descriptor read/64, error -71 [ 347.457687][ T307] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 347.597680][ T307] usb 7-1: device descriptor read/64, error -71 [ 347.655266][ T8443] netlink: 'syz.1.2565': attribute type 4 has an invalid length. [ 347.663267][ T8443] netlink: 3649 bytes leftover after parsing attributes in process `syz.1.2565'. [ 347.826334][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.837657][ T36] audit: type=1400 audit(7100059420.818:1362): avc: denied { listen } for pid=8454 comm="syz.0.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 347.857831][ T307] usb 7-1: device descriptor read/64, error -71 [ 347.878767][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.967754][ T307] usb usb7-port1: attempt power cycle [ 348.192681][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.201346][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.307682][ T307] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 348.328933][ T307] usb 7-1: device descriptor read/8, error -71 [ 348.338079][ T8468] netlink: 'syz.1.2575': attribute type 4 has an invalid length. [ 348.345832][ T8468] netlink: 3649 bytes leftover after parsing attributes in process `syz.1.2575'. [ 348.459047][ T307] usb 7-1: device descriptor read/8, error -71 [ 348.617670][ T3941] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 348.717673][ T307] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 348.755756][ T307] usb 7-1: device descriptor read/8, error -71 [ 348.769196][ T3941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 348.786886][ T3941] usb 2-1: not running at top speed; connect to a high speed hub [ 348.797293][ T3941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.802014][ T8474] lo: entered promiscuous mode [ 348.808446][ T3941] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.823110][ T3941] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.829809][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.835603][ T3941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.841112][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.850846][ T3941] usb 2-1: Product: syz [ 348.860764][ T3941] usb 2-1: Manufacturer: syz [ 348.865434][ T3941] usb 2-1: SerialNumber: syz [ 348.870401][ T8473] lo: left promiscuous mode [ 348.928753][ T307] usb 7-1: device descriptor read/8, error -71 [ 349.046526][ T307] usb usb7-port1: unable to enumerate USB device [ 349.289931][ T3941] usb 2-1: 0:2 : does not exist [ 349.303280][ T3941] usb 2-1: USB disconnect, device number 104 [ 349.418196][ T8476] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2579'. [ 349.471053][ T8479] KVM: debugfs: duplicate directory 8479-6 [ 349.668579][ T8483] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2582'. [ 349.694382][ T8486] KVM: debugfs: duplicate directory 8486-6 [ 349.777973][ T8490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.786539][ T8490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.808947][ T8492] netlink: 'syz.1.2586': attribute type 4 has an invalid length. [ 349.967667][ T380] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 350.077780][ T3941] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 350.118732][ T380] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 350.130286][ T380] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 70, changing to 10 [ 350.141328][ T380] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 58097, setting to 1024 [ 350.152567][ T380] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 350.161637][ T380] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.170678][ T380] usb 7-1: config 0 descriptor?? [ 350.176822][ T380] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 350.227689][ T3941] usb 2-1: Using ep0 maxpacket: 32 [ 350.234195][ T3941] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7 [ 350.247032][ T3941] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 350.257687][ T3941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.265708][ T3941] usb 2-1: Product: syz [ 350.269984][ T3941] usb 2-1: Manufacturer: syz [ 350.274615][ T3941] usb 2-1: SerialNumber: syz [ 350.315310][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.324429][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.333083][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.341048][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.355710][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.364309][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.390037][ T8507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.399695][ T8507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.439455][ T482] usb 7-1: USB disconnect, device number 52 [ 350.482229][ T8497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.498598][ T8497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.529041][ T3941] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 350.542941][ T3941] usb 2-1: USB disconnect, device number 105 [ 350.564791][ T4029] udevd[4029]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 351.118217][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.132457][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.172552][ T8527] KVM: debugfs: duplicate directory 8527-6 [ 351.367678][ T307] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 351.519281][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 351.538090][ T307] usb 2-1: config 1 has an invalid interface number: 33 but max is 2 [ 351.546256][ T307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.556662][ T307] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 351.565838][ T307] usb 2-1: config 1 has no interface number 1 [ 351.574464][ T307] usb 2-1: string descriptor 0 read error: -22 [ 351.580734][ T3941] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 351.588702][ T307] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 351.598062][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.747646][ T3941] usb 7-1: device descriptor read/64, error -71 [ 352.007667][ T3941] usb 7-1: device descriptor read/64, error -71 [ 352.267714][ T3941] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 352.407646][ T3941] usb 7-1: device descriptor read/64, error -71 [ 352.657655][ T3941] usb 7-1: device descriptor read/64, error -71 [ 352.787844][ T3941] usb usb7-port1: attempt power cycle [ 352.818361][ T307] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 352.843224][ T307] usb 2-1: USB disconnect, device number 106 [ 352.962592][ T8555] fuse: Bad value for 'fd' [ 352.967770][ T8555] fuse: Bad value for 'fd' [ 352.972395][ T8555] fuse: Bad value for 'fd' [ 352.976977][ T8555] fuse: Bad value for 'fd' [ 352.982184][ T8555] fuse: Bad value for 'fd' [ 352.986953][ T8555] fuse: Bad value for 'fd' [ 352.991739][ T8555] fuse: Bad value for 'fd' [ 352.996321][ T8555] fuse: Bad value for 'fd' [ 353.001214][ T8555] fuse: Bad value for 'fd' [ 353.005798][ T8555] fuse: Bad value for 'fd' [ 353.010584][ T8555] fuse: Bad value for 'fd' [ 353.015291][ T8555] fuse: Bad value for 'fd' [ 353.021197][ T8555] fuse: Bad value for 'fd' [ 353.025939][ T8555] fuse: Bad value for 'fd' [ 353.030723][ T8555] fuse: Bad value for 'fd' [ 353.035314][ T8555] fuse: Bad value for 'fd' [ 353.040176][ T8555] fuse: Bad value for 'fd' [ 353.044781][ T8555] fuse: Bad value for 'fd' [ 353.049621][ T8555] fuse: Bad value for 'fd' [ 353.054971][ T8555] fuse: Bad value for 'fd' [ 353.059775][ T8555] fuse: Bad value for 'fd' [ 353.064453][ T8555] fuse: Bad value for 'fd' [ 353.069236][ T8555] fuse: Bad value for 'fd' [ 353.073819][ T8555] fuse: Bad value for 'fd' [ 353.078937][ T8555] fuse: Bad value for 'fd' [ 353.083547][ T8555] fuse: Bad value for 'fd' [ 353.088284][ T8555] fuse: Bad value for 'fd' [ 353.092932][ T8555] fuse: Bad value for 'fd' [ 353.097538][ T8555] fuse: Bad value for 'fd' [ 353.102367][ T8555] fuse: Bad value for 'fd' [ 353.107055][ T8555] fuse: Bad value for 'fd' [ 353.111872][ T8555] fuse: Bad value for 'fd' [ 353.116460][ T8555] fuse: Bad value for 'fd' [ 353.137779][ T3941] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 353.158840][ T3941] usb 7-1: device descriptor read/8, error -71 [ 353.288870][ T3941] usb 7-1: device descriptor read/8, error -71 [ 353.537693][ T3941] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 353.558809][ T3941] usb 7-1: device descriptor read/8, error -71 [ 353.688815][ T3941] usb 7-1: device descriptor read/8, error -71 [ 353.748115][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.756670][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.797740][ T3941] usb usb7-port1: unable to enumerate USB device [ 353.868725][ T8574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.877441][ T8574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.015105][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.023911][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.033609][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2614'. [ 354.597711][ T3941] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 354.747695][ T307] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 354.757229][ T3941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 354.768936][ T3941] usb 2-1: config 1 has an invalid interface number: 33 but max is 2 [ 354.777161][ T3941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.795039][ T3941] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 354.807939][ T3941] usb 2-1: config 1 has no interface number 1 [ 354.816519][ T3941] usb 2-1: string descriptor 0 read error: -22 [ 354.823011][ T3941] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 354.838935][ T3941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.874663][ T8597] KVM: debugfs: duplicate directory 8597-6 [ 354.907728][ T307] usb 7-1: Using ep0 maxpacket: 8 [ 354.914115][ T307] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 354.922790][ T307] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 354.931531][ T307] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.941923][ T307] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 354.957664][ T307] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.979418][ T307] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 354.988734][ T307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.996790][ T307] usb 7-1: Product: syz [ 355.007391][ T307] usb 7-1: Manufacturer: syz [ 355.012251][ T307] usb 7-1: SerialNumber: syz [ 355.022097][ T307] usb 7-1: config 0 descriptor?? [ 355.029436][ T307] hub 7-1:0.0: bad descriptor, ignoring hub [ 355.037647][ T307] hub 7-1:0.0: probe with driver hub failed with error -5 [ 355.417771][ T307] usb 7-1: USB disconnect, device number 57 [ 355.434551][ T8609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.446511][ T8609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.828365][ T8611] netlink: 'syz.6.2627': attribute type 15 has an invalid length. [ 355.836334][ T8611] netlink: 3649 bytes leftover after parsing attributes in process `syz.6.2627'. [ 355.975535][ T8622] KVM: debugfs: duplicate directory 8622-6 [ 355.988673][ T36] audit: type=1400 audit(7100059428.988:1363): avc: denied { create } for pid=8623 comm="syz.0.2632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 356.009682][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.018629][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.062819][ T3941] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 356.077188][ T3941] usb 2-1: USB disconnect, device number 107 [ 356.297720][ T65] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 356.448823][ T65] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.459078][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 356.470289][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.480142][ T65] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 356.493081][ T65] usb 7-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 356.502467][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.511318][ T65] usb 7-1: config 0 descriptor?? [ 356.578010][ T8632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.588384][ T8632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.601261][ T36] audit: type=1400 audit(7100059429.598:1364): avc: granted { setsecparam } for pid=8633 comm="syz.1.2637" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 356.620612][ T36] audit: type=1400 audit(7100059429.608:1365): avc: denied { read } for pid=8633 comm="syz.1.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 356.663227][ T36] audit: type=1400 audit(7100059429.658:1366): avc: granted { setsecparam } for pid=8633 comm="syz.1.2637" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 356.719699][ T65] usbhid 7-1:0.0: can't add hid device: -71 [ 356.725899][ T65] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 356.734780][ T65] usb 7-1: USB disconnect, device number 58 [ 356.881499][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.890093][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.157655][ T65] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 357.307648][ T65] usb 7-1: Using ep0 maxpacket: 32 [ 357.313941][ T65] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.324274][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.335417][ T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.345225][ T65] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 357.358091][ T65] usb 7-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 357.367122][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.377022][ T65] usb 7-1: config 0 descriptor?? [ 357.429745][ T36] audit: type=1326 audit(7100059430.428:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8654 comm="syz.4.2644" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e5d99c819 code=0x0 [ 357.546895][ T8662] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65024 sclass=netlink_xfrm_socket pid=8662 comm=syz.4.2646 [ 357.560354][ T36] audit: type=1400 audit(7100059430.558:1368): avc: denied { read } for pid=8661 comm="syz.4.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 357.596206][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2647'. [ 357.613497][ T36] audit: type=1400 audit(7100059430.608:1369): avc: denied { read write } for pid=2420 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.637658][ T36] audit: type=1400 audit(7100059430.608:1370): avc: denied { open } for pid=2420 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.662201][ T36] audit: type=1400 audit(7100059430.608:1371): avc: denied { ioctl } for pid=2420 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.679254][ T8667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.696557][ T8667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.707661][ T482] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 357.717268][ T36] audit: type=1400 audit(7100059430.638:1372): avc: denied { create } for pid=8666 comm="syz.4.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 357.787935][ T65] betop 0003:20BC:5500.002B: hidraw1: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.6-1/input0 [ 357.799731][ T65] betop 0003:20BC:5500.002B: no inputs found [ 357.881593][ T482] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.891614][ T482] usb 2-1: config 1 has an invalid interface number: 33 but max is 2 [ 357.900239][ T482] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.910446][ T482] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 357.919476][ T482] usb 2-1: config 1 has no interface number 1 [ 357.931547][ T482] usb 2-1: string descriptor 0 read error: -22 [ 357.938309][ T482] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 357.947421][ T482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.987480][ T3941] usb 7-1: USB disconnect, device number 59 [ 359.182647][ T482] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 359.192971][ T482] usb 2-1: USB disconnect, device number 108 [ 364.617359][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 364.617379][ T36] audit: type=1400 audit(7100059437.608:1445): avc: denied { read append } for pid=8669 comm="syz.4.2651" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 364.648964][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.664823][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.707655][ T36] audit: type=1400 audit(7100059437.608:1446): avc: denied { read append open } for pid=8669 comm="syz.4.2651" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 364.759949][ T36] audit: type=1400 audit(7100059437.608:1447): avc: denied { read } for pid=8669 comm="syz.4.2651" dev="nsfs" ino=4026532993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 364.833370][ T36] audit: type=1400 audit(7100059437.608:1448): avc: denied { read open } for pid=8669 comm="syz.4.2651" path="net:[4026532993]" dev="nsfs" ino=4026532993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 364.907192][ T36] audit: type=1400 audit(7100059437.608:1449): avc: denied { create } for pid=8669 comm="syz.4.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 364.929732][ T36] audit: type=1400 audit(7100059437.608:1450): avc: denied { create } for pid=8670 comm="syz.0.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 364.958143][ T36] audit: type=1400 audit(7100059437.618:1451): avc: denied { bind } for pid=8670 comm="syz.0.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 364.978724][ T36] audit: type=1400 audit(7100059437.618:1452): avc: denied { name_bind } for pid=8671 comm="syz.6.2652" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 364.993180][ T8692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.003069][ T36] audit: type=1400 audit(7100059437.618:1453): avc: denied { ioctl } for pid=8670 comm="syz.0.2649" path="socket:[52725]" dev="sockfs" ino=52725 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 365.033609][ T3941] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 365.042729][ T36] audit: type=1400 audit(7100059437.618:1454): avc: denied { ioctl } for pid=8670 comm="syz.0.2649" path="socket:[52725]" dev="sockfs" ino=52725 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 365.074605][ T8692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.201044][ T8701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.213545][ T8701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.223277][ T3941] usb 7-1: Using ep0 maxpacket: 16 [ 365.232002][ T3941] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.242581][ T3941] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 365.251820][ T3941] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 365.261232][ T3941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.277576][ T3941] usb 7-1: config 0 descriptor?? [ 365.347701][ T31] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 365.501593][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 365.510215][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 365.520200][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.530382][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 365.539387][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 365.553892][ T31] usb 2-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 365.563017][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.571051][ T31] usb 2-1: Product: syz [ 365.575223][ T31] usb 2-1: Manufacturer: syz [ 365.579895][ T31] usb 2-1: SerialNumber: syz [ 365.691518][ T8706] KVM: debugfs: duplicate directory 8706-6 [ 365.811069][ T31] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 365.826553][ T31] usb 2-1: 1:1 : format type 13 is not supported yet [ 365.837457][ T31] usb 2-1: unit 2 not found! [ 365.845587][ T31] usb 2-1: unit 8 not found! [ 365.855918][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 365.866811][ T31] usb 2-1: USB disconnect, device number 109 [ 365.910702][ T8684] udevd[8684]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 366.467573][ T8714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.476279][ T8714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.587681][ T31] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 366.740737][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.751764][ T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 366.760853][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.770237][ T31] usb 2-1: config 0 descriptor?? [ 367.121038][ T8722] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 367.128272][ T8722] rust_binder: 1371: no such ref 1 [ 367.133437][ T8722] rust_binder: 1371: no such ref 1 [ 367.138683][ T8722] rust_binder: Read failure Err(EAGAIN) in pid:1371 [ 367.188908][ T31] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 367.205822][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002C/input/input24 [ 367.271286][ T8724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.290710][ T8724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.302818][ T31] keytouch 0003:0926:3333.002C: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 367.679237][ T31] usb 2-1: USB disconnect, device number 110 [ 367.719191][ T3941] usb 7-1: USB disconnect, device number 60 [ 367.815396][ T8729] KVM: debugfs: duplicate directory 8729-6 [ 368.086233][ T8742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.095174][ T8742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.177655][ T3941] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 368.248675][ T8746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.257387][ T8746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.312370][ T8744] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 368.322034][ T8744] SELinux: failed to load policy [ 368.337652][ T3941] usb 7-1: Using ep0 maxpacket: 16 [ 368.351043][ T3941] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 368.360336][ T3941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.369087][ T3941] usb 7-1: Product: syz [ 368.382921][ T3941] usb 7-1: Manufacturer: syz [ 368.389237][ T3941] usb 7-1: SerialNumber: syz [ 368.600420][ T8759] KVM: debugfs: duplicate directory 8759-6 [ 368.676076][ T8734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.704140][ T8734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.742811][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.754886][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.757792][ T8762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.798821][ T8762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.837694][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.846272][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.858525][ T3941] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 368.867015][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.877123][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.887229][ T3941] usb 7-1: USB disconnect, device number 61 [ 369.067690][ T482] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 369.223738][ T482] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 369.232961][ T482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.241014][ T482] usb 2-1: Product: syz [ 369.245251][ T482] usb 2-1: Manufacturer: syz [ 369.249903][ T482] usb 2-1: SerialNumber: syz [ 369.628024][ T36] kauditd_printk_skb: 562 callbacks suppressed [ 369.628042][ T36] audit: type=1400 audit(7100059442.628:2017): avc: denied { read write } for pid=8787 comm="syz.6.2692" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.678143][ T8788] netlink: 'syz.0.2693': attribute type 4 has an invalid length. [ 369.687724][ T8788] netlink: 3649 bytes leftover after parsing attributes in process `syz.0.2693'. [ 369.700760][ T8784] FAULT_INJECTION: forcing a failure. [ 369.700760][ T8784] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 369.717649][ T36] audit: type=1400 audit(7100059442.628:2018): avc: denied { read write open } for pid=8787 comm="syz.6.2692" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.733258][ T8784] CPU: 1 UID: 0 PID: 8784 Comm: syz.4.2690 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 369.733339][ T8784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 369.733383][ T8784] Call Trace: [ 369.733396][ T8784] [ 369.733414][ T8784] __dump_stack+0x21/0x30 [ 369.733523][ T8784] dump_stack_lvl+0x140/0x1c0 [ 369.733623][ T8784] ? __cfi_dump_stack_lvl+0x10/0x10 [ 369.733715][ T8784] ? __kasan_check_write+0x18/0x20 [ 369.733800][ T8784] dump_stack+0x19/0x20 [ 369.733881][ T8784] should_fail_ex+0x3d7/0x530 [ 369.733959][ T8784] should_fail_alloc_page+0xec/0x110 [ 369.734024][ T8784] __alloc_pages_noprof+0x1c0/0x7e0 [ 369.734106][ T8784] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 369.734180][ T8784] ? folio_add_lru+0x116/0x400 [ 369.734248][ T8784] ? __cfi_folio_add_lru+0x10/0x10 [ 369.734311][ T8784] __folio_alloc_noprof+0x14/0x80 [ 369.734397][ T8784] shmem_alloc_and_add_folio+0x46b/0x10b0 [ 369.734471][ T8784] ? put_swap_device+0x130/0x130 [ 369.734547][ T8784] ? shmem_huge_global_enabled+0x2da/0x360 [ 369.734668][ T8784] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 369.734777][ T8784] shmem_get_folio_gfp+0x607/0x1390 [ 369.734863][ T8784] ? shmem_get_folio+0xc0/0xc0 [ 369.734939][ T8784] ? inode_to_bdi+0x6d/0x100 [ 369.734992][ T8784] shmem_write_begin+0xf4/0x270 [ 369.735056][ T8784] generic_perform_write+0x328/0x970 [ 369.735115][ T8784] ? locked_inode_to_wb_and_lock_list+0x205/0x2e0 [ 369.735201][ T8784] ? __cfi_generic_perform_write+0x10/0x10 [ 369.735266][ T8784] ? down_write+0xee/0x2b0 [ 369.735332][ T8784] ? mnt_get_write_access_file+0x1af/0x3b0 [ 369.735403][ T8784] ? mnt_put_write_access_file+0xc2/0x100 [ 369.735466][ T8784] ? file_update_time+0x1de/0x210 [ 369.735527][ T8784] shmem_file_write_iter+0x105/0x130 [ 369.735583][ T8784] vfs_write+0x764/0xf90 [ 369.735668][ T8784] ? __cfi_vfs_write+0x10/0x10 [ 369.735757][ T8784] ? __cfi_mutex_lock+0x10/0x10 [ 369.735817][ T8784] ksys_write+0x145/0x260 [ 369.735903][ T8784] ? __cfi_ksys_write+0x10/0x10 [ 369.736006][ T8784] ? __kasan_check_read+0x15/0x20 [ 369.736094][ T8784] __x64_sys_write+0x7f/0x90 [ 369.736169][ T8784] x64_sys_call+0x271c/0x2ee0 [ 369.736247][ T8784] do_syscall_64+0x57/0xf0 [ 369.736317][ T8784] ? clear_bhb_loop+0x50/0xa0 [ 369.736361][ T8784] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 369.736455][ T8784] RIP: 0033:0x7f0e5d99c819 [ 369.736512][ T8784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.736548][ T8784] RSP: 002b:00007f0e5e937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 369.736623][ T8784] RAX: ffffffffffffffda RBX: 00007f0e5dc15fa0 RCX: 00007f0e5d99c819 [ 369.736673][ T8784] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000005 [ 369.736713][ T8784] RBP: 00007f0e5e937090 R08: 0000000000000000 R09: 0000000000000000 [ 369.736751][ T8784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.736790][ T8784] R13: 00007f0e5dc16038 R14: 00007f0e5dc15fa0 R15: 00007ffcdd0c2858 [ 369.736839][ T8784] [ 369.877769][ T3941] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 369.900653][ T36] audit: type=1400 audit(7100059442.628:2019): avc: denied { ioctl } for pid=8787 comm="syz.6.2692" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 370.076799][ T482] (unnamed net_device) (uninitialized): Assigned a random MAC address: be:9c:1d:7f:99:d4 [ 370.088551][ T482] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 370.098926][ T36] audit: type=1400 audit(7100059442.628:2020): avc: denied { ioctl } for pid=8787 comm="syz.6.2692" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 370.123899][ T8794] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2695'. [ 370.134255][ T36] audit: type=1400 audit(7100059442.628:2021): avc: denied { ioctl } for pid=8787 comm="syz.6.2692" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 370.165288][ T3941] usb 7-1: unable to get BOS descriptor or descriptor too short [ 370.175557][ T3941] usb 7-1: not running at top speed; connect to a high speed hub [ 370.184734][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.195118][ T3941] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.207342][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.207675][ T3941] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.226522][ T36] audit: type=1400 audit(7100059442.628:2022): avc: denied { ioctl } for pid=8787 comm="syz.6.2692" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 370.254686][ T36] audit: type=1400 audit(7100059442.668:2023): avc: denied { create } for pid=8786 comm="syz.0.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 370.286669][ T3941] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 370.296549][ T3941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.306143][ T36] audit: type=1400 audit(7100059442.668:2024): avc: denied { create } for pid=8786 comm="syz.0.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 370.325813][ T3941] usb 7-1: Product: syz [ 370.330024][ T3941] usb 7-1: Manufacturer: syz [ 370.336725][ T3941] usb 7-1: SerialNumber: syz [ 370.351500][ T36] audit: type=1400 audit(7100059442.668:2025): avc: denied { connect } for pid=8786 comm="syz.0.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 370.375270][ T36] audit: type=1400 audit(7100059442.668:2026): avc: denied { ioctl } for pid=8764 comm="syz.1.2685" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 370.691937][ T8824] tc_dump_action: action bad kind [ 370.758382][ T8829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.768990][ T8829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.789774][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 370.797050][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 370.805218][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 370.812981][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 370.820312][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 370.827713][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 370.838048][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 370.845899][ T3941] usb 7-1: 0:2 : does not exist [ 370.854165][ T3941] usb 7-1: unit 0 not found! [ 370.864719][ T3941] usb 7-1: USB disconnect, device number 62 [ 370.964422][ T8684] udevd[8684]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 371.957688][ T65] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 372.069063][ T8859] netlink: 'syz.0.2708': attribute type 27 has an invalid length. [ 372.082467][ T8859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.091718][ T8859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.107764][ T65] usb 7-1: device descriptor read/64, error -71 [ 372.168942][ C1] usb 2-1: eth1: intr status -71 [ 372.169883][ T482] usb 2-1: USB disconnect, device number 111 [ 372.357659][ T65] usb 7-1: device descriptor read/64, error -71 [ 372.597670][ T65] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 372.663087][ T8880] KVM: debugfs: duplicate directory 8880-6 [ 372.737651][ T65] usb 7-1: device descriptor read/64, error -71 [ 372.807687][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 372.862855][ T8890] netlink: 'syz.0.2712': attribute type 4 has an invalid length. [ 372.870784][ T8890] netlink: 3649 bytes leftover after parsing attributes in process `syz.0.2712'. [ 372.987647][ T65] usb 7-1: device descriptor read/64, error -71 [ 373.084905][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.099087][ T65] usb usb7-port1: attempt power cycle [ 373.105652][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.447640][ T65] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 373.491644][ T65] usb 7-1: device descriptor read/8, error -71 [ 373.545369][ T8911] FAULT_INJECTION: forcing a failure. [ 373.545369][ T8911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.558511][ T8911] CPU: 0 UID: 0 PID: 8911 Comm: syz.4.2719 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 373.558543][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.558557][ T8911] Call Trace: [ 373.558564][ T8911] [ 373.558573][ T8911] __dump_stack+0x21/0x30 [ 373.558605][ T8911] dump_stack_lvl+0x140/0x1c0 [ 373.558633][ T8911] ? __cfi_dump_stack_lvl+0x10/0x10 [ 373.558662][ T8911] dump_stack+0x19/0x20 [ 373.558689][ T8911] should_fail_ex+0x3d7/0x530 [ 373.558734][ T8911] should_fail+0xf/0x20 [ 373.558761][ T8911] should_fail_usercopy+0x1e/0x30 [ 373.558792][ T8911] copy_page_from_iter_atomic+0x34b/0x17a0 [ 373.558831][ T8911] ? __cfi_copy_page_from_iter_atomic+0x10/0x10 [ 373.558867][ T8911] ? inode_to_bdi+0x6d/0x100 [ 373.558894][ T8911] ? __kasan_check_read+0x15/0x20 [ 373.558926][ T8911] generic_perform_write+0x582/0x970 [ 373.558954][ T8911] ? __cfi_generic_perform_write+0x10/0x10 [ 373.558981][ T8911] ? down_write+0xee/0x2b0 [ 373.559008][ T8911] ? file_update_time+0xa3/0x210 [ 373.559036][ T8911] shmem_file_write_iter+0x105/0x130 [ 373.559063][ T8911] vfs_write+0x764/0xf90 [ 373.559106][ T8911] ? __cfi_vfs_write+0x10/0x10 [ 373.559136][ T8911] ? __cfi_mutex_lock+0x10/0x10 [ 373.559161][ T8911] ksys_write+0x145/0x260 [ 373.559197][ T8911] ? __cfi_ksys_write+0x10/0x10 [ 373.559227][ T8911] ? __kasan_check_read+0x15/0x20 [ 373.559255][ T8911] __x64_sys_write+0x7f/0x90 [ 373.559285][ T8911] x64_sys_call+0x271c/0x2ee0 [ 373.559334][ T8911] do_syscall_64+0x57/0xf0 [ 373.559366][ T8911] ? clear_bhb_loop+0x50/0xa0 [ 373.559387][ T8911] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 373.559421][ T8911] RIP: 0033:0x7f0e5d99c819 [ 373.559441][ T8911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.559462][ T8911] RSP: 002b:00007f0e5e937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.559487][ T8911] RAX: ffffffffffffffda RBX: 00007f0e5dc15fa0 RCX: 00007f0e5d99c819 [ 373.559505][ T8911] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000005 [ 373.559521][ T8911] RBP: 00007f0e5e937090 R08: 0000000000000000 R09: 0000000000000000 [ 373.559536][ T8911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.559550][ T8911] R13: 00007f0e5dc16038 R14: 00007f0e5dc15fa0 R15: 00007ffcdd0c2858 [ 373.559571][ T8911] [ 373.767760][ T3941] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 373.794704][ T65] usb 7-1: device descriptor read/8, error -71 [ 373.994284][ T3941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 374.013524][ T3941] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 178, changing to 7 [ 374.035244][ T3941] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 374.047836][ T8913] KVM: debugfs: duplicate directory 8913-6 [ 374.053896][ T65] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 374.068484][ T3941] usb 2-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 374.094950][ T3941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.103945][ T65] usb 7-1: device descriptor read/8, error -71 [ 374.110658][ T3941] usb 2-1: Product: syz [ 374.121194][ T3941] usb 2-1: Manufacturer: syz [ 374.129694][ T3941] usb 2-1: SerialNumber: syz [ 374.240818][ T65] usb 7-1: device descriptor read/8, error -71 [ 374.293013][ T8918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.311580][ T8918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.357755][ T65] usb usb7-port1: unable to enumerate USB device [ 374.405302][ T8907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.424020][ T8907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.454183][ T8907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.473781][ T8907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.487013][ T3941] usb 2-1: unit 15 not found! [ 374.508281][ T3941] usb 2-1: USB disconnect, device number 112 [ 374.587669][ T8684] udevd[8684]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 374.733933][ T36] kauditd_printk_skb: 1049 callbacks suppressed [ 374.733954][ T36] audit: type=1400 audit(7100059447.728:3045): avc: denied { read write } for pid=6510 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.785250][ T36] audit: type=1400 audit(7100059447.758:3046): avc: denied { read write open } for pid=6510 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.823317][ T8924] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2724'. [ 374.833287][ T36] audit: type=1400 audit(7100059447.758:3047): avc: denied { ioctl } for pid=6510 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.859895][ T36] audit: type=1400 audit(7100059447.818:3048): avc: denied { create } for pid=8923 comm="syz.6.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.905422][ T36] audit: type=1400 audit(7100059447.818:3049): avc: denied { create } for pid=8923 comm="syz.6.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 374.937176][ T36] audit: type=1400 audit(7100059447.818:3050): avc: denied { create } for pid=8923 comm="syz.6.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 374.958140][ T36] audit: type=1400 audit(7100059447.818:3051): avc: denied { write } for pid=8923 comm="syz.6.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 374.993705][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.014176][ T36] audit: type=1400 audit(7100059447.818:3052): avc: denied { nlmsg_write } for pid=8923 comm="syz.6.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 375.037505][ T36] audit: type=1400 audit(7100059447.818:3053): avc: denied { write } for pid=8923 comm="syz.6.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 375.068802][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.097765][ T36] audit: type=1400 audit(7100059447.818:3054): avc: denied { nlmsg_write } for pid=8923 comm="syz.6.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 375.128596][ T8931] KVM: debugfs: duplicate directory 8931-6 [ 375.497109][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.529863][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.579693][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.626362][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.733750][ T8954] netlink: 1020 bytes leftover after parsing attributes in process `syz.4.2734'. [ 375.747820][ T65] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 375.768263][ T8954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.776977][ T8954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.925916][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.936112][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.975094][ T8970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.991406][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.005330][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.018839][ T8970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.051660][ T8967] incfs: Error accessing: ./file0. [ 376.056849][ T8967] incfs: mount failed -20 [ 376.085151][ T8974] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1012 sclass=netlink_tcpdiag_socket pid=8974 comm=syz.6.2739 [ 376.144639][ T8976] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 376.155286][ T8976] SELinux: failed to load policy [ 376.371411][ T8982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.380843][ T8982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.947664][ T31] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 376.957657][ T65] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 376.977070][ T8997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.986327][ T8997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.097677][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 377.106403][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 377.116055][ T31] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 377.126618][ T31] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 377.127527][ T65] usb 7-1: unable to get BOS descriptor or descriptor too short [ 377.135879][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.153783][ T31] usb 2-1: config 1 has no interface number 1 [ 377.164465][ T65] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 377.174440][ T31] usb 2-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 377.177888][ T65] usb 7-1: can't read configurations, error -71 [ 377.190169][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.196892][ T65] usb usb7-port1: attempt power cycle [ 377.204635][ T31] usb 2-1: config 1 interface 4 has no altsetting 0 [ 377.220285][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.229394][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.237425][ T31] usb 2-1: Product: syz [ 377.241643][ T31] usb 2-1: Manufacturer: syz [ 377.246262][ T31] usb 2-1: SerialNumber: syz [ 377.331696][ T9000] cgroup: release_agent respecified [ 377.476092][ T31] usb 2-1: 2:1 : invalid UAC_AS_GENERAL desc [ 377.492735][ T31] usb 2-1: USB disconnect, device number 113 [ 377.591442][ T8684] udevd[8684]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 377.622332][ T9003] KVM: debugfs: duplicate directory 9003-6 [ 377.776300][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.784924][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.802638][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.811290][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.819617][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2752'. [ 378.217801][ T9017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.227294][ T9017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.317658][ T65] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 378.467638][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 378.475385][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.485626][ T65] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.498948][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 378.505542][ T65] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 378.514659][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.524225][ T65] usb 2-1: config 0 descriptor?? [ 378.539495][ T65] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 378.917670][ T65] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 379.015205][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 379.071473][ T65] usb 7-1: unable to get BOS descriptor or descriptor too short [ 379.080431][ T65] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 379.091573][ T65] usb 7-1: can't read configurations, error -71 [ 379.218840][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.227756][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.841413][ T36] kauditd_printk_skb: 527 callbacks suppressed [ 379.841432][ T36] audit: type=1400 audit(7100059452.838:3582): avc: denied { read write } for pid=2420 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.872733][ T36] audit: type=1400 audit(7100059452.838:3583): avc: denied { read write open } for pid=2420 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.898463][ T36] audit: type=1400 audit(7100059452.838:3584): avc: denied { ioctl } for pid=2420 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.924776][ T36] audit: type=1400 audit(7100059452.898:3585): avc: denied { read write } for pid=9042 comm="syz.4.2766" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 379.931092][ T9043] KVM: debugfs: duplicate directory 9043-6 [ 379.951117][ T36] audit: type=1400 audit(7100059452.898:3586): avc: denied { read write open } for pid=9042 comm="syz.4.2766" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 379.978747][ T36] audit: type=1400 audit(7100059452.898:3587): avc: denied { ioctl } for pid=9042 comm="syz.4.2766" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 380.004215][ T36] audit: type=1400 audit(7100059452.918:3588): avc: denied { create } for pid=9042 comm="syz.4.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 380.024767][ T36] audit: type=1400 audit(7100059452.918:3589): avc: denied { read } for pid=9042 comm="syz.4.2766" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 380.051806][ T36] audit: type=1400 audit(7100059452.928:3590): avc: denied { read open } for pid=9042 comm="syz.4.2766" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 380.075461][ T36] audit: type=1400 audit(7100059452.928:3591): avc: denied { ioctl } for pid=9042 comm="syz.4.2766" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 380.162280][ T9045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.171109][ T9045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.797710][ T31] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 380.937997][ T31] usb 7-1: device descriptor read/64, error -71 [ 381.047803][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 381.054025][ T9032] Bluetooth: hci0: command 0x1003 tx timeout [ 381.072539][ T65] usb 2-1: USB disconnect, device number 114 [ 381.150796][ T9055] FAULT_INJECTION: forcing a failure. [ 381.150796][ T9055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.168758][ T9055] CPU: 1 UID: 0 PID: 9055 Comm: syz.0.2771 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 381.168790][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.168805][ T9055] Call Trace: [ 381.168812][ T9055] [ 381.168821][ T9055] __dump_stack+0x21/0x30 [ 381.168853][ T9055] dump_stack_lvl+0x140/0x1c0 [ 381.168890][ T9055] ? __cfi_dump_stack_lvl+0x10/0x10 [ 381.168917][ T9055] dump_stack+0x19/0x20 [ 381.168941][ T9055] should_fail_ex+0x3d7/0x530 [ 381.168967][ T9055] should_fail+0xf/0x20 [ 381.168990][ T9055] should_fail_usercopy+0x1e/0x30 [ 381.169017][ T9055] _copy_from_iter+0x1a9/0x1510 [ 381.169046][ T9055] ? kmalloc_reserve+0xcf/0x4f0 [ 381.169070][ T9055] ? __virt_addr_valid+0x2a6/0x380 [ 381.169091][ T9055] ? __cfi__copy_from_iter+0x10/0x10 [ 381.169136][ T9055] ? __check_object_size+0x527/0x830 [ 381.169166][ T9055] ? __cfi___check_object_size+0x10/0x10 [ 381.169195][ T9055] ? skb_put+0x112/0x1f0 [ 381.169220][ T9055] netlink_sendmsg+0x68e/0xb10 [ 381.169250][ T9055] ? __cfi_netlink_sendmsg+0x10/0x10 [ 381.169279][ T9055] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 381.169328][ T9055] ? security_socket_sendmsg+0x3d/0x100 [ 381.169351][ T9055] sock_write_iter+0x4d9/0x530 [ 381.169371][ T9055] ? __cfi_sock_write_iter+0x10/0x10 [ 381.169393][ T9055] ? selinux_file_permission+0x8a4/0xb60 [ 381.169420][ T9055] do_iter_readv_writev+0x62f/0x820 [ 381.169461][ T9055] ? vfs_iter_read+0x5f0/0x5f0 [ 381.169490][ T9055] ? bpf_lsm_file_permission+0xd/0x20 [ 381.169512][ T9055] vfs_writev+0x4a8/0xe50 [ 381.169533][ T9055] ? do_writev+0x2e0/0x2e0 [ 381.169551][ T9055] ? vfs_write+0x9a4/0xf90 [ 381.169582][ T9055] do_writev+0x151/0x2e0 [ 381.169601][ T9055] ? vfs_readv+0xa10/0xa10 [ 381.169621][ T9055] ? __kasan_check_read+0x15/0x20 [ 381.169647][ T9055] __x64_sys_writev+0x81/0x90 [ 381.169675][ T9055] x64_sys_call+0x1fbb/0x2ee0 [ 381.169703][ T9055] do_syscall_64+0x57/0xf0 [ 381.169730][ T9055] ? clear_bhb_loop+0x50/0xa0 [ 381.169748][ T9055] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 381.169776][ T9055] RIP: 0033:0x7fda7db9c819 [ 381.169793][ T9055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.169811][ T9055] RSP: 002b:00007fda7eaaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 381.169832][ T9055] RAX: ffffffffffffffda RBX: 00007fda7de15fa0 RCX: 00007fda7db9c819 [ 381.169848][ T9055] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 381.169861][ T9055] RBP: 00007fda7eaaa090 R08: 0000000000000000 R09: 0000000000000000 [ 381.169874][ T9055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.169887][ T9055] R13: 00007fda7de16038 R14: 00007fda7de15fa0 R15: 00007ffc0bdd6118 [ 381.169905][ T9055] [ 381.452648][ T31] usb 7-1: device descriptor read/64, error -71 [ 381.507636][ T65] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 381.679763][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 381.689477][ T65] usb 2-1: not running at top speed; connect to a high speed hub [ 381.697645][ T31] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 381.708661][ T65] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.720925][ T65] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.737686][ T65] usb 2-1: string descriptor 0 read error: -22 [ 381.744445][ T65] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.754590][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.776501][ T65] usb 2-1: 0:2 : does not exist [ 381.837631][ T31] usb 7-1: device descriptor read/64, error -71 [ 382.077662][ T31] usb 7-1: device descriptor read/64, error -71 [ 382.141583][ T9065] KVM: debugfs: duplicate directory 9065-6 [ 382.188119][ T31] usb usb7-port1: attempt power cycle [ 382.498680][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.507373][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.537665][ T31] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 382.560250][ T31] usb 7-1: device descriptor read/8, error -71 [ 382.620835][ T65] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 382.637431][ T65] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 382.647221][ T65] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 382.659113][ T65] usb 2-1: USB disconnect, device number 115 [ 382.682571][ T8684] udevd[8684]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 382.710114][ T31] usb 7-1: device descriptor read/8, error -71 [ 382.947668][ T31] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 382.970909][ T31] usb 7-1: device descriptor read/8, error -71 [ 383.050390][ T9078] netlink: 'syz.0.2780': attribute type 4 has an invalid length. [ 383.058233][ T9078] netlink: 3649 bytes leftover after parsing attributes in process `syz.0.2780'. [ 383.096011][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 383.110306][ T31] usb 7-1: device descriptor read/8, error -71 [ 383.226040][ T31] usb usb7-port1: unable to enumerate USB device [ 383.611336][ T9101] KVM: debugfs: duplicate directory 9101-6 [ 383.728579][ T9103] KVM: debugfs: duplicate directory 9103-7 [ 383.779592][ T9105] 9pnet: Could not find request transport: xen [ 383.994663][ T9110] netlink: 'syz.6.2790': attribute type 4 has an invalid length. [ 384.025296][ T9110] netlink: 3649 bytes leftover after parsing attributes in process `syz.6.2790'. [ 384.327671][ T65] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 384.347732][ T379] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 384.477651][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 384.489166][ T65] usb 7-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 384.498406][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.506482][ T65] usb 7-1: Product: syz [ 384.511152][ T65] usb 7-1: Manufacturer: syz [ 384.515803][ T65] usb 7-1: SerialNumber: syz [ 384.522318][ T379] usb 2-1: unable to get BOS descriptor or descriptor too short [ 384.532312][ T379] usb 2-1: not running at top speed; connect to a high speed hub [ 384.549554][ T379] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.560236][ T379] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.573899][ T379] usb 2-1: string descriptor 0 read error: -22 [ 384.580327][ T379] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.589413][ T379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.609056][ T379] usb 2-1: 0:2 : does not exist [ 384.753833][ T9112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.769096][ T9112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.810698][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2795'. [ 384.827191][ T9120] overlay: Unknown parameter 'measure' [ 384.854549][ T36] kauditd_printk_skb: 472 callbacks suppressed [ 384.854579][ T36] audit: type=1400 audit(7100059457.848:4064): avc: denied { unmount } for pid=2420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 384.891293][ T36] audit: type=1400 audit(7100059457.888:4065): avc: denied { read write } for pid=2420 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.915489][ T36] audit: type=1400 audit(7100059457.888:4066): avc: denied { read write open } for pid=2420 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.945598][ T36] audit: type=1400 audit(7100059457.888:4067): avc: denied { ioctl } for pid=2420 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.971330][ T36] audit: type=1400 audit(7100059457.938:4068): avc: denied { read write } for pid=9121 comm="syz.4.2796" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 384.982293][ T9122] KVM: debugfs: duplicate directory 9122-6 [ 384.995669][ T36] audit: type=1400 audit(7100059457.938:4069): avc: denied { read write open } for pid=9121 comm="syz.4.2796" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 385.024774][ T36] audit: type=1400 audit(7100059457.938:4070): avc: denied { ioctl } for pid=9121 comm="syz.4.2796" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 385.049863][ T36] audit: type=1400 audit(7100059457.938:4071): avc: denied { create } for pid=9121 comm="syz.4.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 385.070447][ T36] audit: type=1400 audit(7100059457.938:4072): avc: denied { read } for pid=9121 comm="syz.4.2796" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 385.094360][ T36] audit: type=1400 audit(7100059457.938:4073): avc: denied { read open } for pid=9121 comm="syz.4.2796" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 385.127673][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 385.201878][ T9126] KVM: debugfs: duplicate directory 9126-6 [ 385.367688][ T9137] netlink: 'syz.4.2801': attribute type 4 has an invalid length. [ 385.377679][ T9137] netlink: 3649 bytes leftover after parsing attributes in process `syz.4.2801'. [ 385.431409][ T9141] syzkaller1: entered promiscuous mode [ 385.437016][ T9141] syzkaller1: entered allmulticast mode [ 385.474283][ T9143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.490937][ T9143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.502022][ T379] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 385.520185][ T379] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 385.528985][ T9143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.541476][ T379] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 385.558768][ T65] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 385.579940][ T379] usb 2-1: USB disconnect, device number 116 [ 385.587853][ T9143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.609241][ T65] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 385.622832][ T8708] udevd[8708]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 385.632450][ T65] usb 7-1: USB disconnect, device number 76 [ 385.657701][ T8684] udevd[8684]: setting mode of /dev/bus/usb/007/076 to 020664 failed: No such file or directory [ 385.673477][ T8684] udevd[8684]: setting owner of /dev/bus/usb/007/076 to uid=0, gid=0 failed: No such file or directory [ 385.736360][ T8684] udevd[8684]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 385.967714][ T65] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 386.121082][ T65] usb 7-1: unable to get BOS descriptor or descriptor too short [ 386.130939][ T65] usb 7-1: config 1 has an invalid interface number: 33 but max is 2 [ 386.140375][ T65] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.151146][ T65] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 386.160826][ T65] usb 7-1: config 1 has no interface number 1 [ 386.178833][ T65] usb 7-1: string descriptor 0 read error: -22 [ 386.185425][ T65] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 386.195412][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.195488][ T9155] KVM: debugfs: duplicate directory 9155-6 [ 386.305363][ T31] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 386.321807][ T31] hid-generic 0000:0000:0000.002D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 386.401060][ T9158] fido_id[9158]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 386.520844][ T9165] netlink: 'syz.4.2812': attribute type 4 has an invalid length. [ 386.528707][ T9165] netlink: 3581 bytes leftover after parsing attributes in process `syz.4.2812'. [ 386.590168][ T9169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.605284][ T9169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.653913][ T9171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.672614][ T9171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.249898][ T31] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 387.260000][ T31] hid-generic 0000:0000:0000.002E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 387.341041][ T9180] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2819'. [ 387.362012][ T9178] fido_id[9178]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 387.435068][ T65] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 387.462779][ T65] usb 7-1: USB disconnect, device number 77 [ 387.548938][ T9187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.577787][ T9187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.984481][ T9189] netlink: 'syz.6.2822': attribute type 4 has an invalid length. [ 388.190886][ T9202] syzkaller1: left promiscuous mode [ 388.196245][ T9202] syzkaller1: left allmulticast mode [ 388.255261][ T31] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 388.272876][ T31] hid-generic 0000:0000:0000.002F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 388.355361][ T9205] fido_id[9205]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 388.739531][ T9220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.752132][ T9220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.936313][ T9224] netlink: 'syz.6.2834': attribute type 12 has an invalid length. [ 388.969368][ T9224] 9pnet_fd: Insufficient options for proto=fd [ 389.020439][ T9227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.029187][ T9227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.047468][ T9227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.058754][ T9227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.098774][ T65] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 389.119342][ T65] hid-generic 0000:0000:0000.0030: hidraw1: HID v0.00 Device [syz1] on syz0 [ 389.428513][ T9245] netlink: 37 bytes leftover after parsing attributes in process `syz.0.2839'. [ 389.770455][ T9253] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2842'. [ 389.867436][ T350] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 389.875709][ T36] kauditd_printk_skb: 498 callbacks suppressed [ 389.875728][ T36] audit: type=1400 audit(7100059462.868:4572): avc: denied { ioctl } for pid=9248 comm="syz.6.2840" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.907737][ T36] audit: type=1400 audit(7100059462.868:4573): avc: denied { ioctl } for pid=9248 comm="syz.6.2840" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.948189][ T9270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.974270][ T36] audit: type=1400 audit(7100059462.868:4574): avc: denied { ioctl } for pid=9248 comm="syz.6.2840" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.975415][ T9270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.020501][ T36] audit: type=1400 audit(7100059462.938:4575): avc: denied { read write } for pid=9269 comm="syz.0.2843" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 390.028936][ T9274] incfs: Can't find or create .index dir in ./file0 [ 390.059521][ T350] usb 7-1: Using ep0 maxpacket: 16 [ 390.064772][ T36] audit: type=1400 audit(7100059462.938:4576): avc: denied { read write open } for pid=9269 comm="syz.0.2843" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 390.066407][ T9274] incfs: mount failed -22 [ 390.094106][ T36] audit: type=1400 audit(7100059462.938:4577): avc: denied { ioctl } for pid=9269 comm="syz.0.2843" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 390.094425][ T350] usb 7-1: config index 0 descriptor too short (expected 176, got 162) [ 390.127151][ T350] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.139029][ T36] audit: type=1400 audit(7100059462.938:4578): avc: denied { read write } for pid=9269 comm="syz.0.2843" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 390.158809][ T350] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.182939][ T36] audit: type=1400 audit(7100059462.938:4579): avc: denied { read write open } for pid=9269 comm="syz.0.2843" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 390.184238][ T350] usb 7-1: config 1 interface 0 has no altsetting 0 [ 390.217682][ T36] audit: type=1400 audit(7100059462.938:4580): avc: denied { ioctl } for pid=9269 comm="syz.0.2843" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 390.243010][ T36] audit: type=1400 audit(7100059462.938:4581): avc: denied { ioctl } for pid=9269 comm="syz.0.2843" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 390.271514][ T350] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.280661][ T350] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.289092][ T350] usb 7-1: Product: syz [ 390.293339][ T350] usb 7-1: Manufacturer: syz [ 390.297981][ T350] usb 7-1: SerialNumber: syz [ 390.355188][ T379] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 390.372356][ T379] hid-generic 0000:0000:0000.0031: hidraw1: HID v0.00 Device [syz1] on syz0 [ 390.480243][ T9282] KVM: debugfs: duplicate directory 9282-6 [ 390.536230][ T9249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.573770][ T9249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.591394][ T350] usb 7-1: 0:2 : does not exist [ 390.605837][ T350] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 390.617654][ T379] usb 5-1: reset high-speed USB device number 62 using dummy_hcd [ 390.628473][ T350] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 390.644045][ T350] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 390.661941][ T350] usb 7-1: USB disconnect, device number 78 [ 390.767661][ T379] usb 5-1: device descriptor read/64, error -32 [ 390.786880][ T8684] udevd[8684]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 390.822092][ T9298] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 390.937655][ T307] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 391.007665][ T379] usb 5-1: device descriptor read/64, error -32 [ 391.087667][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 391.096174][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 391.106944][ T307] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 391.122884][ T307] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 391.132986][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.147620][ T307] usb 2-1: Product: syz [ 391.151807][ T307] usb 2-1: Manufacturer: syz [ 391.156437][ T307] usb 2-1: SerialNumber: syz [ 391.247669][ T379] usb 5-1: reset high-speed USB device number 62 using dummy_hcd [ 391.377642][ T379] usb 5-1: device descriptor read/64, error -32 [ 391.387168][ T307] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 391.410566][ T307] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 391.446825][ T307] usb 2-1: USB disconnect, device number 117 [ 391.572380][ T8684] udevd[8684]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 391.757364][ T9312] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 391.857861][ T379] usb 5-1: device descriptor read/64, error -32 [ 391.939524][ T482] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 391.986359][ T482] hid-generic 0000:0000:0000.0032: hidraw1: HID v0.00 Device [syz1] on syz0 [ 392.007801][ T9320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:617 [ 392.037673][ T379] raw-gadget.1 gadget.4: failed to queue resume event [ 392.145846][ T379] usb 5-1: reset high-speed USB device number 62 using dummy_hcd [ 392.192059][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 392.199399][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 392.214851][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 392.221987][ T379] usb 5-1: device descriptor read/8, error -32 [ 392.247248][ T9329] netlink: 'syz.4.2861': attribute type 15 has an invalid length. [ 392.276646][ T9329] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 392.358243][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 392.365557][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 392.373214][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 392.380939][ T379] usb 5-1: device descriptor read/8, error -32 [ 392.479789][ T5294] raw-gadget.1 gadget.4: failed to queue suspend event [ 392.517662][ T482] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 392.517688][ T5294] raw-gadget.1 gadget.4: failed to queue disconnect event [ 392.690958][ T482] usb 2-1: device descriptor read/64, error -71 [ 392.767133][ T9344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.786659][ T9344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.805522][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.815424][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.824066][ T9338] bridge_slave_0: entered allmulticast mode [ 392.832373][ T9338] bridge_slave_0: entered promiscuous mode [ 392.841563][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.849198][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.856280][ T9338] bridge_slave_1: entered allmulticast mode [ 392.864527][ T9338] bridge_slave_1: entered promiscuous mode [ 392.947657][ T482] usb 2-1: device descriptor read/64, error -71 [ 392.979252][ T12] bridge_slave_1: left allmulticast mode [ 392.985258][ T12] bridge_slave_1: left promiscuous mode [ 392.992358][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.000949][ T12] bridge_slave_0: left allmulticast mode [ 393.006609][ T12] bridge_slave_0: left promiscuous mode [ 393.012481][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.086012][ T12] tipc: Left network mode [ 393.091588][ T12] veth1_macvtap: left promiscuous mode [ 393.097172][ T12] veth0_vlan: left promiscuous mode [ 393.150272][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.157357][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.171844][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.178955][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.187659][ T482] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 393.258074][ T65] usb 5-1: USB disconnect, device number 62 [ 393.290341][ T9338] veth0_vlan: entered promiscuous mode [ 393.321997][ T12] ------------[ cut here ]------------ [ 393.327517][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 393.337516][ T12] Modules linked in: [ 393.341479][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 393.350237][ T482] usb 2-1: device descriptor read/64, error -71 [ 393.353073][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 393.369399][ T12] Workqueue: netns cleanup_net [ 393.374199][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 393.380234][ T12] Code: e8 41 4c d9 fc 4b 83 3c 3e 00 75 19 e8 e5 1d 81 fc 49 81 ff f8 07 00 00 74 1b e8 d7 1d 81 fc 49 83 c7 08 eb c9 e8 cc 1d 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 393.399895][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 393.405997][ T12] RAX: ffffffff85068ce4 RBX: ffff8881320f58c0 RCX: ffff888102652600 [ 393.414034][ T12] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888137134000 [ 393.422079][ T12] RBP: ffffc900000c7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 393.430233][ T12] R10: dffffc0000000000 R11: fffff52000018f04 R12: dffffc0000000000 [ 393.438296][ T12] R13: dffffc0000000000 R14: ffff888137134000 R15: 0000000000000000 [ 393.446297][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 393.455269][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.461923][ T12] CR2: 00005555578514e8 CR3: 0000000123848000 CR4: 00000000003526b0 [ 393.469941][ T12] Call Trace: [ 393.473249][ T12] [ 393.476203][ T12] cleanup_net+0x6bd/0xc90 [ 393.480677][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 393.485656][ T12] ? kick_pool+0xb9/0x550 [ 393.490044][ T12] process_scheduled_works+0x7d1/0x1020 [ 393.495651][ T12] worker_thread+0xc70/0x10b0 [ 393.500402][ T12] kthread+0x2c9/0x370 [ 393.504516][ T12] ? __cfi_worker_thread+0x10/0x10 [ 393.509767][ T12] ? __cfi_kthread+0x10/0x10 [ 393.514477][ T12] ret_from_fork+0x67/0xa0 [ 393.518950][ T12] ? __cfi_kthread+0x10/0x10 [ 393.523584][ T12] ret_from_fork_asm+0x1a/0x30 [ 393.524355][ T9338] veth1_macvtap: entered promiscuous mode [ 393.528400][ T12] [ 393.528412][ T12] ---[ end trace 0000000000000000 ]--- [ 393.563576][ T12] ------------[ cut here ]------------ [ 393.569109][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 393.579166][ T12] Modules linked in: [ 393.583108][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 393.596186][ T12] Tainted: [W]=WARN [ 393.600044][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 393.610292][ T12] Workqueue: netns cleanup_net [ 393.615094][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 393.621216][ T12] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 90 1d 81 fc 49 81 ff f8 07 00 00 74 1b e8 82 1d 81 fc 49 83 c7 08 eb c5 e8 77 1d 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 67 1d 81 fc 5b 41 5c 41 5e 41 [ 393.640914][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 393.647022][ T12] RAX: ffffffff85068d39 RBX: ffff888137134800 RCX: ffff888102652600 [ 393.655038][ T12] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888137134810 [ 393.657934][ T482] usb 2-1: device descriptor read/64, error -71 [ 393.663078][ T12] RBP: ffffc900000c7bb0 R08: 0000000000000003 R09: 0000000000000004 [ 393.677600][ T12] R10: dffffc0000000000 R11: fffff52000018f04 R12: dffffc0000000000 [ 393.685603][ T12] R13: dffffc0000000000 R14: ffff888137134000 R15: 0000000000000010 [ 393.693645][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 393.702626][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.709269][ T12] CR2: 00007fda7e9456b8 CR3: 00000000074a8000 CR4: 00000000003526b0 [ 393.717276][ T12] Call Trace: [ 393.720583][ T12] [ 393.723565][ T12] cleanup_net+0x6bd/0xc90 [ 393.728029][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 393.732995][ T12] ? kick_pool+0xb9/0x550 [ 393.737353][ T12] process_scheduled_works+0x7d1/0x1020 [ 393.742982][ T12] worker_thread+0xc70/0x10b0 [ 393.747723][ T12] kthread+0x2c9/0x370 [ 393.751815][ T12] ? __cfi_worker_thread+0x10/0x10 [ 393.756957][ T12] ? __cfi_kthread+0x10/0x10 [ 393.761596][ T12] ret_from_fork+0x67/0xa0 [ 393.766062][ T12] ? __cfi_kthread+0x10/0x10 [ 393.770724][ T12] ret_from_fork_asm+0x1a/0x30 [ 393.775528][ T12] [ 393.778583][ T12] ---[ end trace 0000000000000000 ]--- [ 393.797722][ T482] usb usb2-port1: attempt power cycle [ 393.960154][ T379] usb 1-1: USB disconnect, device number 62 [ 393.960161][ T12] ------------[ cut here ]------------ [ 393.971643][ T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 393.981106][ T12] Modules linked in: [ 393.985026][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 393.998086][ T12] Tainted: [W]=WARN [ 394.001935][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.012068][ T12] Workqueue: netns cleanup_net [ 394.016877][ T12] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 394.022496][ T12] Code: 3c 20 00 74 08 48 89 df e8 3f 18 f4 fc 48 8b 3b e8 a7 40 df fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 d1 b7 00 cc e8 d2 e9 9b fc <0f> 0b e9 b0 fd ff ff e8 c6 e9 9b fc 0f 0b e9 18 fe ff ff e8 ba e9 [ 394.042247][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 394.048358][ T12] RAX: ffffffff84ebc0de RBX: ffff8881320f58c0 RCX: ffff888102652600 [ 394.056356][ T12] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888102652600 [ 394.064369][ T12] RBP: ffffc900000c7b98 R08: ffffffff87d38bc7 R09: 1ffffffff0fa7178 [ 394.072389][ T12] R10: dffffc0000000000 R11: fffffbfff0fa7179 R12: 1ffffffff0fa6ec8 [ 394.080395][ T12] R13: dffffc0000000000 R14: ffff8881320f64c0 R15: dffffc0000000000 [ 394.088417][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 394.097359][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.103983][ T12] CR2: 00007fda7e9456b8 CR3: 0000000117210000 CR4: 00000000003526b0 [ 394.112010][ T12] Call Trace: [ 394.115311][ T12] [ 394.118271][ T12] xfrm_net_exit+0x31/0x80 [ 394.122716][ T12] cleanup_net+0x6bd/0xc90 [ 394.127149][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 394.132157][ T12] ? kick_pool+0xb9/0x550 [ 394.136511][ T12] process_scheduled_works+0x7d1/0x1020 [ 394.142115][ T12] worker_thread+0xc70/0x10b0 [ 394.146849][ T12] kthread+0x2c9/0x370 [ 394.150962][ T12] ? __cfi_worker_thread+0x10/0x10 [ 394.156136][ T12] ? __cfi_kthread+0x10/0x10 [ 394.160765][ T12] ret_from_fork+0x67/0xa0 [ 394.165218][ T12] ? __cfi_kthread+0x10/0x10 [ 394.169891][ T12] ret_from_fork_asm+0x1a/0x30 [ 394.174699][ T12] [ 394.177775][ T12] ---[ end trace 0000000000000000 ]--- [ 394.319013][ T5609] syz_tun (unregistering): left allmulticast mode [ 394.431767][ T12] bridge_slave_1: left allmulticast mode [ 394.437434][ T12] bridge_slave_1: left promiscuous mode [ 394.444367][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.452961][ T12] bridge_slave_0: left allmulticast mode [ 394.458718][ T12] bridge_slave_0: left promiscuous mode [ 394.464344][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.473653][ T12] bridge_slave_1: left allmulticast mode [ 394.479473][ T12] bridge_slave_1: left promiscuous mode [ 394.485080][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.494570][ T12] bridge_slave_0: left allmulticast mode [ 394.500317][ T12] bridge_slave_0: left promiscuous mode [ 394.505916][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.661868][ T12] veth1_macvtap: left promiscuous mode [ 394.667387][ T12] veth0_vlan: left promiscuous mode [ 394.673351][ T12] veth1_macvtap: left promiscuous mode [ 394.679115][ T12] veth0_vlan: left promiscuous mode [ 395.449337][ T12] bridge_slave_1: left allmulticast mode [ 395.455843][ T12] bridge_slave_1: left promiscuous mode [ 395.461666][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.469371][ T12] bridge_slave_0: left allmulticast mode [ 395.475026][ T12] bridge_slave_0: left promiscuous mode [ 395.480773][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.590817][ T12] veth1_macvtap: left promiscuous mode [ 395.596393][ T12] veth0_vlan: left promiscuous mode