last executing test programs: 9.86168786s ago: executing program 2 (id=1360): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x43, 0x80300) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000003, 0x12, r0, 0xd0678000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x593c, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f00000003c0)={0x300, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000040)={0x8, 0x6, 0xba0c, {0x2, 0x3c900000}, 0x7, 0x3229}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000200), 0x4) 9.522889699s ago: executing program 2 (id=1364): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$setopts(0xc60a, r4, 0x99a, 0x40) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r6 = epoll_create1(0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0x4, 0x40100000, 0x5, 0x0, 0x1, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81}) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 7.423524548s ago: executing program 1 (id=1372): munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) 6.447110281s ago: executing program 0 (id=1376): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x11c0, 0x5506, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0xb1, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x62, 0x20, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0x23, 0x7, {0x7, 0xf, "00e4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020}, 0x2020) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8400, 0x0) (rerun: 64) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x140d, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8008014}, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x9, 0x7, 0x0, 0x5, 0xc, 0x1c, "fee8a2ab78fc979fd1e0fb950720b7fb810000000000b26b000000000000000000000000002300000000000000000000000000000000000000000800", "2809e8dbe108598948224ad54afac12b8753d7bdb22d0000b520a1a93c060000000000027a8f3d45cdd499a861ac000000000318e341e15ec20e000000000400", "f422741b13103e52f40000ed06000000000200989d8d4200", [0x0, 0x1fffffffbfffd]}}) (async, rerun: 64) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x10, r3) (async) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000022c0)={{0x0, 0x0, 0x80, {0xd000, 0x80af000}}, "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", "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"}) (async, rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) (async) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)={0x1fc, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x28b, 0x66}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4469f3b7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ae9dbfa392344792"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e0f96061719a0912b022926dd8a3aafa"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x944}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bb0f00f2cc1ee675"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="107bee18f9c844bea11245323df5ca011014bebbc66a20c8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x100000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e499a15781f0e20c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d7fa001570f1cce7"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ac7578b0216e74a83880b882b8384975"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2ba9482c36f8052cfddb16204f252b58"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "98329af1373065b9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f6b4db2441f4817fb62ab36e9486e6742c3a4ebb2d537da24cee1021d3c82d2e"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5ef1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5d1668b327b05255"}]}, @NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "89f0a9aa561a361e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="63740952b2813b589e047981d678d90c43846c30b3e980931a89ddf7f2be0f68"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="725409ca6be11e448f1c4a198f7bdd924bc3205cd5677cc4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4141b294dc57218d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffff5ba}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ab112e94b2e9c4d9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c699757162c3d4ce"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d19e454a8a76c2c12da8d3ffa1aff157f902635b34ae1d35"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9b630ddc78359ca7f24435bf07e800"}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8804}, 0x40) (async) close_range(r8, 0xffffffffffffffff, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 6.376379768s ago: executing program 1 (id=1377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x6) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x8b, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r2, &(0x7f0000000200)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/157, 0x9d}}, 0x10) io_setup(0x7, &(0x7f0000000280)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='7', 0x1, 0x4}]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r4}, 0x4) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000140)) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000500)="48000000140081fb7059ae08060c040002ff0f03900000000000000400006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') setuid(0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x9) 6.305167387s ago: executing program 4 (id=1379): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x8000, 0x2, 0x3, 0x2}, {0x0, 0x1, 0x0, 0xf5dc}, {0x0, 0x7a, 0xd, 0xe0000000}, {0x7, 0xb, 0x5, 0x6}, {0x2, 0x8, 0x0, 0x7fff}, {0x8, 0x4, 0x9, 0xd6a}, {0x8, 0x1, 0x8, 0x4}]}) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x15, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xfffffff7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x50, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0x56}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000001c0)='syzkaller\x00', 0xffff, 0x7e, &(0x7f0000000200)=""/126, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x6, 0x1, 0x7fff}, 0x10, 0x27294, 0xffffffffffffffff, 0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x1, 0x3, 0x9, 0xc}, {0x2, 0x3, 0xa, 0x1}, {0x2, 0x1, 0xc, 0x4}, {0x0, 0x1, 0x2, 0x5}, {0x3, 0x5, 0xe}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r2, 0x0, 0xda, 0x95, &(0x7f0000000480)="45622b607993d65a0a6f352ad4152b800ee5887d1bcd061a191c81a7c88c5a982afcc67348769eb6b652b918119f52c474b1034505f86d886fa95e70a0df9dcfd93c66af5b5ae3bfbdb92739ade9f5183d2fc848b55432720898a712f26800be8c2f53c65cdb71aeea49d99a83a945165cb0f78f0b1c0c126ea421e7adfaa8f96f4ac1aea12b6c741d9c1aee38d75ce3ac37c54ba8e46415fb3502fae6c89bcf36e1093a0e8613bd547ca61e87bdd73f50ac9920a6ce49df258e47bf2475bbd0bb57752b0991c4d4c2e0aff4da838c9e4d6718bd4a3954d58975", &(0x7f0000000580)=""/149, 0x8001, 0x0, 0x77, 0x1000, &(0x7f0000000640)="6f7f30870cfa2ee7e6a336a22d65911338436dec3d73d4779a41856b68e0cc6b48c5c45cc8833b597ba60e4fc7444491a0d84632ccc5fb68e427e5fff15a32177693343d27a7cb7cd62b9a460f774e3eb26a74ad45d642d13154ebefdf72f6113168f4968782e03185fa3a2c3543d721bff58f0201bc07", &(0x7f00000006c0)="4161cd5663828d4e732b7e37e7dfee6052257fac4e570133ff1c81869b11c6136098e5e9f3eeafc188ef22a77f27128aead3452144338f9e993d1b002e27a02d58df1875d9775c7dafac085e5b207d0e12e14bcbf7e550b10e20e9bc247a984d01289e52aa6f3bb309075371352792c2b75434a54aec051784b572a5c4203e8667336c68da8e96d2a53ed3642713672b83fb5257753b1e82ed2451c25c988e357f43931f4b142b4f00d02a0c94d3efe322206df9c14b11112ae2550e90cbfc4a7212fde934fdf731285f5bdf23e1a94a77de73a07d9eaadfbef3d707c764c53a7bbe8eee76bb82f7ab44446cf426ec4feebd995fc1e80d2075583cb4e01e0bca5d658caed6ad7bc965c52cd5d2335dab62c9dee923699da66af5d346c34177185c1899c723ec0db886b8349326edd63ac564ddeae260761e6ae660c2871df6ecc75182a07c27f34d58c077c8e9243fdd5d2128cdc90be9651657befbc65bdf093e65a8a7a769943afae8ba6c666a91f5fdf8b7a96eb681a9572bef006bdd21020c7803d6d0b66023b49fa4aa7d2104ebbe2d7e154c3fa39107a739ba2dc3e29d0c8d3560de88f873fe9443d87f34d7dfe1186339ed94f450dd488f4f814fa4ab3a984b768b8520d3f2dad72f911d694ab28acf472389d281a79190f1e16bfdaa8376524c18ec1eda67caed06eead08fbdca8242002affff0e3e8b818e38e6772ba569d65cb09add17d3ddb770d5bc4191a24a9d1407685c1fb318a283db65b43ab532410019afdd1e4929d9fc29a6d125e6c8fe806d5578266cb8f76655842c12aa4d6d4fc14c86ab5f26840f30d173018fc945ac23b1d824f597d7fa686a1813e2a788b5057595d91948fa6dab4bb312fbd12f6fea99c93577c6f557e2c7df18de3e2aa981d7709997ad36f277e670bd5529a47095f55f960cfa0d3d21d4f5dcad6a2578ca9bc533e100594daaad1f57f57592c462f3a0793e85168531882d8077f6a0da82948fe5830b9c57614125bff6e3d9562919da589647f9c4fd0a4d17d1ff3aad5b95b77bf7bf5b804489680a5d5cec888376e0cffb98d4a9e7de2873e70c76f352dffffc00ef54cecd3718a9228505eb1dc1ad7b4d24c6c430aa6372b170edece37a8ae215711ae09e601d2211ff4a1afab79bbc4bc9a640388d5e9d1ed5a06a388cc03c7aa38839d51a7307fc40497bc0a353ec2f1a6485efed77496a5ab6a073d0482477c2f4fb20432034a1d149cf4edfec45264db53e852cd1849c88535e30c62234c8b109542556742556acec40b0e3ce1f0f93c5a8c1e6a2e5d58f3166ffcacadbad7988af712fbac7ef2a46c63750fd3abfc0bcbf0b9b3105a27ff0095db6a35f04d55b7d2e40d80d1bf29d9c42ad29f29483124a298171fd302450e4bc2b452452d0ffdbd54bb63fefb3440e9794b631ef935227be7e6a30ddb36ad5180aa6da042910c7e765dc49fa2a9b404297edd47505d779c907eab22de9edce4d2af0db18b02de89ad5458c1fb5f3167a0b8503fb148f21a06918449746b0c8dce86e186b1c289110c83b191f50e5db6a278b0eb7fc31b1105c362871c2acfa169dbb27c9e69b3a42318f1994076ebe18dff00b3d2a46d050e47de576e2e1536f2bee256ef039dee55652c84d9b18b0b3a8ec8eedb0275ed851791e72c3fcbd8d479f2d4583a3067a44f832bf1b3b5518c7ffc0637563f1098933ad7f67ef4c3bcd3a0683aa3e680aceae3cd6d1efeaa326fc1b25fa2d3e350d69a63b369c1f73b346c19fcb759a20aa4ed716d494e6ea0bc1521e500e11b0db18639a153c1eaa6cc8973248e0fcd4ddc66fa66087ddc8c883d56f2abe525014e65440aaf52de4c27d60e0115d48baeeb7d1a6073016e81773872312752ae2e7ed178b5a534ebc21878cb35694c3bb187375a173df343fcda869a13fc6107f493c2225965438bb6a239bfe1ccafee828f568ad87bdbabbc418f85c80aacbd4a5a4409a81e44238a3b2057c480ad5306e169fd4b10dec1afad829ef1540725c33e371adfe05413d73d5572275ea0c695b69655ecc4fbd50d123be37aa1992f3f19e628d75cbbf3550ec77836860943439bdd58eb9273e2c1802605438d8b394dc434ab53a2010a0c56bb4dc2f4e5294b932c05327874d0331d2465565744780d3901466583b84b1b4e76edba6ff8f416b93079de0db637f97978867eef7ec8805d378efa679e5846c1788baba97dca328120246ee3737cb0eb511f3f25b86ca3cdbf7f5f6fbfc423d3bc66812fe5a66a917dcdacf58eae362636720158e5342254941391c48e74ee6a7bc92c207bd764b93364cb0e696c0993ea891c58683f6d2eb23429b45fae5bc9f31b87a6945911a31c3f68d985e5dcdb7bd2a0b79bb4e58b2add69589dac47913434617a6613a975d02d283d97f78c8829d5354270a58af73db37fbb6565b0c08eda4d2d45bc4731b3269ec33e48f255c2991ca38c188b22f34c8701c965a0a4d71509e07ce09e7a490e5ddead3b99d445975037e26b41dc7a5844fd51494925f17da086bfe9c89165f3f91ad444ca1755ad43f9809087519027f7d3d1730a9ae1b229656f2ab3632ba4acf811d1c80773d72e7f8dcea0cde5d38e30daafb01d054ed799c8c210903e2cc9aedd608038f5a266634af258f0cb1e216ddf347bc0995a0010253210884ffb1c0ea01bfc2cc06d7412457c26c9fd3e141decb594e0a1eb9ff0e4172beb4913a82b22e125933b2542da55c2d8e31bd1e49dc448fd55a7b03cedf34c3b1ce6411a5c9c9a87cd2c4730c2815aa76c9729926bc84d99c5470aa2e531f235e182162f5b6721a6404557e4f9eb90178b3a5b44e3e7c88413ad871acaf793f9f4203e5c65c278132343c86a11063f1fd69429efb1f28579ee476cf6f0fd7721d832671d40d25f5b85096c1e39b5ff02aeb93c4fb40d2a5392908b344d3dc42c65a97cba6ab593f430a02440b59ebdefe70f7e47ad021d27835436cc14a8d861ccd3184c03000ecdd5825ca51b11d6fc12d6a3b082faf8aef625af115e5861ab8869a92cd8a4d9adf347184a7fd9a58f47164962ba67e7dc75b86c17f2dc78fd46ee6b22889a9da1e5ffe111575c87e4ea6aa88267ef45b4e2f9bd542881bf5455b1c8c7724bfb6e34c7a808212115a0d0307706a9d08a0502965868ab9ae613dbd06238fbd7d1e1844f64630b259f21e715acca8f09c2eb9a5bcdfd7953fd3433caa335cac9c3a4ffe54e3eb57fdc1f23d28997fa120a0a4757a543d025b0b4f003bc6686a97e0ea2c47dae6695886f5f8cb22282a5831fe95f569964f6fd30b6d458ff8efd0080152bac2ec065c9e61fb2317d83d05538cc46a905bc963c3738f66c5cf5e99cf26d1ba46dae7fe9b5dc2517159e4c4934bf5223e36504d9676105cfbe84c6c51003a369a992efe0b23caf617cfd4baf738fa6707dbaa98c09bbecc341748c2fee504de6eba4c07c45e31a7c9bfc374abaa733d67bda1a6d17231734575fc76f7eaa8460219f1ad9b01f73d236a6a6c6bc088fc8b82d53319eefcc4c86a6c4cdb7c6700b6bad28c0b0111ae58024b16cb1836fee544722508a6afabed7ed702f5527bf9ea7533c2be04f05ae40fa13c7194baf223b3101bbf90564ede533959ad7368f8868c42acc1c4b1a95272ed4424456ad6762e059ca69f275bb0e8aa44bc46440445085f40d886a11193ce65781132d9c457725545ebe065d0f9740fce3797b94b0ba0cfcb513cc61e51e4f7b628b39d911956b26a1c1e7434258e8fda7cf3d2b715c99640787219d5583cbaf1a57a08ed8b6e7561b455cb96acb329040df14b4e7261b789974193934704491b4b3438719fb937d214918fb667f9b0b05203d03d9f28cb0167feec7c7b651587665a45996bf7900c6621ac99fabdb8054b90321da4792d3e379b4382f07ed8da1436f3287fd472526069e7c3c6d1ac15251b1658145b1cf073bf4137c25c63325124fe413c6281390819218cc218bf682fce0f3b8435c47a28b297d6b97b6be9b9c6e8ff73402ab3ea8edae5291ff00b6c793ba1072877f7ab27f9f404b174c8fe520313ebda4822841530d47e405aafb81f97bdbfbf6017381918ff50aa94a062bd120d880dfbcb0a61688c86bc7ce89054fb688772af396004d9a66c5fd6c1c912e94c5d5529694bd5c799de381cb2f2f824dbd981cb13c3af88d36ed9c88c80c25bdb9a3bc58b0d16a8696295ae08421cee8f4c87a7d32fd6f301104cce53fc47260e63ff666187785bd854c7d166879090d0328af59b302127b469df78af4e45f749e94f01edd9e66787aa3931d7cf290561d2cbdc46b09211b1839a5657cf98587e05b5f1ee62a52296adced36b2cf97b005b2e102c3b0f4644e73c852b28b8ba8ace5968ee591587503115c8475610c7afaa55cc35b50c3d22e76426bb23936810f5895d809e5ac3d762dbb47a2b6a5bfd992fad0637846024e41f7cdc346311bb70dfdb2fb79e67e75289f43223dba59899dabacd9fbc0acb0f6400a12e0b3b61969d1f55d897609a8f06a493181d272e44ac9601fffcf75b5843b02df5cccc8c4e2ed7a6f4398072477e97f0144a1d578c69f716b7c334fa5e6a4bc6bbdfbdf7d60ef1c3f1a40b288fa0273b57cefe3bd80a3feed3915da4151fb976d0808e1c4eb7eca9f10bc7c47782d37690898479aba0d8a92f7d89ae8be3548d1c079a951b1aade0e8405879ab444aa85b9fd5f796c0c759ed4f119dfbc34639b56292d707fb3a764dd79941029f31d0cb5ac65ef3eb97a089aca877cf19ffec7e593947742cb82c9f9ccff3f483895bd639eb8c7c0279c13fef829633d61e059f19bb88602a58a51f5901324da3779c9a439e95e13559f3e24f651162ce63ae091ccb28e8b48ea55c6aa123db0f7f6d2a69bc429a0e84ba7dd28b654bf3cf92f51b3113088ccf2a1730d1659bb2f3683d8d8a8c4bbe461fc00d38d11cec1f0aad2657956588350178105fbba6db42ec2bb748357a753851c8db4a67885661e05e310b4b80f1638bc4ab2b2bec21d2ac7f056c57ae19cbb05979df369e300f6438ec652ea5612bd5bfd7e6fc4429fb96a9fa86e72cc2fdcdc7db4168c679a836ef819e49f70d324ed239277655dd39cdda5642d561fd867aa7659bf3107b3e7016c294afae05c97196e12442b100e1cf1573bb1c13506378ceb14e538e4aeb48e43ea7e1327df0ec665286305517313aff1a2a16b6704693b465ade86ec2ce904544ce6cff5a23a319699f96372b15c9ced0bc758eb4ea33a1898d889801ca92f0828aa1dbe78f231531b9fe41007deb0d4108ca32a582f6ae8755c585189f27db4f38fb6c16ddfdbe37f49b6b112e32d652cee1602055c4cd82db5f2fb78c60e76728dec299cb10e93965c97e2ce98a0d856f5fe827036388bc06837f9c4fc8794b81ba8685c0bff9e9fc26a5363013ae5643f188ac87e398f4c245568ff0a77657f25ce61e86ef71d303d108fdb4f005ddbd664426fc05d02fed3c960f540a5e6862918d5e9787766f2a0385f3e1cef99b3c405076aef8ef109fb036158dfdc6a018c636b1315bb9173af997d8e336d8ca364eb1f9d7de3b87e08203ab50f6ad91e12201f0e6847b4da6a087909389fb1ba3c24896faad5fc1e16ea037178422f818309246e189d0718d721c115d90ccec1ef6b445a8bf1297d7edd46f061d04b8d978f49b5a924fbfb993690cb5297b69e52a30b61ab03d13595759decf275fa18ba7a5fec5b22f6ea6b65eaf14a6daa3a9b2dd575438e3749eb", 0x0, 0x0, 0x2}, 0x50) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000001740)) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001780)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f00000017c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000003800)={0x3, @null, r4}) (async) socket$caif_seqpacket(0x25, 0x5, 0x3) (async) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000003840)={0x6, 0x118, 0xfa00, {{0xe25, 0x3, "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", 0xb, 0x3, 0xd8, 0xb3, 0x45, 0x7, 0x7f}}}, 0x120) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000003980)='/dev/comedi1\x00', 0x2000, 0x0) (async) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000004a40)={'broute\x00', 0x0, 0x4, 0x1000, [0x4, 0x7fff, 0xcee, 0x8, 0x7, 0x9], 0x5, &(0x7f00000039c0)=[{}, {}, {}, {}, {}], &(0x7f0000003a40)=""/4096}, &(0x7f0000004ac0)=0x78) (async) connect$qrtr(r3, &(0x7f0000004b00)={0x2a, 0x2}, 0xc) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000004b40)={0x0, 0x552, 0x20, 0x8, 0x4}, &(0x7f0000004b80)=0x18) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000004bc0)={r7, 0x5}, &(0x7f0000004c00)=0x8) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004cc0)={r3, 0x58, &(0x7f0000004c40)}, 0x10) (rerun: 32) process_vm_writev(r5, &(0x7f0000004e00)=[{&(0x7f0000004d00)=""/231, 0xe7}], 0x1, &(0x7f0000004ec0)=[{&(0x7f0000004e40)=""/102, 0x66}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0x4122, 0x0) r8 = semget$private(0x0, 0x5, 0x100) semctl$IPC_RMID(r8, 0x0, 0x0) (async) process_vm_writev(r5, &(0x7f0000005200)=[{&(0x7f0000004f00)=""/130, 0x82}, {&(0x7f0000004fc0)=""/187, 0xbb}, {&(0x7f0000005080)=""/33, 0x21}, {&(0x7f00000050c0)=""/67, 0x43}, {&(0x7f0000005140)=""/166, 0xa6}], 0x5, &(0x7f00000083c0)=[{&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/53, 0x35}, {&(0x7f00000062c0)=""/184, 0xb8}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000007380)=""/2, 0x2}, {&(0x7f00000073c0)=""/4096, 0x1000}], 0x6, 0x0) process_vm_writev(r5, &(0x7f0000008640)=[{&(0x7f0000008440)=""/93, 0x5d}, {&(0x7f00000084c0)=""/226, 0xe2}, {&(0x7f00000085c0)=""/62, 0x3e}, {&(0x7f0000008600)=""/64, 0x40}], 0x4, &(0x7f0000008a40)=[{&(0x7f0000008680)=""/219, 0xdb}, {&(0x7f0000008780)=""/219, 0xdb}, {&(0x7f0000008880)=""/153, 0x99}, {&(0x7f0000008940)=""/219, 0xdb}], 0x4, 0x0) r9 = syz_open_procfs(r5, &(0x7f0000008a80)='comm\x00') getsockopt$inet_tcp_int(r9, 0x6, 0x1b, &(0x7f0000008ac0), &(0x7f0000008b00)=0x4) (async) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000008c00)={&(0x7f0000008b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000008bc0)={&(0x7f0000008b80)={0x34, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="6a647b9c5450"}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x8800) ioctl$KVM_CAP_HYPERV_SYNIC(r9, 0x4068aea3, &(0x7f0000008c40)) 5.786737289s ago: executing program 4 (id=1380): socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0xc4a, &(0x7f0000000480)={0x0, 0x4eb8c, 0x200, 0x0, 0x820002f9}) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x7, @vbi={0x0, 0x400, 0x0, 0x4745504d, [], [0xfffffffe, 0x5]}}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x22, &(0x7f0000000000), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000040)=0x3, &(0x7f0000000180)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000a22081feffed30ebecff85000000220000008500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x36, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 5.690970298s ago: executing program 2 (id=1381): syz_open_procfs(0x0, &(0x7f0000000200)='timers\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x126) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000b00)=""/102400, 0x19000) mmap$xdp(&(0x7f0000c71000/0x4000)=nil, 0x4000, 0x2000003, 0x810, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x1) gettid() add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="0f8501dbdb0f74100f330f09660f3a0cb90000000e752020b9800000c00f326635004000000f300f01d7ba4100ed14", 0x34}], 0x0, 0x12, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00001cd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f00009bf000/0x1000)=nil, 0x1000, 0x2000007, 0x10, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x3e) sendmmsg$unix(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000480)=@file={0x1, './file1\x00'}, 0xffffffffffffff08, &(0x7f00000009c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002200010000000000000000000000006bbf444d32cbd646bb03cdaef016389b3980a4297c7aec3a9ff3cd9b5becf04cc48c4e281f9c2a8aec79578823b9744eaa05bda2ae343cfaa717e0da29f84fb5e35e2c27fc8acaab93e968d54223ed1d", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x10}}], 0x1, 0x0) 5.369512625s ago: executing program 2 (id=1382): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x240008c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="10007d8005"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x44}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000007000000080001006000000008000300", @ANYRES32=r11, @ANYBLOB="0c00010027abd0000000080000"], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r12, 0x65, 0x7, &(0x7f00000001c0)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r13}, 0x10, &(0x7f0000000380)={&(0x7f0000000280)=@canfd={{0x1, 0x1}, 0x19, 0x0, 0x0, 0x0, "e417960ed66be914af93783d56e1ea952def04fc302576e2a5c87d8654817422d5c6da4088a9a04bbf39614a388602c0922f598397c645ab1cb08b2695ad7642"}, 0x48}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 4.76479689s ago: executing program 1 (id=1384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0xba2, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f043}) ppoll(&(0x7f0000000300)=[{r3, 0x2007}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f3000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000c00), &(0x7f0000000340), 0xe9f, r2}, 0x38) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 4.653563121s ago: executing program 0 (id=1385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x24040105) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) fanotify_init(0xf00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x7, 0x4, 0x8, 0xfffffffd}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0x21, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='ocfs2\x00', 0x0, 0x0) 4.331794095s ago: executing program 2 (id=1386): preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{0x0}], 0x1, 0x8000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x1, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe0000010000000084001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00000008000400", @ANYRES32, @ANYBLOB='\f\x00\t'], 0xbc}}, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mount(&(0x7f0000000440)=@nullb, &(0x7f0000000300)='./cgroup\x00', &(0x7f00000001c0)='hfs\x00', 0x200480, 0x0) 4.153626024s ago: executing program 0 (id=1388): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa0100fe}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000012f5644a5acb7bfad3aa9df9b19a000000000000", @ANYRESDEC=r0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}, 0x500}], 0x1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x3, 0xfffbfffd, 0x3, 0x4f, "1c419208876b000000820b0000000000000d00", 0x6, 0x200}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x72) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)=0x4) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x80929000) 4.147529942s ago: executing program 4 (id=1389): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x418002, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, r0) close(r2) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, &(0x7f0000000100)={0x4, 0x7, 0x2}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x2, &(0x7f0000000180)={0x0, 0x24, 0x2, @tid=r4}, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x8, 0x9}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x140e, 0x200, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r6 = openat(r3, &(0x7f0000000380)='./file0\x00', 0x8001, 0x102) r7 = syz_open_dev$dmmidi(&(0x7f0000000780), 0x6, 0x4a6a40) r8 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000007c0), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000840)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000440)="f8c27bfa75835dc9f04765a3667094e09ac5834da504bdc3966089c5131fc723687bdae3268121d5867f966dbf66a9a26df049c56ea6cab3ca31fdbbf87bfe550aea9cf3c405925cd3017dcabc2f020f971a", 0x52}, {&(0x7f00000004c0)="8e9d3d08d7a1eee42c1a8903a11586df9281643dc78101b3be9f6f5ebcd8a626ea796cf762a23e0afde86e70001208b6b261e9a3b6fb483490944ff489dcf66aa7506e5d57a1deb8e5719477e18ecee8846dc94e8c4066b455c5f3ea820c83d3ecdb7025b37328adfd458c07d3db82757b63a2947ad37447e4ca1669e2b40c5e023a4ac921514cd4701b8426b41ce0521c741f7fb6f0ffc4885226942685b027b6781c04b1a81180fc9be609", 0xac}, {&(0x7f0000000580)="d21be3c6faca954b3ee32250a63cd2d2a066", 0x12}, {&(0x7f00000005c0)="aef1adbcaa2d088236acd13754b198f39375b8d122e7dddc512d531f61ca4a49db149523cd3a20e7262698bbcc5355ccfa9fdb366ef523fd2307e95d294a0f0166ceccc8465f87dd4665af698f", 0x4d}, {&(0x7f0000000640)="54eaf0ea07ec7981d616f5543b59c5182ea72cb6f0e1682910a6c31bb182ece1e6945463c40442ee285140dac16a93d7509f01518f293262ee77e5009918a6a2e38cc9726c1b9097a7d71c86ef908fb91afe581c1159c6005faa687b1b32c0761c81a6f022fd099385d994d9e971477ec46de074ceda12f3c3556a19bec832c27a60f955d3bd5043f0defed3ebcfaead4e799eb2dc528903d55703e306386eaca7a2c14471292ce31d93859024981373b5efe2f386a548b8", 0xb8}], 0x5, &(0x7f0000000800)=[@rights={{0x38, 0x1, 0x1, [r6, r7, r6, r3, r8, r2, r3, r5, r3, r2]}}], 0x38, 0x4}}], 0x1, 0x80c0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) chdir(&(0x7f00000008c0)='./file0\x00') r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r10, 0x2, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40884) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) futex(&(0x7f0000000a40)=0x2, 0x7, 0x0, &(0x7f0000000ac0)={r11, r12+60000000}, &(0x7f0000000b00)=0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000b40)={0x7f, 0xff, 0x5, 0xdd8d, 0x2, "c6df6a65a930f933cb5f64bf46c347faeb1ff7"}) clock_gettime(0x0, &(0x7f0000000b80)) close$binfmt(r6) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000bc0)={0x3, "a9c9299d2081d6e16910b66cbf4fa81c7e955ae66851b2ceaa659d7b5e319a3b", 0xffffffffffffffff}) r14 = memfd_create(&(0x7f0000000c00)='\x00', 0x4) r15 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x2, 0x4800c0) ppoll(&(0x7f0000000c80)=[{r6, 0x8000}, {r6, 0x8}, {r13, 0x4089}, {r9, 0x4389}, {r2, 0x400}, {r14, 0x10}, {r3, 0x1000}, {r15, 0x7000}, {r3, 0x400}], 0x9, &(0x7f0000000d00)={0x0, 0x3938700}, &(0x7f0000000d40)={[0x10000]}, 0x8) 3.744631314s ago: executing program 4 (id=1390): connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.710319161s ago: executing program 1 (id=1391): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) listen(r3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r8, 0x40044104, &(0x7f0000000000)=0x9) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x5, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80d00, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {0x8}}, './bus\x00'}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r11}) listen(r6, 0x3) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r12, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x84, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x10}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x820}, 0x20) 3.538717621s ago: executing program 1 (id=1392): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0x15}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x92, &(0x7f0000000000)=@string={0x92, 0x3, "931a24fbe1c67382026c93c945e8c9381c69b395cf48954e497bf942d1487d55483ab52b7c713a5bf17600133f136eb3f3ce8db73f34a9970787d2732756997cf69a4804cf54f7a618e382c9fb7ee5f436fe1e2236f33b38bd0116663a13d03f1af12fe4da8b446189f795ec677c41158c2a15b245fa1c90e80d5843c84bf47f9f9a48cff7389a8896960e181a1ae120"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42c}}]}) 3.497827341s ago: executing program 0 (id=1393): syz_open_procfs(0x0, &(0x7f0000000500)='net/ip6_flowlabel\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x252000, 0xe25af250471d8c2d) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0xc, @sdr={0x47504a4d, 0x51f}}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x9ee8, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x110, 0x4) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2", 0xf}, {0x0}], 0x2}}], 0x1, 0x24044015) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x102, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) gettid() r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, 0x0, 0x61, 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x3200890, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9ae7278278d4888f) socket$inet_icmp_raw(0x2, 0x3, 0x1) accept$inet(r5, &(0x7f00000004c0)={0x2, 0x0, @multicast1}, &(0x7f0000000480)=0x10) move_mount(r5, 0x0, r4, 0x0, 0x46) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r3, 0x0, r3}, &(0x7f0000000280)=""/170, 0xaa, &(0x7f00000003c0)={&(0x7f0000000240)={'sha1-ssse3\x00'}, &(0x7f0000000340)="af189be203b5ccbab322421648414a5ed0117e7fb5bd4618e808e21347590465be5a6f1916fde7291bf4580cd9113db8135c4a89fe4520b4d547794d60885d698432", 0x42}) 3.25590182s ago: executing program 4 (id=1394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) 2.707526305s ago: executing program 2 (id=1395): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x5f, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket(0x29, 0x80000, 0x7ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000024d000/0x1000)=nil, 0x1000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) sendmsg$netlink(r0, 0x0, 0x8014) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.943134231s ago: executing program 3 (id=1396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)={0x1bc, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x6, 0x0, 0x0, @u64=0x3bbc}]}, @nested={0x194, 0x2, 0x0, 0x1, [@nested={0x190, 0x72, 0x0, 0x1, [@nested={0x18c, 0xda, 0x0, 0x1, [@typed={0xc, 0x1b, 0x0, 0x0, @u64=0x2}, @typed={0xc, 0x93, 0x0, 0x0, @u64=0x2}, @nested={0x16e, 0x89, 0x0, 0x1, [@generic, @generic="62771c5a4ef17488dc8235e5ee972d80461521ef7bbe176d3cac776732eef8a74323466c85e24d0ac7efa37bc77f02e00073cbc405b4b8379ddac5a4bdffd36a2c9788bb18f9991b4184242b70f0f326513cfe86e7a9cbf0992b4ff236f2e9eecab20aa3ec22a0deb0aa5eb7238a17b7fa0ea5cf8049622edca869f892ab3eca67e78e8a3101e748a5199f6e5b4c720420880429996917c0aeb6e8f15982cd84c7093e366bd642801777b9824442c0b23a60f308e882c04f8bee6b5c3e5204eb7aa17417a9e22da23cf643611e7d5c3f0bce", @nested={0x4, 0xde}, @typed={0x88, 0xa6, 0x0, 0x0, @binary="9b3c29ad92f0b22abcbffe33d5926b549937d81086e364abee27f21b854ba1e2459a4b91da56b62b550ee0dd654bb86204e17dd43b552a1f83607233ffbe938166a38221858a9a5d6c40ad00543736ed091eed1dad835b3420f5935128011134f447bcb66502846ef5d9635eb8d3705a2383fcfb1f6d0cfdef324e6070730e095a16eb40"}, @nested={0xc, 0x145, 0x0, 0x1, [@nested={0x8, 0x6f, 0x0, 0x1, [@nested={0x4, 0x87}]}]}]}]}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1.780615056s ago: executing program 3 (id=1397): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffcae, 0x0}, 0x8004) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x2100) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0xbcad846b55862847, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18) r5 = inotify_init() (async) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) write$P9_RVERSION(r6, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r5], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) pipe(&(0x7f00000001c0)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r9, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) (async) syz_emit_vhci(0x0, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x60ac2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, 0x0) 1.557620629s ago: executing program 0 (id=1398): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @multicast2}, &(0x7f00000001c0)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @multicast2}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', r2, 0x2f, 0x0, 0xb7, 0xf, 0x21, @local, @empty, 0x80, 0x10, 0xffff, 0x80}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', r2, 0x2f, 0x0, 0xb7, 0xf, 0x21, @local, @empty, 0x80, 0x10, 0xffff, 0x80}}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x2, 0x1094001}}, 0x50) (async) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x2, 0x1094001}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x15}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$FUSE(r8, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) (async) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x6, &(0x7f0000000400)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000821000/0x2000)=nil, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fed000/0x1000)=nil, &(0x7f0000d49000/0x4000)=nil], 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0258c2e4671e00180000000000000000", @ANYRES32=r11, @ANYBLOB="01980000000000002c0012800b000100697036746e6c00001c0002800400130014000300fc0200"/52], 0x4c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0258c2e4671e00180000000000000000", @ANYRES32=r11, @ANYBLOB="01980000000000002c0012800b000100697036746e6c00001c0002800400130014000300fc0200"/52], 0x4c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) 1.547567883s ago: executing program 3 (id=1399): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) fadvise64(r4, 0x18, 0x101, 0x2) (async) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3fb, 0x400, 0x70bd28, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4401}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x11) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585", @ANYRESDEC, @ANYRES8], 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x12, 0x0, &(0x7f00000001c0)) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) (async) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet_int(r9, 0x0, 0x32, 0x0, &(0x7f00000000c0)) (async, rerun: 32) write$P9_RGETATTR(r7, &(0x7f0000000500)={0xa0, 0x19, 0x2, {0x2881, {0x1, 0x4, 0x5}, 0x4, 0x0, 0x0, 0x70d, 0x9800000000000000, 0xff, 0x3, 0x3, 0x0, 0x185, 0x40, 0x400, 0xb, 0x100, 0xf, 0x9, 0x401, 0x9}}, 0xa0) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) (async) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES8], 0x0) (async) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0xaab, 0x0, 0x7, 0x8}, {0x12, 0x1, 0x0, 0xffff, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PBURST={0x8, 0x7, 0x71d}]}}]}, 0x68}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r6, 0x1, 0x70bd2b, 0x6}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.295004032s ago: executing program 0 (id=1400): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000380)={r0, r2, 0x9, 0xb3, &(0x7f00000002c0)="50aea80fee9337d278bc1e005b1cb1777b15c2e7631cf5722647e394711d206a3a0dac79d36ee6b67a5418c858cf28625221aa6f12daac264c09771e518cafa0f50fa38d8837360dccbb63763b74ecbc2ecd75d3d800174fe66e25cfa0838c95205b9015bc099a69de3cffe3bc589d0b69f710ab2943808890f824a8a843a58f9954107f33e8631de1fd312cbfb03e1a5034c7e25eaf602b9589b54ca2732af0946c8aac457c55ccfd43ef994ab8b3e536ebd0", 0x75, 0x0, 0x6, 0x4, 0x0, 0x2, 0x6, 'syz1\x00'}) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = syz_open_pts(0xffffffffffffffff, 0x683c0337b09ae77c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4040850}, 0x24000000) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000140)={0x1, 0x6, 0x5, 0x4, 0x9, 0x100}) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 1.22551427s ago: executing program 3 (id=1401): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd8) syz_clone3(&(0x7f0000000700)={0x200002000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), {0x39}, &(0x7f0000000280)=""/36, 0xfffffffffffffe6a, &(0x7f0000000300)=""/82, &(0x7f0000000380)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) r4 = socket(0xa, 0x3, 0x3a) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="a00000000001010400000a00000a3c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c000280050001000000000008000740000000000c0016400000000000010000000000000000"], 0xa0}}, 0x0) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f"]) (async) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000800)={0xc, {{0xa, 0x0, 0x3, @local}}, {{0xa, 0xfffe, 0x3, @rand_addr=' \x01\x00', 0x8}}}, 0x104) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8040) memfd_secret(0x0) ppoll(0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) 1.048519685s ago: executing program 3 (id=1402): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000034700)=""/102400, 0x19000) socket$inet6(0xa, 0x3, 0xff) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010101, 0x1}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x1370, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x12a0, 0xffffffff, 0xffffffff, 0x12a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x0, 0xfd, 0x0, 0x13}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x87, 0x7, 0x1, 0x5, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @empty, @local, [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], [0xff000000, 0xff, 0xff000000, 0xff000000], [0xffffffff, 0xffffff00, 0xff000000], 0x700, 0x2440}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1100, 0x1140, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x2, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x54, 0xffff42f2, 0x5, 0x5ee, 0x8, 0x1c, 0x8001, 0x7]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x13d0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fc, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0x8, 0x4f, 0x81, 0x7, 0xc0, 0x1, 0xff, 0x6, 0xc, 0x4, 0x9}, {0x8, 0xaff2, 0x0, 0x8, 0x4, 0x1, 0x8, 0x3, 0x0, 0x53, 0x1, 0x6, 0x10005}, {0x0, 0x7, 0x10, 0x10, 0x25, 0x2, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x3, 0x40000000000002}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10004, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0xfff, 0x10, 0x0, 0x0, 0x1, 0x8, 0x800000001], 0x0, 0x2011c0}) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) close(r1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 153.562585ms ago: executing program 1 (id=1403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f000084e000/0x4000)=nil, 0x4000, 0x2000006, 0x23010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(0x0, 0x13) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x8, 0x9, 0xffff5551, 0x2, 0x7, 0x24000}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffffa, 0x2, 0xfff, 0x18, 0x966c}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x8000000000000000}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) tkill(0x0, 0x12) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) 104.665259ms ago: executing program 4 (id=1404): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x1, 0xa, 0x14000000, 0x0, 0xfffffffd, 0x2, 0xffd, 0x5, 0x3, 0x723, 0x400, 0x2, 0x3, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x4, 0x80000, 0xf58, 0x9]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x0, 0x80000000}) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd, 0x101000) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000080)={0x4, 0x6f, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980919, 0x7, '\x00', @ptr=0x2}}) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, 0x0, 0x4040810) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x7, 0x0, {0x0}, {}, 0x2, 0xf}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r10 = syz_clone(0x801000, &(0x7f0000000400)="dd00538cdbed5c957d87d831b7eacc0389e4bd3dc18ef7a011678ca5e72693050764f91462ace434c2b511bff0df187fd91a874f4a31bfdc7c373246ee9ebbc8addcf65752102046119582", 0x4b, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="cadaa26d942550ba047edea429ec4d79c34632854e9d8fb8f2465a625c21e46fddab2ab26abe1517843d7aca9a2c72ac5f827f670742c7a6ca302fb604c4c76ed42dffb477c484c2788d5dce155b1d84195f24fbd31e6d00140d4baf7e4e36e340dc6329b18b25380cbe00bfa1dbbdc9ddb652936e72f9533211b93e58eae41d163960f45161266d9c15bba03f503a99f01c26bb70ffc2e79fa1d30591c1c37ca7d4d1903bfbd930855ff57e21f61a3087f4f4bb3c4c2a87ef8b06bae26f3e") r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000640)={0x2001400, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x20}, &(0x7f0000000200)=""/76, 0x4c, &(0x7f0000000280)=""/160, &(0x7f00000005c0)=[r8, r9, r10, r11], 0x4, {r12}}, 0x58) 0s ago: executing program 3 (id=1405): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @rand_addr=0x64010100}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0xffff0000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000004e0001000000f4f9002304000a1bf51108000100020100000800028001000000", 0x24) kernel console output (not intermixed with test programs): 1: USB disconnect, device number 39 [ 334.616111][ T9927] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 334.727130][ T9929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.129312][ T30] audit: type=1400 audit(1760440761.574:947): avc: denied { watch_reads } for pid=9934 comm="syz.1.997" path="/195" dev="tmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 335.157829][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 335.220463][ T5940] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 335.430444][ T5940] usb 1-1: Invalid ep0 maxpacket: 64 [ 335.534461][ T9940] Cannot find add_set index 0 as target [ 335.670491][ T5940] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 335.783606][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 336.105338][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 336.300485][ T5940] usb usb1-port1: attempt power cycle [ 336.461494][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 336.526603][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 336.532898][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 336.545292][ T9] usb 5-1: USB disconnect, device number 43 [ 336.640299][ T5940] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 336.760137][ T5940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 336.805339][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 336.847777][ T5940] usb 1-1: not running at top speed; connect to a high speed hub [ 337.218485][ T30] audit: type=1400 audit(1760440763.574:948): avc: denied { connect } for pid=9968 comm="syz.3.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 337.243258][ T5940] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.275761][ T5940] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.289650][ T5940] usb 1-1: string descriptor 0 read error: -22 [ 337.298275][ T5940] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.319444][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.348232][ T5940] usb 1-1: 0:2 : does not exist [ 337.532953][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 337.807730][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 337.980303][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 337.994453][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 338.007643][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.019547][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.031653][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 338.043628][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 338.054058][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 338.064273][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.080861][ T9] usb 3-1: config 0 descriptor?? [ 338.090076][ T9978] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 338.160542][ T5868] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 338.310603][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 338.413096][ T5868] usb 4-1: unable to get BOS descriptor or descriptor too short [ 338.432335][ T5868] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 338.446387][ T5868] usb 4-1: can't read configurations, error -71 [ 338.619959][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.620522][ C1] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 338.635054][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.642495][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.649806][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.656733][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.663737][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.672216][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.679099][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.689188][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.696099][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.703007][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.710002][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.716889][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.724857][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.733254][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.741712][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.748555][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.755587][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.762639][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.769489][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.777088][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.783986][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.790956][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.798083][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.805110][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.812395][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.821034][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.832737][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.839607][ T5826] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 338.852933][ T5827] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 338.865428][ T5893] usb 3-1: USB disconnect, device number 43 [ 338.879887][ T5940] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 338.893516][ T5940] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 338.936887][ T5940] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 338.948413][ T5940] usb 1-1: USB disconnect, device number 42 [ 339.011961][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.127893][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 339.323775][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 340.152889][T10010] bridge2: entered promiscuous mode [ 340.291673][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 342.082379][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 343.531384][T10056] sctp: [Deprecated]: syz.4.1029 (pid 10056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.531384][T10056] Use struct sctp_sack_info instead [ 343.845639][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 343.885829][ T30] audit: type=1400 audit(1760440770.334:949): avc: denied { setopt } for pid=10063 comm="syz.3.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 343.969074][ T30] audit: type=1400 audit(1760440770.364:950): avc: denied { read } for pid=10063 comm="syz.3.1032" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 344.079489][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 344.185782][ T30] audit: type=1326 audit(1760440770.634:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1035" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f9218eec9 code=0x0 [ 344.320770][ T5827] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 344.320830][ T5827] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 344.400310][ T5893] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 344.630291][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 344.637145][ T5893] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 344.645635][ T5893] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 344.654310][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 344.663345][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 344.673049][ T5893] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 344.682942][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 344.696266][ T5893] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 344.716035][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.735777][ T5893] usb 2-1: config 0 descriptor?? [ 344.953428][ T5893] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 344.985410][ T5893] usb 2-1: USB disconnect, device number 51 [ 344.995426][ T5893] usblp0: removed [ 345.062659][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 345.194607][T10091] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1040'. [ 345.404209][ T6328] udevd[6328]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 345.479621][T10103] mkiss: ax0: crc mode is auto. [ 345.508175][T10103] tipc: Can't bind to reserved service type 1 [ 345.520527][ T5893] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 345.520630][ T5940] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 345.590494][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 345.680284][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 345.691393][ T5893] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 345.692274][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.710717][ T5893] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 345.723383][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 345.723678][ T5940] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 345.743902][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.752257][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 345.762217][ T5893] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 345.762946][ T5940] usb 1-1: config 0 descriptor?? [ 345.772244][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 345.777152][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 345.790376][ T5893] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 345.805384][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.817437][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.851355][ T5893] usb 2-1: config 0 descriptor?? [ 345.857508][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.872991][ T9] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 345.886662][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.897234][ T9] usb 5-1: config 0 descriptor?? [ 346.069985][ T5893] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 346.106426][ T5893] usb 2-1: USB disconnect, device number 52 [ 346.125739][ T5893] usblp0: removed [ 346.304875][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 346.320906][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 346.332120][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 346.355759][ T9] usb 5-1: USB disconnect, device number 44 [ 346.444466][T10095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.493662][T10095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.966873][T10130] netlink: 'syz.4.1052': attribute type 2 has an invalid length. [ 348.329619][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 348.478379][ T5940] usbhid 1-1:0.0: can't add hid device: -71 [ 348.487529][ T5940] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 348.540416][ T5940] usb 1-1: USB disconnect, device number 43 [ 348.570291][ T48] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 348.730804][ T5875] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 348.776464][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 348.850291][ T5868] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 348.852506][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 348.960325][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 348.979257][ T5875] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 348.995797][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.014435][ T5868] usb 3-1: device descriptor read/64, error -71 [ 349.033590][ T5875] usb 5-1: Product: syz [ 349.037824][ T5875] usb 5-1: Manufacturer: syz [ 349.046201][ T5875] usb 5-1: SerialNumber: syz [ 349.058922][ T5875] usb 5-1: config 0 descriptor?? [ 349.350319][ T5868] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 349.480721][ T5868] usb 3-1: device descriptor read/64, error -71 [ 349.538359][T10178] netlink: 'syz.0.1065': attribute type 2 has an invalid length. [ 349.590627][ T5868] usb usb3-port1: attempt power cycle [ 349.703759][ T5875] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 349.723036][ T5875] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 349.753601][ T5875] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 349.930448][ T5868] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 349.950838][ T5868] usb 3-1: device descriptor read/8, error -71 [ 349.982513][ T5875] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 350.110795][ T5875] usb 5-1: USB disconnect, device number 45 [ 350.232658][ T5868] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 350.289947][ T5868] usb 3-1: device descriptor read/8, error -71 [ 350.442160][ T5868] usb usb3-port1: unable to enumerate USB device [ 350.590346][ T5875] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 350.768079][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.924541][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.965937][ T5875] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 350.984621][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.994664][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 351.000990][ T5875] usb 1-1: config 0 descriptor?? [ 351.085449][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 351.330546][ T48] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 351.431812][ T5875] konepure 0003:1E7D:2DBE.0010: unknown main item tag 0x1 [ 351.440060][ T5875] konepure 0003:1E7D:2DBE.0010: unknown main item tag 0x2 [ 351.449743][ T5875] konepure 0003:1E7D:2DBE.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.0-1/input0 [ 351.514594][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 351.541619][ T48] usb 4-1: config 0 has an invalid interface number: 178 but max is 2 [ 351.549845][ T48] usb 4-1: config 0 has an invalid interface number: 188 but max is 2 [ 351.572126][ T48] usb 4-1: config 0 has an invalid interface number: 84 but max is 2 [ 351.581376][ T48] usb 4-1: config 0 has no interface number 0 [ 351.588159][ T48] usb 4-1: config 0 has no interface number 1 [ 351.622414][ T48] usb 4-1: config 0 has no interface number 2 [ 351.628558][ T48] usb 4-1: config 0 interface 178 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 351.640804][ T5868] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 351.648979][ T48] usb 4-1: config 0 interface 178 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 351.660091][ T48] usb 4-1: config 0 interface 178 altsetting 6 endpoint 0xC has invalid maxpacket 584, setting to 64 [ 351.681130][ T48] usb 4-1: config 0 interface 178 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 351.707242][ T48] usb 4-1: config 0 interface 178 altsetting 6 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 351.723821][T10215] syz_tun: entered allmulticast mode [ 351.762939][ T48] usb 4-1: config 0 interface 178 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 351.795981][ T48] usb 4-1: config 0 interface 178 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 351.808637][ T48] usb 4-1: config 0 interface 178 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 351.828068][ T48] usb 4-1: config 0 interface 178 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 351.841582][ T48] usb 4-1: config 0 interface 178 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 351.859861][ T48] usb 4-1: config 0 interface 188 altsetting 0 has an endpoint descriptor with address 0x74, changing to 0x4 [ 351.872124][ T48] usb 4-1: config 0 interface 188 altsetting 0 endpoint 0x4 has invalid maxpacket 4254, setting to 1024 [ 351.933331][ T48] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 351.962978][ T48] usb 4-1: config 0 interface 188 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 352.011570][ T48] usb 4-1: config 0 interface 188 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 352.011590][ T48] usb 4-1: config 0 interface 188 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 352.011606][ T48] usb 4-1: config 0 interface 188 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 352.011619][ T48] usb 4-1: config 0 interface 188 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 352.011644][ T48] usb 4-1: config 0 interface 84 altsetting 181 has a duplicate endpoint with address 0x6, skipping [ 352.011656][ T48] usb 4-1: config 0 interface 178 has no altsetting 0 [ 352.011665][ T48] usb 4-1: config 0 interface 84 has no altsetting 0 [ 352.013379][ T48] usb 4-1: New USB device found, idVendor=1e2d, idProduct=00b3, bcdDevice=55.8f [ 352.013395][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.013406][ T48] usb 4-1: Product: syz [ 352.013414][ T48] usb 4-1: Manufacturer: syz [ 352.013422][ T48] usb 4-1: SerialNumber: syz [ 352.014800][ T48] usb 4-1: config 0 descriptor?? [ 352.031566][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.031597][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.031755][ T5868] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 352.032532][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.043224][ T5868] usb 5-1: config 0 descriptor?? [ 352.049274][ T48] option 4-1:0.178: GSM modem (1-port) converter detected [ 352.476877][ T5868] konepure 0003:1E7D:2DBE.0011: item fetching failed at offset 5/7 [ 352.496252][ T5868] konepure 0003:1E7D:2DBE.0011: parse failed [ 352.510312][ T5868] konepure 0003:1E7D:2DBE.0011: probe with driver konepure failed with error -22 [ 352.582637][ T48] option 4-1:0.84: GSM modem (1-port) converter detected [ 352.605017][ T48] usb 4-1: USB disconnect, device number 59 [ 352.630696][ T48] option 4-1:0.178: device disconnected [ 352.798174][ T48] option 4-1:0.84: device disconnected [ 353.037173][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 353.135401][ T5893] usb 5-1: USB disconnect, device number 46 [ 353.479203][ T5868] usb 1-1: USB disconnect, device number 44 [ 354.193027][T10234] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 354.253208][T10234] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 354.297211][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 354.385314][T10264] netlink: 'syz.0.1088': attribute type 2 has an invalid length. [ 354.418616][T10265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.621214][T10266] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 354.721073][T10265] netlink: 'syz.3.1086': attribute type 10 has an invalid length. [ 354.749597][T10265] netlink: 'syz.3.1086': attribute type 10 has an invalid length. [ 354.757544][T10265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1086'. [ 354.938450][ T30] audit: type=1400 audit(1760440781.384:952): avc: denied { mount } for pid=10273 comm="syz.0.1090" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 354.974655][ T30] audit: type=1400 audit(1760440781.414:953): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 355.075448][T10288] netlink: 'syz.0.1094': attribute type 37 has an invalid length. [ 355.087643][ T30] audit: type=1400 audit(1760440781.534:954): avc: denied { append } for pid=10280 comm="syz.4.1093" name="sg0" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 355.179859][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 355.444167][ T30] audit: type=1400 audit(1760440781.714:955): avc: denied { read } for pid=10293 comm="syz.3.1096" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 355.471435][T10282] tmpfs: Bad value for 'mpol' [ 355.810740][ T30] audit: type=1400 audit(1760440782.224:956): avc: denied { accept } for pid=10293 comm="syz.3.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 356.384150][T10296] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 356.406753][T10295] overlayfs: failed lookup in lower (newroot/217, name='bus', err=-40): overlapping layers [ 356.429258][T10296] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 356.443083][T10296] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 356.451150][T10296] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 356.458954][T10296] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.467612][T10296] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.480614][T10296] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 356.757931][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 356.771060][ T30] audit: type=1400 audit(1760440783.214:957): avc: denied { mount } for pid=10300 comm="syz.1.1098" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 356.873368][T10316] netlink: ct family unspecified [ 356.889711][T10316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.929082][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 357.032819][ T5893] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 357.180391][ T5893] usb 3-1: device descriptor read/64, error -71 [ 357.394320][T10333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.430274][ T5893] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 357.570345][ T5893] usb 3-1: device descriptor read/64, error -71 [ 357.698704][ T5893] usb usb3-port1: attempt power cycle [ 357.746277][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 357.850499][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 357.953302][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 357.970448][ T48] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 357.983857][T10343] FAULT_INJECTION: forcing a failure. [ 357.983857][T10343] name failslab, interval 1, probability 0, space 0, times 0 [ 357.997888][T10343] CPU: 1 UID: 0 PID: 10343 Comm: syz.3.1109 Not tainted syzkaller #0 PREEMPT(full) [ 357.997912][T10343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.997922][T10343] Call Trace: [ 357.997928][T10343] [ 357.997934][T10343] dump_stack_lvl+0x16c/0x1f0 [ 357.997960][T10343] should_fail_ex+0x512/0x640 [ 357.997979][T10343] ? fs_reclaim_acquire+0xae/0x150 [ 357.998006][T10343] should_failslab+0xc2/0x120 [ 357.998030][T10343] __kmalloc_noprof+0xdd/0x880 [ 357.998048][T10343] ? tomoyo_encode2+0x100/0x3e0 [ 357.998076][T10343] ? tomoyo_encode2+0x100/0x3e0 [ 357.998098][T10343] tomoyo_encode2+0x100/0x3e0 [ 357.998125][T10343] tomoyo_encode+0x29/0x50 [ 357.998147][T10343] tomoyo_realpath_from_path+0x18f/0x6e0 [ 357.998176][T10343] tomoyo_path_number_perm+0x245/0x580 [ 357.998195][T10343] ? tomoyo_path_number_perm+0x237/0x580 [ 357.998218][T10343] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 357.998240][T10343] ? find_held_lock+0x2b/0x80 [ 357.998279][T10343] ? find_held_lock+0x2b/0x80 [ 357.998294][T10343] ? hook_file_ioctl_common+0x145/0x410 [ 357.998316][T10343] ? __fget_files+0x20e/0x3c0 [ 357.998344][T10343] security_file_ioctl+0x9b/0x240 [ 357.998369][T10343] __x64_sys_ioctl+0xb7/0x210 [ 357.998389][T10343] do_syscall_64+0xcd/0xfa0 [ 357.998411][T10343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.998428][T10343] RIP: 0033:0x7f7f9218eec9 [ 357.998444][T10343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.998461][T10343] RSP: 002b:00007f7f903f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.998478][T10343] RAX: ffffffffffffffda RBX: 00007f7f923e5fa0 RCX: 00007f7f9218eec9 [ 357.998489][T10343] RDX: 0000200000000380 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 357.998500][T10343] RBP: 00007f7f903f6090 R08: 0000000000000000 R09: 0000000000000000 [ 357.998510][T10343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.998520][T10343] R13: 00007f7f923e6038 R14: 00007f7f923e5fa0 R15: 00007fffcf26dc28 [ 357.998546][T10343] [ 357.998562][T10343] ERROR: Out of memory at tomoyo_realpath_from_path. [ 358.217276][ T5893] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 358.248524][ T5893] usb 3-1: device descriptor read/8, error -71 [ 358.289207][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 358.321976][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.341224][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.369115][ T48] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 358.372061][ T30] audit: type=1326 audit(1760440784.824:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac938eec9 code=0x7ffc0000 [ 358.378575][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.411919][ T30] audit: type=1326 audit(1760440784.854:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac938eec9 code=0x7ffc0000 [ 358.441055][ T48] usb 2-1: config 0 descriptor?? [ 358.461219][ T30] audit: type=1326 audit(1760440784.864:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcac938eec9 code=0x7ffc0000 [ 358.486012][ T30] audit: type=1326 audit(1760440784.864:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10356 comm="syz.4.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac938eec9 code=0x7ffc0000 [ 358.509806][ T5893] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 358.518200][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 358.518216][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 358.524679][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 358.571020][ T5893] usb 3-1: device descriptor read/8, error -71 [ 358.610276][ T5875] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 358.724558][ T5893] usb usb3-port1: unable to enumerate USB device [ 359.088851][ T5875] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 359.140411][ T5875] usb 4-1: config 0 has no interface number 0 [ 359.161527][ T5875] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=85.a7 [ 359.236057][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.246397][ T5875] usb 4-1: Product: syz [ 359.251401][ T5875] usb 4-1: Manufacturer: syz [ 359.256833][ T5875] usb 4-1: SerialNumber: syz [ 359.282921][ T5875] usb 4-1: config 0 descriptor?? [ 359.372440][ T5875] usb 4-1: selecting invalid altsetting 2 [ 359.629917][T10368] netdevsim netdevsim0: Direct firmware load for . [ 359.629917][T10368] failed with error -2 [ 359.646578][T10368] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 359.646578][T10368] [ 359.672632][ T5875] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 359.733894][ T5875] usb 4-1: USB disconnect, device number 60 [ 359.925188][T10374] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 359.941634][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 359.948454][T10374] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 360.206650][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 360.592825][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 360.592832][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 360.622488][T10382] futex_wake_op: syz.2.1121 tries to shift op by -1; fix this program [ 360.795000][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 360.874645][T10384] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1122'. [ 360.890405][ T5875] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 361.068583][ T48] usbhid 2-1:0.0: can't add hid device: -71 [ 361.095425][ T48] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 361.166172][ T5875] usb 3-1: device descriptor read/64, error -71 [ 361.182636][T10390] FAULT_INJECTION: forcing a failure. [ 361.182636][T10390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.196642][ T48] usb 2-1: USB disconnect, device number 54 [ 361.212111][T10390] CPU: 1 UID: 0 PID: 10390 Comm: syz.3.1124 Not tainted syzkaller #0 PREEMPT(full) [ 361.212135][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.212146][T10390] Call Trace: [ 361.212152][T10390] [ 361.212160][T10390] dump_stack_lvl+0x16c/0x1f0 [ 361.212185][T10390] should_fail_ex+0x512/0x640 [ 361.212209][T10390] _copy_from_user+0x2e/0xd0 [ 361.212232][T10390] drm_ioctl+0x4fb/0xc30 [ 361.212252][T10390] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 361.212272][T10390] ? __pfx_drm_ioctl+0x10/0x10 [ 361.212299][T10390] ? selinux_file_ioctl+0x180/0x270 [ 361.212323][T10390] ? selinux_file_ioctl+0xb4/0x270 [ 361.212347][T10390] ? __pfx_drm_ioctl+0x10/0x10 [ 361.212365][T10390] __x64_sys_ioctl+0x18e/0x210 [ 361.212386][T10390] do_syscall_64+0xcd/0xfa0 [ 361.212407][T10390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.212425][T10390] RIP: 0033:0x7f7f9218eec9 [ 361.212438][T10390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.212455][T10390] RSP: 002b:00007f7f903f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.212472][T10390] RAX: ffffffffffffffda RBX: 00007f7f923e5fa0 RCX: 00007f7f9218eec9 [ 361.212483][T10390] RDX: 0000200000000380 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 361.212493][T10390] RBP: 00007f7f903f6090 R08: 0000000000000000 R09: 0000000000000000 [ 361.212504][T10390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.212514][T10390] R13: 00007f7f923e6038 R14: 00007f7f923e5fa0 R15: 00007fffcf26dc28 [ 361.212539][T10390] [ 361.387014][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 361.391728][T10393] netlink: 'syz.4.1125': attribute type 9 has an invalid length. [ 362.196044][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 362.207508][ T5875] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 362.311854][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 362.328738][T10413] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1128'. [ 362.342925][T10413] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1128'. [ 362.534538][ T5875] usb 3-1: device descriptor read/64, error -71 [ 362.576397][T10420] netlink: 'syz.0.1132': attribute type 6 has an invalid length. [ 362.587087][T10420] netlink: 'syz.0.1132': attribute type 6 has an invalid length. [ 362.688956][ T48] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 362.698854][ T5875] usb usb3-port1: attempt power cycle [ 362.860706][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 362.875548][ T48] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 363.040480][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.056270][ T48] usb 4-1: config 0 descriptor?? [ 363.069731][ T48] gspca_main: sunplus-2.14.0 probing 041e:400b [ 363.092660][ T5875] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 363.182876][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 363.182891][ T30] audit: type=1400 audit(1760440789.634:995): avc: denied { setopt } for pid=10425 comm="syz.0.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.374318][ T5875] usb 3-1: device not accepting address 54, error -71 [ 363.959864][ T48] gspca_sunplus: reg_w_riv err -110 [ 364.278063][ T48] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 364.344700][T10443] overlayfs: failed to resolve 'uuid=off': -2 [ 364.350566][ T30] audit: type=1400 audit(1760440790.794:996): avc: denied { mount } for pid=10442 comm="syz.4.1141" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 364.372641][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.696529][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 364.736129][ T30] audit: type=1400 audit(1760440790.794:997): avc: denied { mounton } for pid=10442 comm="syz.4.1141" path="/220/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 364.767343][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1139'. [ 364.883278][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.932201][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.859704][T10476] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 365.959909][T10481] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1144'. [ 366.103976][T10483] @0: renamed from bond_slave_1 (while UP) [ 366.115264][ T30] audit: type=1400 audit(1760440792.554:998): avc: denied { accept } for pid=10474 comm="syz.0.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 366.212159][T10487] netlink: 'syz.2.1145': attribute type 2 has an invalid length. [ 366.553318][ T30] audit: type=1400 audit(1760440793.004:999): avc: denied { setopt } for pid=10488 comm="syz.3.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 366.566582][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 366.575689][ T5875] usb 4-1: USB disconnect, device number 61 [ 366.640418][ T30] audit: type=1400 audit(1760440793.004:1000): avc: denied { ioctl } for pid=10488 comm="syz.3.1146" path="socket:[29362]" dev="sockfs" ino=29362 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 367.195381][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 367.207926][ T30] audit: type=1400 audit(1760440793.654:1001): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 367.610828][ T30] audit: type=1400 audit(1760440793.774:1002): avc: denied { execute_no_trans } for pid=10498 comm="syz.2.1148" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=30407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 367.658180][T10511] FAULT_INJECTION: forcing a failure. [ 367.658180][T10511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.690332][T10511] CPU: 0 UID: 0 PID: 10511 Comm: syz.4.1151 Not tainted syzkaller #0 PREEMPT(full) [ 367.690354][T10511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.690361][T10511] Call Trace: [ 367.690364][T10511] [ 367.690369][T10511] dump_stack_lvl+0x16c/0x1f0 [ 367.690385][T10511] should_fail_ex+0x512/0x640 [ 367.690401][T10511] _copy_from_user+0x2e/0xd0 [ 367.690415][T10511] memdup_user+0x6b/0xe0 [ 367.690429][T10511] drm_mode_create_lease_ioctl+0x420/0x1fb0 [ 367.690443][T10511] ? avc_has_extended_perms+0x47c/0x1090 [ 367.690456][T10511] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 367.690470][T10511] ? kasan_quarantine_put+0x10a/0x240 [ 367.690491][T10511] ? drm_is_current_master+0x2c/0x40 [ 367.690506][T10511] ? do_raw_spin_unlock+0x172/0x230 [ 367.690524][T10511] drm_ioctl_kernel+0x1f4/0x3e0 [ 367.690534][T10511] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 367.690546][T10511] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 367.690560][T10511] drm_ioctl+0x5c9/0xc30 [ 367.690572][T10511] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 367.690584][T10511] ? __pfx_drm_ioctl+0x10/0x10 [ 367.690600][T10511] ? selinux_file_ioctl+0x180/0x270 [ 367.690615][T10511] ? selinux_file_ioctl+0xb4/0x270 [ 367.690630][T10511] ? __pfx_drm_ioctl+0x10/0x10 [ 367.690640][T10511] __x64_sys_ioctl+0x18e/0x210 [ 367.690654][T10511] do_syscall_64+0xcd/0xfa0 [ 367.690672][T10511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.690684][T10511] RIP: 0033:0x7fcac938eec9 [ 367.690693][T10511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.690704][T10511] RSP: 002b:00007fcaca21b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.690714][T10511] RAX: ffffffffffffffda RBX: 00007fcac95e5fa0 RCX: 00007fcac938eec9 [ 367.690721][T10511] RDX: 0000200000000380 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 367.690728][T10511] RBP: 00007fcaca21b090 R08: 0000000000000000 R09: 0000000000000000 [ 367.690734][T10511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.690740][T10511] R13: 00007fcac95e6038 R14: 00007fcac95e5fa0 R15: 00007ffcc0b8df48 [ 367.690754][T10511] [ 367.914397][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.292269][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 369.413245][T10539] Option 'Ӿ,0A' to dns_resolver key: bad/missing value [ 369.446123][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 369.653847][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 369.891699][T10551] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 369.898751][T10551] macsec1: entered promiscuous mode [ 370.060618][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'. [ 370.410489][T10551] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 370.466772][T10565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.514095][T10565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.760695][ T5875] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 371.030444][ T5875] usb 5-1: Invalid ep0 maxpacket: 32 [ 371.160238][ T5875] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 371.320203][ T5875] usb 5-1: Invalid ep0 maxpacket: 32 [ 371.336995][ T5875] usb usb5-port1: attempt power cycle [ 371.540503][T10573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.780579][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 371.783590][ T5817] Bluetooth: hci5: command 0x1003 tx timeout [ 371.811646][ T5875] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 371.958834][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 371.977741][ T5875] usb 5-1: Invalid ep0 maxpacket: 32 [ 372.140845][ T5875] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 372.276062][ T5875] usb 5-1: Invalid ep0 maxpacket: 32 [ 372.479902][ T5875] usb usb5-port1: unable to enumerate USB device [ 372.550267][ T30] audit: type=1400 audit(1760440798.974:1003): avc: denied { mount } for pid=10575 comm="syz.3.1165" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 372.572348][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.007166][T10588] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1168'. [ 373.227758][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 373.237067][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 373.717453][T10596] netlink: 'syz.0.1168': attribute type 4 has an invalid length. [ 373.805948][T10597] netlink: 'syz.0.1168': attribute type 4 has an invalid length. [ 373.816503][ T5875] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 373.991295][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 374.005624][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short [ 374.115775][ T5875] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 374.363122][ T5875] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 374.399774][ T5875] usb 3-1: Product: syz [ 374.423618][ T5875] usb 3-1: Manufacturer: syz [ 374.429687][ T5875] usb 3-1: SerialNumber: syz [ 374.493735][T10604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1172'. [ 374.552980][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 374.622096][T10611] mkiss: ax0: crc mode is auto. [ 374.668893][ T6328] udevd[6328]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 374.681075][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.689659][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.190306][ T48] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 376.650427][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 377.004699][ T5875] usb 3-1: selecting invalid altsetting 1 [ 377.076521][ T5875] catc 3-1:8.0: Can't set altsetting 1. [ 377.091985][ T48] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 377.115234][ T5875] catc 3-1:8.0: probe with driver catc failed with error -5 [ 377.182978][ T48] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.202303][ T5875] usb 3-1: USB disconnect, device number 56 [ 377.210259][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.257273][ T48] usb 4-1: Product: syz [ 377.262417][ T48] usb 4-1: Manufacturer: syz [ 377.267009][ T48] usb 4-1: SerialNumber: syz [ 377.313518][ T48] cdc_ncm 4-1:1.0: skipping garbage [ 378.092557][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.105652][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.752974][ T48] cdc_ncm 4-1:1.0: bind() failure [ 378.790869][ T48] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 379.034674][ T48] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 379.092103][ T48] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 379.150389][ T48] usb 4-1: USB disconnect, device number 62 [ 379.414751][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 379.581448][ T5875] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 379.627086][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 379.740250][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 379.948558][ T5940] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 379.955687][ T5875] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 379.965342][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.980261][ T5875] usb 3-1: Product: syz [ 379.984447][ T5875] usb 3-1: Manufacturer: syz [ 379.989040][ T5875] usb 3-1: SerialNumber: syz [ 380.009820][ T5875] usb 3-1: config 0 descriptor?? [ 380.018905][ T5875] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 380.058702][T10671] netlink: 'syz.0.1191': attribute type 2 has an invalid length. [ 380.066610][T10671] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1191'. [ 380.120897][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 380.134655][ T5940] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 380.153345][ T5940] usb 4-1: config 0 has no interface number 0 [ 380.168585][ T5940] usb 4-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 380.188033][ T5940] usb 4-1: config 0 interface 96 has no altsetting 0 [ 380.202603][ T5940] usb 4-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 380.220252][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.228384][ T5940] usb 4-1: Product: syz [ 380.238494][ T5940] usb 4-1: Manufacturer: syz [ 380.243205][ T5940] usb 4-1: SerialNumber: syz [ 380.261399][ T5940] usb 4-1: config 0 descriptor?? [ 380.291121][T10678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40704 sclass=netlink_route_socket pid=10678 comm=syz.0.1193 [ 380.544029][ T5940] usb 4-1: USB disconnect, device number 63 [ 380.614184][T10681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1194'. [ 380.627427][ T5875] gspca_sonixj: reg_r err -32 [ 380.632443][ T5875] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 380.651829][T10654] @: renamed from vlan0 (while UP) [ 381.001728][ T5875] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 381.150247][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 381.163866][ T5875] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 381.173070][ T5875] usb 2-1: config 0 has no interface number 0 [ 381.179456][ T5875] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.224877][T10688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.449251][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 381.507115][ T5875] usb 2-1: config 0 interface 85 has no altsetting 0 [ 381.554192][ T5875] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 381.571871][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 381.591094][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.608234][ T5875] usb 2-1: Product: syz [ 381.631128][ T5875] usb 2-1: Manufacturer: syz [ 381.643772][ T5875] usb 2-1: SerialNumber: syz [ 381.795636][ T5875] usb 2-1: config 0 descriptor?? [ 381.843666][ T5948] usb 3-1: USB disconnect, device number 57 [ 382.017810][T10697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.193975][ T48] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 382.462988][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 382.500287][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.512636][ T48] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 382.523570][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.534292][ T5875] appletouch 2-1:0.85: Geyser mode initialized. [ 382.537776][T10706] tipc: Started in network mode [ 382.543290][ T5875] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input27 [ 382.559110][T10706] tipc: Node identity 4e4f12dd23a2, cluster identity 4711 [ 382.567825][ T48] usb 4-1: config 0 descriptor?? [ 382.573641][ T5948] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 382.581599][T10706] tipc: Enabled bearer , priority 0 [ 382.591378][T10707] syzkaller0: entered promiscuous mode [ 382.597231][T10707] syzkaller0: entered allmulticast mode [ 382.635049][T10712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4049 sclass=netlink_route_socket pid=10712 comm=syz.2.1202 [ 382.680117][T10707] tipc: Resetting bearer [ 382.716371][T10707] tipc: Disabling bearer [ 382.732076][ T5948] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 382.750690][ T5948] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 382.759942][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.783605][ T5948] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 382.934258][T10720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.944593][T10720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.162057][ T48] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 383.170548][ T30] audit: type=1400 audit(1760440809.424:1004): avc: denied { write } for pid=10680 comm="syz.1.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 383.241571][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.357179][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.492656][T10694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.507831][T10694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.516701][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.657328][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.671329][ T48] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 383.686351][ T5940] usb 2-1: USB disconnect, device number 55 [ 383.692503][ T48] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 383.721918][ T5940] appletouch 2-1:0.85: input: appletouch disconnected [ 383.734911][ T48] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 383.779849][ T48] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 383.823163][ T48] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 383.840312][ T48] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 383.866597][ T5948] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 384.029841][ T5948] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 384.050504][ T48] isku 0003:1E7D:319C.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 384.406526][T10735] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1205'. [ 384.419516][T10735] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1205'. [ 384.580586][ T5948] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 384.753931][ T5948] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 385.447384][ T5868] usb 1-1: USB disconnect, device number 45 [ 385.564303][T10757] netlink: 'syz.0.1214': attribute type 1 has an invalid length. [ 385.577268][T10757] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 385.800353][ T5940] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 385.991912][ T5940] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.022302][ T5875] usb 4-1: USB disconnect, device number 64 [ 386.024398][ T5868] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 386.039240][ T5940] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.068341][ T5940] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 386.097352][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 386.109137][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 386.129852][ T5940] usb 3-1: SerialNumber: syz [ 386.210459][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 386.226843][ T5868] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 386.255113][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.293384][ T5868] usb 1-1: config 0 descriptor?? [ 386.316044][ T5868] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 386.883721][ T5940] usb 3-1: 0:2 : does not exist [ 386.902893][ T5940] usb 3-1: unit 5: unexpected type 0x09 [ 386.937271][ T5940] usb 3-1: USB disconnect, device number 58 [ 386.986404][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.135811][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 387.297907][T10763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10763 comm=syz.0.1215 [ 387.410413][ T5875] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 387.473043][ T5940] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 387.519787][T10780] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.1221'. [ 387.670786][T10784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.760467][ T5868] gspca_vc032x: reg_w err -71 [ 387.765180][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 387.773755][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 387.779793][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 387.788237][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 387.819305][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 387.826551][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 387.833698][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 387.839034][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 387.847659][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 387.853118][ T5875] usb 4-1: config index 0 descriptor too short (expected 4644, got 36) [ 387.853161][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.853185][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.853213][ T5875] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 387.853232][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.881069][ T5875] usb 4-1: config 0 descriptor?? [ 387.882546][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 388.047819][ T5940] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 388.065426][ T5940] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 388.074413][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.079794][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.496659][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 388.508684][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.518450][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 388.529924][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.535539][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.543874][ T5940] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 388.557820][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.563730][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.569511][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 388.583613][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.589030][ T5868] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.595773][ T5940] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 388.607075][ T5868] gspca_vc032x: Unknown sensor... [ 388.613211][ T5868] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 388.622004][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.654403][ T5868] usb 1-1: USB disconnect, device number 46 [ 388.711297][ T5940] usb 3-1: config 0 descriptor?? [ 388.887248][ T5875] hid_mf 0003:0079:1846.0013: unknown main item tag 0x0 [ 389.060424][ T5875] hid_mf 0003:0079:1846.0013: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 389.093507][ T5875] hid_mf 0003:0079:1846.0013: Invalid report, this should never happen! [ 389.130480][ T5875] hid_mf 0003:0079:1846.0013: Force feedback init failed. [ 389.194723][ T5875] usb 4-1: USB disconnect, device number 65 [ 389.203501][ T5940] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 389.268526][ T5940] usb 3-1: USB disconnect, device number 59 [ 389.283142][ T5940] usblp0: removed [ 389.391628][T10809] tmpfs: Bad value for 'mpol' [ 389.396930][T10810] tmpfs: Bad value for 'mpol' [ 389.570296][ T5868] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 389.574413][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 389.720240][ T5940] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 389.740229][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 389.746811][ T5868] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 389.758462][ T5868] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 389.775645][ T5868] usb 2-1: config 0 interface 0 has no altsetting 0 [ 389.784553][ T5868] usb 2-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 389.795571][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.821403][ T5868] usb 2-1: config 0 descriptor?? [ 389.890873][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 389.903089][ T5940] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 389.918271][ T5940] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 389.927253][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 389.936529][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 389.951038][ T5940] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 389.963730][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 389.978619][ T5940] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 389.990259][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.023132][ T5940] usb 3-1: config 0 descriptor?? [ 390.250380][ T5940] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 390.474411][ T30] audit: type=1400 audit(1760440816.894:1005): avc: denied { write } for pid=10805 comm="syz.1.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 390.729404][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 391.198075][ T5940] usb 3-1: USB disconnect, device number 60 [ 391.232331][ T5940] usblp0: removed [ 391.324814][ T5868] usbhid 2-1:0.0: can't add hid device: -71 [ 391.330948][ T5868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 391.345147][ T5868] usb 2-1: USB disconnect, device number 56 [ 391.481017][ T5875] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 391.631166][ T5875] usb 4-1: device descriptor read/64, error -71 [ 391.900451][ T5875] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 392.110241][ T5875] usb 4-1: device descriptor read/64, error -71 [ 392.223233][ T5875] usb usb4-port1: attempt power cycle [ 392.610399][ T5875] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 392.876891][ T5875] usb 4-1: device descriptor read/8, error -71 [ 393.053511][ T30] audit: type=1400 audit(1760440819.504:1006): avc: denied { bind } for pid=10849 comm="syz.2.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 393.098754][ T5948] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 393.146911][ T5875] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 393.180342][ T5875] usb 4-1: device descriptor read/8, error -71 [ 393.210741][ T5940] page_pool_release_retry() stalled pool shutdown: id 24, 14 inflight 182 sec [ 393.250586][ T5948] usb 2-1: Using ep0 maxpacket: 32 [ 393.257462][ T5948] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 393.270807][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.292792][ T5948] usb 2-1: config 0 descriptor?? [ 393.300793][ T5875] usb usb4-port1: unable to enumerate USB device [ 393.307642][ T5948] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 393.355368][T10858] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 393.376178][T10858] exFAT-fs (nullb0): invalid boot record signature [ 393.383795][T10858] exFAT-fs (nullb0): failed to read boot sector [ 393.390053][T10858] exFAT-fs (nullb0): failed to recognize exfat type [ 393.606982][T10868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.000723][ T5940] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 394.141732][ T5948] gspca_vc032x: reg_w err -71 [ 394.146433][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.156741][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.163550][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.170308][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.180478][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.185836][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 394.185933][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.196927][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.242083][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.249875][ T5940] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 394.263364][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.278754][ T5940] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 394.285184][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 394.298702][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.304462][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.309881][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.318767][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.336142][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 394.337700][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.351880][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.357396][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.363417][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.378447][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.386988][ T5948] gspca_vc032x: Unknown sensor... [ 394.392636][ T5948] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 394.404423][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 394.418317][ T5940] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 394.443609][T10878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.470289][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 394.534833][T10878] : renamed from bridge_slave_0 (while UP) [ 394.575792][ T5948] usb 2-1: USB disconnect, device number 57 [ 394.643428][ T5940] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 394.740386][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.761476][T10884] random: crng reseeded on system resumption [ 395.042872][ T5940] usb 3-1: config 0 descriptor?? [ 395.656539][ T5940] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 395.747142][ T5940] usb 3-1: USB disconnect, device number 61 [ 395.758145][ T5940] usblp0: removed [ 396.382585][ T5940] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 396.497703][T10901] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1253'. [ 396.550292][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 396.558556][ T5940] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 396.567162][ T5940] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 396.579088][ T5940] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 396.618746][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 396.642119][ T5940] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 396.663851][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 396.762569][ T5896] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 396.773190][ T5940] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 396.810492][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.937917][ T5940] usb 3-1: config 0 descriptor?? [ 396.943379][ T5940] usb 3-1: can't set config #0, error -71 [ 396.990945][ T5940] usb 3-1: USB disconnect, device number 62 [ 396.997977][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 397.043263][ T5896] usb 2-1: config 0 has an invalid interface number: 169 but max is 0 [ 397.060213][ T5896] usb 2-1: config 0 has no interface number 0 [ 397.066340][ T5896] usb 2-1: config 0 interface 169 has no altsetting 0 [ 397.093223][ T5896] usb 2-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 397.105644][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.116453][ T5896] usb 2-1: Product: syz [ 397.120873][ T5896] usb 2-1: Manufacturer: syz [ 397.125465][ T5896] usb 2-1: SerialNumber: syz [ 397.132459][ T5896] usb 2-1: config 0 descriptor?? [ 397.142324][ T5896] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 397.160097][ T5896] snd-usb-audio 2-1:0.169: probe with driver snd-usb-audio failed with error -2 [ 397.195182][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.347910][ T5948] usb 2-1: USB disconnect, device number 58 [ 397.375626][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 397.531982][ T5896] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 397.700384][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 397.706950][ T5896] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.717271][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.728577][ T5896] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.737808][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.745895][ T5896] usb 5-1: Product: syz [ 397.750110][ T5896] usb 5-1: Manufacturer: syz [ 397.754846][ T5896] usb 5-1: SerialNumber: syz [ 397.996540][ T5896] usb 5-1: cannot find UAC_HEADER [ 398.226987][T10919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.253821][T10919] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 398.275612][T10919] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.314035][T10919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 398.840586][T10936] fuse: Bad value for 'fd' [ 399.450283][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 399.636797][ T5896] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 399.654878][ T5896] usb 5-1: USB disconnect, device number 51 [ 399.732979][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.830292][ T5875] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 399.838038][ T5948] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 399.884074][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 399.902071][T10938] erofs (device nbd4): cannot find valid erofs superblock [ 399.994773][ T30] audit: type=1400 audit(1760440826.444:1007): avc: denied { ioctl } for pid=10946 comm="syz.4.1266" path="socket:[32860]" dev="sockfs" ino=32860 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 400.040524][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 400.047918][ T5948] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 400.068025][ T5875] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 400.077511][ T5948] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 400.102160][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.111715][ T5893] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 400.116630][ T5896] hid-generic 0010:0002:000F.0014: unknown main item tag 0x1 [ 400.119315][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.142301][ T5875] usb 2-1: config 0 descriptor?? [ 400.309602][ T5896] hid-generic 0010:0002:000F.0014: item fetching failed at offset 3/199 [ 400.315264][ T5875] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 400.323394][ T5896] hid-generic 0010:0002:000F.0014: probe with driver hid-generic failed with error -22 [ 400.326076][ T5948] usb 3-1: config 0 descriptor?? [ 400.340410][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 400.340433][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 400.346422][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 400.362348][ T5948] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 400.460877][ T5948] usb 3-1: USB disconnect, device number 63 [ 400.470290][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 400.507387][ T5893] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 400.553228][T10957] mkiss: ax0: crc mode is auto. [ 400.568058][ T5893] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 400.587937][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 400.599695][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 400.613319][T10963] trusted_key: encrypted_key: master key parameter 'u050000000004093' is invalid [ 400.691138][ T5893] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 400.701035][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 400.718702][ T5893] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 400.825975][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.850741][ T5893] usb 1-1: config 0 descriptor?? [ 401.130983][ T5893] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 401.155835][ T5893] usb 1-1: USB disconnect, device number 47 [ 401.172053][T10926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.180585][ T5948] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 401.188457][T10926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.218968][ T5893] usblp0: removed [ 401.224985][ T5875] gspca_vc032x: reg_w err -71 [ 401.232425][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.238223][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.267444][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.278505][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.287062][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.293560][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.346669][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.352197][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 401.423334][ T30] audit: type=1400 audit(1760440827.814:1008): avc: denied { ioctl } for pid=10954 comm="syz.4.1268" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.469492][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.475025][ T5948] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 401.486755][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.494980][ T5948] usb 5-1: Product: syz [ 401.500400][ T5948] usb 5-1: Manufacturer: syz [ 401.505452][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.511820][ T5948] usb 5-1: SerialNumber: syz [ 401.516494][ T30] audit: type=1400 audit(1760440827.904:1009): avc: denied { read write } for pid=10940 comm="syz.0.1264" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.540674][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.546441][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.561583][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.567806][ T5948] usb 5-1: config 0 descriptor?? [ 401.581467][ T5948] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 401.597930][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.624789][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.648504][ T30] audit: type=1400 audit(1760440827.904:1010): avc: denied { open } for pid=10940 comm="syz.0.1264" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 401.681843][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.689389][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.696501][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.703230][ T5875] gspca_vc032x: I2c Bus Busy Wait 00 [ 401.710367][ T30] audit: type=1400 audit(1760440828.054:1011): avc: denied { allowed } for pid=10965 comm="syz.2.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 401.730984][ T5875] gspca_vc032x: Unknown sensor... [ 401.736100][ T5875] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 401.750254][ T5893] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 401.768529][ T5875] usb 2-1: USB disconnect, device number 59 [ 401.800209][ T30] audit: type=1400 audit(1760440828.054:1012): avc: denied { create } for pid=10965 comm="syz.2.1270" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 401.920036][ T5830] udevd[5830]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 401.931626][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 401.937645][ T30] audit: type=1400 audit(1760440828.054:1013): avc: denied { map } for pid=10965 comm="syz.2.1270" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 401.964364][ T5893] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 401.977960][ T5893] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 401.980624][T10974] syzkaller0: entered promiscuous mode [ 401.996997][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 401.999947][T10974] syzkaller0: entered allmulticast mode [ 402.007132][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 402.021830][ T30] audit: type=1400 audit(1760440828.054:1014): avc: denied { read write } for pid=10965 comm="syz.2.1270" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 402.047839][ T5893] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 402.058872][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 402.072974][ T30] audit: type=1400 audit(1760440828.084:1015): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 402.105987][ T5893] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 402.128674][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.511349][ T30] audit: type=1400 audit(1760440828.084:1016): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 402.597369][ T5893] usb 1-1: config 0 descriptor?? [ 402.603094][ T5948] gspca_ov534_9: reg_w failed -110 [ 402.900532][ T5893] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 402.946318][ T5893] usb 1-1: USB disconnect, device number 48 [ 402.957622][ T5893] usblp0: removed [ 403.020234][ T5948] gspca_ov534_9: Unknown sensor 0000 [ 403.020284][ T5948] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 403.239426][T10996] random: crng reseeded on system resumption [ 403.596516][T10998] comedi comedi0: bad chanlist[0]=0x00000007 chan=7 range length=1 [ 404.745833][ T5893] usb 5-1: USB disconnect, device number 52 [ 405.212767][T11011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.547051][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 405.547066][ T30] audit: type=1400 audit(1760440831.994:1060): avc: denied { read } for pid=11012 comm="syz.0.1282" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 405.607141][ T30] audit: type=1400 audit(1760440832.034:1061): avc: denied { open } for pid=11012 comm="syz.0.1282" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 405.638839][ T5896] hid-generic 0006:0003:0009.0015: unknown main item tag 0x0 [ 405.653540][ T5896] hid-generic 0006:0003:0009.0015: unknown main item tag 0x0 [ 405.668229][ T5896] hid-generic 0006:0003:0009.0015: unknown main item tag 0x0 [ 405.670321][ T5893] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 405.676504][ T30] audit: type=1400 audit(1760440832.034:1062): avc: denied { ioctl } for pid=11012 comm="syz.0.1282" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 405.708808][ T5896] hid-generic 0006:0003:0009.0015: unknown main item tag 0x0 [ 405.728300][ T5896] hid-generic 0006:0003:0009.0015: unknown main item tag 0x0 [ 405.736151][ T5896] hid-generic 0006:0003:0009.0015: unknown main item tag 0x0 [ 405.746078][ T5896] hid-generic 0006:0003:0009.0015: unknown main item tag 0x0 [ 405.753785][ T30] audit: type=1400 audit(1760440832.084:1063): avc: denied { read write } for pid=11014 comm="syz.2.1283" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 405.778706][ T5896] hid-generic 0006:0003:0009.0015: unknown main item tag 0x0 [ 405.793016][ T5896] hid-generic 0006:0003:0009.0015: unknown main item tag 0x0 [ 405.811054][ T5896] hid-generic 0006:0003:0009.0015: unknown main item tag 0x0 [ 405.819734][ T30] audit: type=1400 audit(1760440832.084:1064): avc: denied { open } for pid=11014 comm="syz.2.1283" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 405.844639][ T5896] hid-generic 0006:0003:0009.0015: hidraw0: VIRTUAL HID v0.04 Device [syz0] on syz0 [ 406.047040][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 406.057042][ T5893] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 406.069522][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 406.080497][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.080520][ T5893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.082752][ T5893] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 406.111123][ T30] audit: type=1400 audit(1760440832.114:1065): avc: denied { read write } for pid=11012 comm="syz.0.1282" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 406.230671][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.238706][ T5893] usb 5-1: Product: syz [ 406.242923][ T5893] usb 5-1: Manufacturer: syz [ 406.247489][ T5893] usb 5-1: SerialNumber: syz [ 406.554019][T11022] fido_id[11022]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 406.569193][ T30] audit: type=1400 audit(1760440832.114:1066): avc: denied { open } for pid=11012 comm="syz.0.1282" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 406.593322][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.648898][ T30] audit: type=1400 audit(1760440832.114:1067): avc: denied { ioctl } for pid=11012 comm="syz.0.1282" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 406.674587][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.750520][ T30] audit: type=1400 audit(1760440832.114:1068): avc: denied { write } for pid=11012 comm="syz.0.1282" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 406.773376][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.794663][ T5893] usb 5-1: 0:2 : does not exist [ 406.827672][ T30] audit: type=1400 audit(1760440832.864:1069): avc: denied { execute } for pid=11026 comm="syz.2.1285" name="file0" dev="tmpfs" ino=1385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 407.231177][ T5896] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 407.391072][ T5896] usb 2-1: device descriptor read/64, error -71 [ 407.536502][ T5893] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 407.596977][ T5893] usb 5-1: USB disconnect, device number 53 [ 407.625603][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 407.640292][ T5896] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 407.653679][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.800230][ T5896] usb 2-1: device descriptor read/64, error -71 [ 408.805797][ T5896] usb usb2-port1: attempt power cycle [ 410.149366][T11055] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 410.590328][T11076] hfsplus: unable to find HFS+ superblock [ 410.680346][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 410.680380][ T30] audit: type=1400 audit(1760440837.014:1092): avc: denied { create } for pid=11063 comm="syz.0.1295" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 410.707213][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.010979][ T30] audit: type=1400 audit(1760440837.024:1093): avc: denied { mounton } for pid=11063 comm="syz.0.1295" path="/284/file0" dev="tmpfs" ino=1516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 411.059376][ T30] audit: type=1400 audit(1760440837.494:1094): avc: denied { unlink } for pid=5812 comm="syz-executor" name="file0" dev="tmpfs" ino=1516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 411.149158][T11080] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1298'. [ 411.247133][ T30] audit: type=1400 audit(1760440837.694:1095): avc: denied { write } for pid=11079 comm="syz.0.1298" name="netlink" dev="proc" ino=4026532944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 411.468431][ T30] audit: type=1400 audit(1760440837.914:1096): avc: denied { ioctl } for pid=11083 comm="syz.0.1300" path="socket:[33156]" dev="sockfs" ino=33156 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 411.478313][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 411.494209][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.611489][ T5948] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 411.629306][ T5827] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 411.629356][ T5827] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 411.646565][ T30] audit: type=1400 audit(1760440838.064:1097): avc: denied { getopt } for pid=11083 comm="syz.0.1300" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 411.739555][T11088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1301'. [ 411.749224][T11088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1301'. [ 411.910986][T11088] ubi31: attaching mtd0 [ 411.932138][T11088] ubi31: scanning is finished [ 412.102590][ T30] audit: type=1400 audit(1760440838.174:1098): avc: denied { append } for pid=11085 comm="syz.3.1301" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.125648][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.146202][ T30] audit: type=1400 audit(1760440838.344:1099): avc: denied { connect } for pid=11085 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 412.180275][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 412.189178][ T5948] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 412.199387][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.231055][T11088] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 412.238637][T11088] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 412.246065][T11088] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 412.253137][T11088] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 412.260589][T11088] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 412.268016][T11088] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 412.276089][T11088] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3070836653 [ 412.286147][T11088] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 412.297970][T11093] ubi31: background thread "ubi_bgt31d" started, PID 11093 [ 412.337825][ T5948] usb 5-1: config 0 descriptor?? [ 412.555385][ T30] audit: type=1400 audit(1760440838.994:1100): avc: denied { write } for pid=11091 comm="syz.0.1302" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 412.568806][ T5948] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 412.638578][ T5948] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 412.694690][ T30] audit: type=1400 audit(1760440839.144:1101): avc: denied { read write } for pid=11101 comm="syz.1.1305" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 412.722127][ T5948] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 412.750300][ T5948] usb 5-1: media controller created [ 412.877218][ T5896] hid (null): unknown global tag 0xc [ 412.882936][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.894680][ T5896] hid (null): invalid report_size 786316495 [ 412.917778][ T5896] hid (null): report_id 1404214463 is invalid [ 412.925489][ T5896] hid (null): bogus close delimiter [ 412.938873][ T5896] hid-generic 0FFF:0002:0005.0016: unknown global tag 0xc [ 412.947179][ T5896] hid-generic 0FFF:0002:0005.0016: item 0 0 1 12 parsing failed [ 412.955815][ T5896] hid-generic 0FFF:0002:0005.0016: probe with driver hid-generic failed with error -22 [ 412.992506][ T5940] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 413.332556][ T5940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 413.340962][ T5940] usb 3-1: not running at top speed; connect to a high speed hub [ 413.349748][ T5940] usb 3-1: config 5 has an invalid interface number: 36 but max is 0 [ 413.358199][ T5940] usb 3-1: config 5 has no interface number 0 [ 413.364556][ T5940] usb 3-1: config 5 interface 36 has no altsetting 0 [ 413.378794][ T5940] usb 3-1: New USB device found, idVendor=0856, idProduct=bc02, bcdDevice=7d.cf [ 413.388157][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.402372][ T5940] usb 3-1: Product: syz [ 413.413841][ T5940] usb 3-1: Manufacturer: syz [ 413.426754][ T5940] usb 3-1: SerialNumber: syz [ 413.657447][ T5940] mos7840 3-1:5.36: missing endpoints [ 413.674670][ T5940] usb 3-1: USB disconnect, device number 64 [ 413.685860][T11116] netlink: 'syz.0.1308': attribute type 21 has an invalid length. [ 413.704041][T11116] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1308'. [ 413.715058][T11116] netlink: 'syz.0.1308': attribute type 6 has an invalid length. [ 413.722032][T11118] fuse: Unknown parameter 'UfuͮY_qSiܫ2U4HnCe_jl' [ 413.732479][T11116] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1308'. [ 414.152019][ T5827] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 414.152574][ T5827] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 414.298959][ T5948] az6027: usb out operation failed. (-71) [ 414.328653][ T5948] az6027: usb out operation failed. (-71) [ 414.345926][T11131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.354303][ T5948] stb0899_attach: Driver disabled by Kconfig [ 414.354319][ T5948] az6027: no front-end attached [ 414.354319][ T5948] [ 414.356382][ T5948] az6027: usb out operation failed. (-71) [ 414.390484][ T5948] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 414.399705][ T5948] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 414.430823][ T5948] dvb-usb: schedule remote query interval to 400 msecs. [ 414.455807][T11131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.540901][ T5948] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 414.560396][ T5940] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 414.563715][ T5948] usb 5-1: USB disconnect, device number 54 [ 414.626689][ T5830] udevd[5830]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 414.681522][ T5948] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 414.860452][ T5875] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 414.965008][ T5940] usb 1-1: device not accepting address 49, error -71 [ 415.241908][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 415.250044][ T5875] usb 4-1: not running at top speed; connect to a high speed hub [ 415.276034][ T5875] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.305691][ T5875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.350220][ T5948] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 415.367551][ T5875] usb 4-1: string descriptor 0 read error: -22 [ 415.380348][ T5875] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.398740][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.477568][ T5875] usb 4-1: 0:2 : does not exist [ 415.500194][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 415.532005][ T5948] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 415.543489][ T5948] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 415.590271][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.598328][ T5948] usb 5-1: Product: syz [ 415.610192][ T5948] usb 5-1: Manufacturer: syz [ 415.620491][ T5948] usb 5-1: SerialNumber: syz [ 415.631383][ T5948] usb 5-1: config 0 descriptor?? [ 415.665688][ T5948] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 415.689244][ T5948] usb 5-1: Detected FT232R [ 415.694214][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 415.694228][ T30] audit: type=1400 audit(1760440842.144:1109): avc: denied { ioctl } for pid=11150 comm="syz.0.1320" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 415.697127][T11151] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 415.710258][ T30] audit: type=1400 audit(1760440842.144:1110): avc: denied { create } for pid=11150 comm="syz.0.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 415.756494][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.845312][T11136] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1314'. [ 415.928490][ T5948] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 415.936494][ T30] audit: type=1400 audit(1760440842.144:1111): avc: denied { setopt } for pid=11150 comm="syz.0.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 415.956039][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.963263][ T30] audit: type=1400 audit(1760440842.294:1112): avc: denied { ioctl } for pid=11135 comm="syz.4.1314" path="socket:[33304]" dev="sockfs" ino=33304 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 415.988218][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.995213][ T5948] ftdi_sio 5-1:0.0: GPIO initialisation failed: -32 [ 416.005438][ T5948] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 416.264330][ T30] audit: type=1400 audit(1760440842.334:1113): avc: denied { create } for pid=11150 comm="syz.0.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 416.422383][ T30] audit: type=1400 audit(1760440842.334:1114): avc: denied { ioctl } for pid=11150 comm="syz.0.1320" path="socket:[33306]" dev="sockfs" ino=33306 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 416.539174][ T30] audit: type=1400 audit(1760440842.984:1115): avc: denied { create } for pid=11175 comm="syz.1.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 416.567195][T11176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11176 comm=syz.1.1324 [ 416.588636][ T30] audit: type=1400 audit(1760440843.014:1116): avc: denied { write } for pid=11175 comm="syz.1.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 416.663496][ T5827] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 416.663552][ T5827] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 416.776501][T11188] usb usb8: usbfs: process 11188 (syz.2.1325) did not claim interface 0 before use [ 416.789875][ T30] audit: type=1400 audit(1760440843.224:1117): avc: denied { create } for pid=11181 comm="syz.2.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 416.789929][ T30] audit: type=1400 audit(1760440843.224:1118): avc: denied { write } for pid=11181 comm="syz.2.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 416.912661][ T5875] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 416.928932][ T5875] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 416.983877][ T5875] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 417.302517][ T5875] usb 4-1: USB disconnect, device number 70 [ 418.429008][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 418.554978][ T5875] usb 5-1: USB disconnect, device number 55 [ 418.563528][ T5875] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 418.590689][ T5875] ftdi_sio 5-1:0.0: device disconnected [ 418.840247][ T5940] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 418.870292][ T5893] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 419.002039][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 419.010548][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.020220][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 419.020962][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 419.027701][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.034488][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 419.075279][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 419.087292][ T5940] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 419.098506][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.108676][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.123671][ T5940] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 419.133035][ T5940] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 419.141719][ T5940] usb 3-1: Manufacturer: syz [ 419.154105][ T5940] usb 3-1: config 0 descriptor?? [ 419.199444][ T5893] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 419.216240][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.230704][ T9] usb 4-1: device descriptor read/64, error -71 [ 419.236121][ T5893] usb 2-1: config 0 descriptor?? [ 419.261441][ T5893] hub 2-1:0.0: USB hub found [ 419.420305][ T5940] rc_core: IR keymap rc-hauppauge not found [ 419.427845][ T5940] Registered IR keymap rc-empty [ 419.440847][ T5940] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 419.457205][ T5893] hub 2-1:0.0: 1 port detected [ 419.470282][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 419.470294][ T5875] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 419.485555][ T5940] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 419.520914][ T5940] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 419.590885][ T5940] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 [ 419.600246][ T5875] usb 5-1: device descriptor read/64, error -71 [ 419.619615][ T5940] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 419.626903][ T9] usb 4-1: device descriptor read/64, error -71 [ 419.651677][ T5940] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 419.680317][ T5940] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 419.720442][ T5940] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 419.740993][ T9] usb usb4-port1: attempt power cycle [ 419.747843][ T5940] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 419.770685][ T5940] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 419.790294][ T5940] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 419.811102][ T5940] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 419.830269][ T5940] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 419.854389][ T5940] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 419.995015][ T5875] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 420.190659][ T5875] usb 5-1: device descriptor read/64, error -71 [ 420.264341][ T5893] hub 2-1:0.0: activate --> -90 [ 420.285808][ T5940] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 420.306507][ T5940] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 420.327494][ T5940] usb 3-1: USB disconnect, device number 65 [ 420.343775][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 420.399767][ T9] usb 4-1: device descriptor read/8, error -71 [ 420.417116][ T5875] usb usb5-port1: attempt power cycle [ 420.780534][ T5875] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 420.780547][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 420.830194][ T9] usb 4-1: device descriptor read/8, error -71 [ 420.841112][ T5940] usb 2-1: USB disconnect, device number 63 [ 420.896821][ T5875] usb 5-1: device descriptor read/8, error -71 [ 420.941696][ T9] usb usb4-port1: unable to enumerate USB device [ 421.046999][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 421.047015][ T30] audit: type=1400 audit(1760440847.494:1131): avc: denied { create } for pid=11234 comm="syz.0.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 421.140336][ T5875] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 421.160923][ T5875] usb 5-1: device descriptor read/8, error -71 [ 421.430009][ T30] audit: type=1400 audit(1760440847.874:1132): avc: denied { bind } for pid=11234 comm="syz.0.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 421.470590][ T5875] usb usb5-port1: unable to enumerate USB device [ 421.621660][ T8058] udevd[8058]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 421.670517][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 421.833492][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 421.859939][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 421.868681][ T9] usb 1-1: config 11 has an invalid interface number: 98 but max is 0 [ 421.877406][ T9] usb 1-1: config 11 has no interface number 0 [ 421.892126][ T9] usb 1-1: config 11 interface 98 altsetting 225 bulk endpoint 0x6 has invalid maxpacket 8 [ 421.937550][ T9] usb 1-1: config 11 interface 98 altsetting 225 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 421.994110][ T9] usb 1-1: config 11 interface 98 has no altsetting 0 [ 422.038958][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=c2.7f [ 422.048384][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.064466][ T9] usb 1-1: Product: syz [ 422.078808][ T9] usb 1-1: Manufacturer: syz [ 422.083536][ T9] usb 1-1: SerialNumber: syz [ 422.092288][T11238] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 422.122289][ T30] audit: type=1400 audit(1760440848.574:1133): avc: denied { read write } for pid=11246 comm="syz.2.1342" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 422.150636][T11247] input: syz0 as /devices/virtual/input/input32 [ 422.195968][ T30] audit: type=1400 audit(1760440848.574:1134): avc: denied { open } for pid=11246 comm="syz.2.1342" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 422.265047][ T30] audit: type=1400 audit(1760440848.604:1135): avc: denied { ioctl } for pid=11246 comm="syz.2.1342" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 422.385236][ T30] audit: type=1400 audit(1760440848.814:1136): avc: denied { write } for pid=11234 comm="syz.0.1339" path="socket:[34312]" dev="sockfs" ino=34312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 422.408927][T11251] netlink: 'syz.4.1343': attribute type 2 has an invalid length. [ 422.481381][ T5940] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 422.693140][ T30] audit: type=1400 audit(1760440849.144:1137): avc: denied { create } for pid=11252 comm="syz.4.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 422.749125][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 422.783928][ T5940] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 422.832624][ T30] audit: type=1400 audit(1760440849.164:1138): avc: denied { write } for pid=11252 comm="syz.4.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 422.862652][ T5940] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 422.925996][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.954083][ T5940] usb 3-1: Product: syz [ 422.966980][ T5940] usb 3-1: Manufacturer: syz [ 422.977399][ T30] audit: type=1400 audit(1760440849.424:1139): avc: denied { bind } for pid=11261 comm="syz.4.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 423.066571][ T5940] usb 3-1: SerialNumber: syz [ 423.142139][ T5940] usb 3-1: config 0 descriptor?? [ 423.162054][ T30] audit: type=1400 audit(1760440849.424:1140): avc: denied { name_bind } for pid=11261 comm="syz.4.1345" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 423.192269][ T5940] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 423.205613][ T5940] usb 3-1: setting power ON [ 423.220248][ T5940] dvb-usb: bulk message failed: -22 (2/0) [ 423.236591][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 423.275084][ T5940] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 423.290246][ T5948] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 423.297926][ T5940] usb 3-1: media controller created [ 423.332487][ T6328] udevd[6328]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 423.352958][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 423.386642][ T5940] usb 3-1: selecting invalid altsetting 6 [ 423.448188][ T5940] usb 3-1: digital interface selection failed (-22) [ 423.450282][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 423.465036][ T5940] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 423.479177][ T5948] usb 5-1: config 0 interface 0 has no altsetting 0 [ 423.486113][ T5948] usb 5-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.00 [ 423.486569][ T5940] usb 3-1: setting power OFF [ 423.505402][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.522138][ T5948] usb 5-1: config 0 descriptor?? [ 423.542061][ T5940] dvb-usb: bulk message failed: -22 (2/0) [ 423.578743][ T5940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 423.605538][ T5940] (NULL device *): no alternate interface [ 423.684844][ T5940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 423.944775][ T5948] hid_parser_main: 7 callbacks suppressed [ 423.944789][ T5948] apple 0003:05AC:0215.0017: unknown main item tag 0x0 [ 423.957939][ T5948] apple 0003:05AC:0215.0017: unknown main item tag 0x0 [ 424.158541][ T5948] apple 0003:05AC:0215.0017: unknown main item tag 0x0 [ 424.175543][ T5948] apple 0003:05AC:0215.0017: unknown main item tag 0x0 [ 424.237332][ T5948] apple 0003:05AC:0215.0017: unknown main item tag 0x0 [ 424.480259][ T5948] apple 0003:05AC:0215.0017: unknown main item tag 0x0 [ 424.519166][ T5948] apple 0003:05AC:0215.0017: unknown main item tag 0x0 [ 424.574213][ T5948] apple 0003:05AC:0215.0017: unknown main item tag 0x0 [ 424.615361][ T5948] apple 0003:05AC:0215.0017: unknown main item tag 0x0 [ 424.647213][ T5948] apple 0003:05AC:0215.0017: unknown main item tag 0x0 [ 424.650207][ T9] usb 1-1: USB disconnect, device number 51 [ 424.767101][ T5948] apple 0003:05AC:0215.0017: unexpected long global item [ 424.777379][ T5827] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 424.778022][ T5827] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 424.870766][ T5948] apple 0003:05AC:0215.0017: parse failed [ 424.923092][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 425.216956][ T5948] apple 0003:05AC:0215.0017: probe with driver apple failed with error -22 [ 425.321918][ T5948] usb 5-1: USB disconnect, device number 60 [ 425.474134][T11291] sctp: [Deprecated]: syz.3.1354 (pid 11291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.474134][T11291] Use struct sctp_sack_info instead [ 425.491178][ T5896] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 425.654507][T11293] input: syz1 as /devices/virtual/input/input33 [ 425.740308][T11293] input: failed to attach handler leds to device input33, error: -6 [ 425.778864][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 425.794806][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 425.809097][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 426.247024][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 426.274038][ T5896] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 426.310306][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.318324][ T5896] usb 1-1: Product: syz [ 426.324436][ T5896] usb 1-1: Manufacturer: syz [ 426.332325][ T5896] usb 1-1: SerialNumber: syz [ 426.346497][ T5896] usb 1-1: config 0 descriptor?? [ 426.373847][T11287] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 426.381327][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 426.381342][ T30] audit: type=1400 audit(1760440852.824:1143): avc: denied { create } for pid=11299 comm="syz.1.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 426.400410][T11287] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 426.435583][ T30] audit: type=1400 audit(1760440852.824:1144): avc: denied { write } for pid=11299 comm="syz.1.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 426.457055][ T5896] usb 1-1: ucan: probing device on interface #0 [ 426.469085][ T30] audit: type=1400 audit(1760440852.834:1145): avc: denied { ioctl } for pid=11299 comm="syz.1.1359" path="socket:[34566]" dev="sockfs" ino=34566 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 426.586788][ T30] audit: type=1400 audit(1760440852.954:1146): avc: denied { sys_module } for pid=11299 comm="syz.1.1359" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 426.608083][ T30] audit: type=1400 audit(1760440852.964:1147): avc: denied { read write } for pid=11307 comm="syz.2.1360" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 426.633317][ T30] audit: type=1400 audit(1760440852.964:1148): avc: denied { open } for pid=11307 comm="syz.2.1360" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 426.725828][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 426.794014][ T30] audit: type=1400 audit(1760440852.984:1149): avc: denied { map } for pid=11307 comm="syz.2.1360" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 426.838586][ T5827] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 426.838639][ T5827] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 426.854380][ T30] audit: type=1400 audit(1760440853.004:1150): avc: denied { setopt } for pid=11307 comm="syz.2.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 426.874331][ T30] audit: type=1400 audit(1760440853.034:1151): avc: denied { ioctl } for pid=11305 comm="syz.4.1361" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 426.963382][ T30] audit: type=1400 audit(1760440853.404:1152): avc: denied { connect } for pid=11286 comm="syz.0.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 427.001327][T11306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1361'. [ 427.045140][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'. [ 427.457177][ T5896] ucan 1-1:0.0: probe with driver ucan failed with error -71 [ 427.467781][ T5896] usb 1-1: USB disconnect, device number 52 [ 427.629834][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 428.656342][T11338] 9pnet_fd: Insufficient options for proto=fd [ 428.694828][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 428.918714][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 429.274433][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'. [ 429.300818][T11344] bridge0: port 3(batadv1) entered blocking state [ 429.311734][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 429.327208][T11344] bridge0: port 3(batadv1) entered disabled state [ 429.443462][ T5896] usb 3-1: USB disconnect, device number 66 [ 429.470679][T11344] batadv1: entered allmulticast mode [ 429.476755][T11344] batadv1: entered promiscuous mode [ 429.615690][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 429.709909][ T5827] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 429.712807][ T5827] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 429.790991][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 429.800774][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 429.885113][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 430.410413][ T5948] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 430.571689][ T5948] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 430.582872][ T5948] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.661073][ T5948] usb 1-1: config 0 interface 0 has no altsetting 0 [ 430.797565][ T5948] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 430.858907][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.915281][ T5948] usb 1-1: config 0 descriptor?? [ 430.926246][T11366] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 431.086955][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 431.180531][T11392] netlink: 'syz.2.1382': attribute type 1 has an invalid length. [ 431.317486][ T5948] betop 0003:11C0:5506.0018: hidraw0: USB HID v1.01 Device [HID 11c0:5506] on usb-dummy_hcd.0-1/input0 [ 431.383857][ T5948] betop 0003:11C0:5506.0018: no inputs found [ 431.519652][ T5948] usb 1-1: USB disconnect, device number 53 [ 431.565709][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 431.565723][ T30] audit: type=1400 audit(1760440858.014:1224): avc: denied { ioctl } for pid=11396 comm="syz.1.1384" path="/dev/video8" dev="devtmpfs" ino=951 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 431.612618][ T30] audit: type=1400 audit(1760440858.024:1225): avc: denied { write } for pid=11400 comm="syz.0.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 431.682167][ T30] audit: type=1400 audit(1760440858.134:1226): avc: denied { read write } for pid=11400 comm="syz.0.1385" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 431.712769][ T30] audit: type=1400 audit(1760440858.134:1227): avc: denied { open } for pid=11400 comm="syz.0.1385" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 431.790575][T11392] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 431.796702][T11392] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 431.802794][T11392] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 431.808838][T11392] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 431.823424][T11401] (syz.0.1385,11401,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 431.832922][T11401] (syz.0.1385,11401,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 431.840463][ T30] audit: type=1400 audit(1760440858.274:1228): avc: denied { mounton } for pid=11400 comm="syz.0.1385" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 431.874292][T11401] (syz.0.1385,11401,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 431.924149][T11401] (syz.0.1385,11401,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 432.015824][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 432.118029][T11412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1388'. [ 432.120228][ T30] audit: type=1400 audit(1760440858.564:1229): avc: denied { write } for pid=11411 comm="syz.0.1388" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 432.282626][ T30] audit: type=1400 audit(1760440858.564:1230): avc: denied { setopt } for pid=11411 comm="syz.0.1388" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 432.282668][ T30] audit: type=1400 audit(1760440858.564:1231): avc: denied { connect } for pid=11411 comm="syz.0.1388" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 432.282705][ T30] audit: type=1400 audit(1760440858.644:1232): avc: denied { name_bind } for pid=11406 comm="syz.2.1386" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 432.282743][ T30] audit: type=1400 audit(1760440858.644:1233): avc: denied { node_bind } for pid=11406 comm="syz.2.1386" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 432.404453][T11413] hfs: can't find a HFS filesystem on dev nullb0 [ 432.598442][T11423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11423 comm=syz.1.1391 [ 432.598516][T11423] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1391'. [ 432.847016][T11432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1392'. [ 433.114384][ T3445] Bluetooth: hci5: Frame reassembly failed (-84) [ 433.275889][T11438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1392'. [ 433.385040][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 433.530257][ T5948] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 433.660242][ T5948] usb 2-1: device descriptor read/64, error -71 [ 433.855299][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 433.855321][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 433.861394][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 433.900206][ T5948] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 434.258973][ T5948] usb 2-1: device descriptor read/64, error -71 [ 434.380703][ T5948] usb usb2-port1: attempt power cycle [ 434.411073][T11447] netlink: 'syz.3.1396': attribute type 2 has an invalid length. [ 434.494219][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 434.774082][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 434.840265][ T5948] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 434.861462][ T5948] usb 2-1: device descriptor read/8, error -71 [ 435.004702][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 435.157641][ T5817] Bluetooth: hci5: command 0x1003 tx timeout [ 435.160186][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 435.170249][ T5948] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 435.429627][ T5948] usb 2-1: device descriptor read/8, error -71 [ 435.532530][ T5948] usb usb2-port1: unable to enumerate USB device [ 435.912397][ T6328] udevd[6328]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 436.332641][ T5821] udevd[5821]: symlink '../../loop3' '/dev/disk/by-diskseq/73.tmp-b7:3' failed: Read-only file system [ 436.355192][T11486] comedi comedi3: c6xdigio: I/O port conflict (0x3c4,3) [ 436.424189][T11486] ================================================================== [ 436.432267][T11486] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 436.440254][T11486] Read of size 8 at addr ffff888033ecac30 by task syz.4.1404/11486 [ 436.448135][T11486] [ 436.450457][T11486] CPU: 0 UID: 0 PID: 11486 Comm: syz.4.1404 Not tainted syzkaller #0 PREEMPT(full) [ 436.450482][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 436.450494][T11486] Call Trace: [ 436.450500][T11486] [ 436.450507][T11486] dump_stack_lvl+0x116/0x1f0 [ 436.450534][T11486] print_report+0xcd/0x630 [ 436.450562][T11486] ? __virt_addr_valid+0x81/0x610 [ 436.450582][T11486] ? __phys_addr+0xe8/0x180 [ 436.450602][T11486] ? sysfs_remove_file_ns+0x63/0x70 [ 436.450629][T11486] kasan_report+0xe0/0x110 [ 436.450655][T11486] ? sysfs_remove_file_ns+0x63/0x70 [ 436.450684][T11486] sysfs_remove_file_ns+0x63/0x70 [ 436.450712][T11486] driver_remove_file+0x4a/0x60 [ 436.450735][T11486] bus_remove_driver+0x224/0x2c0 [ 436.450763][T11486] driver_unregister+0x76/0xb0 [ 436.450784][T11486] comedi_device_detach_locked+0x12f/0xa50 [ 436.450807][T11486] comedi_device_detach+0x67/0xb0 [ 436.450825][T11486] comedi_device_attach+0x43d/0x900 [ 436.450848][T11486] do_devconfig_ioctl+0x1b1/0x710 [ 436.450871][T11486] ? __mutex_lock+0x1c5/0x1060 [ 436.450894][T11486] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 436.450925][T11486] ? find_held_lock+0x2b/0x80 [ 436.450944][T11486] comedi_unlocked_ioctl+0x165d/0x2f00 [ 436.450975][T11486] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 436.451005][T11486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 436.451035][T11486] ? do_vfs_ioctl+0x128/0x14f0 [ 436.451054][T11486] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 436.451073][T11486] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 436.451105][T11486] ? hook_file_ioctl_common+0x145/0x410 [ 436.451126][T11486] ? selinux_file_ioctl+0x180/0x270 [ 436.451150][T11486] ? selinux_file_ioctl+0xb4/0x270 [ 436.451180][T11486] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 436.451208][T11486] __x64_sys_ioctl+0x18e/0x210 [ 436.451228][T11486] do_syscall_64+0xcd/0xfa0 [ 436.451252][T11486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.451270][T11486] RIP: 0033:0x7fcac938eec9 [ 436.451284][T11486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.451302][T11486] RSP: 002b:00007fcaca21b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.451319][T11486] RAX: ffffffffffffffda RBX: 00007fcac95e5fa0 RCX: 00007fcac938eec9 [ 436.451331][T11486] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 436.451342][T11486] RBP: 00007fcac9411f91 R08: 0000000000000000 R09: 0000000000000000 [ 436.451353][T11486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.451364][T11486] R13: 00007fcac95e6038 R14: 00007fcac95e5fa0 R15: 00007ffcc0b8df48 [ 436.451384][T11486] [ 436.451390][T11486] [ 436.712838][T11486] Allocated by task 11472: [ 436.717221][T11486] kasan_save_stack+0x33/0x60 [ 436.721871][T11486] kasan_save_track+0x14/0x30 [ 436.726520][T11486] __kasan_kmalloc+0xaa/0xb0 [ 436.731080][T11486] __kmalloc_noprof+0x32f/0x880 [ 436.735911][T11486] security_inode_init_security+0x13f/0x390 [ 436.741780][T11486] shmem_mknod+0x22e/0x450 [ 436.746177][T11486] lookup_open.isra.0+0x11d3/0x1580 [ 436.751348][T11486] path_openat+0x893/0x2cb0 [ 436.755823][T11486] do_filp_open+0x20b/0x470 [ 436.760306][T11486] do_sys_openat2+0x11b/0x1d0 [ 436.764961][T11486] __x64_sys_creat+0xcc/0x120 [ 436.769607][T11486] do_syscall_64+0xcd/0xfa0 [ 436.774081][T11486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.779950][T11486] [ 436.782242][T11486] Freed by task 11472: [ 436.786307][T11486] kasan_save_stack+0x33/0x60 [ 436.791044][T11486] kasan_save_track+0x14/0x30 [ 436.795692][T11486] __kasan_save_free_info+0x3b/0x60 [ 436.800867][T11486] __kasan_slab_free+0x5f/0x80 [ 436.805619][T11486] kfree+0x2b8/0x6d0 [ 436.809489][T11486] security_inode_init_security+0x2eb/0x390 [ 436.815439][T11486] shmem_mknod+0x22e/0x450 [ 436.819859][T11486] lookup_open.isra.0+0x11d3/0x1580 [ 436.825043][T11486] path_openat+0x893/0x2cb0 [ 436.829528][T11486] do_filp_open+0x20b/0x470 [ 436.834008][T11486] do_sys_openat2+0x11b/0x1d0 [ 436.838667][T11486] __x64_sys_creat+0xcc/0x120 [ 436.843311][T11486] do_syscall_64+0xcd/0xfa0 [ 436.847786][T11486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.853648][T11486] [ 436.855945][T11486] The buggy address belongs to the object at ffff888033ecac00 [ 436.855945][T11486] which belongs to the cache kmalloc-256 of size 256 [ 436.869965][T11486] The buggy address is located 48 bytes inside of [ 436.869965][T11486] freed 256-byte region [ffff888033ecac00, ffff888033ecad00) [ 436.883655][T11486] [ 436.885953][T11486] The buggy address belongs to the physical page: [ 436.892339][T11486] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33eca [ 436.901077][T11486] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 436.909545][T11486] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 436.917490][T11486] page_type: f5(slab) [ 436.921444][T11486] raw: 00fff00000000040 ffff88813ff26b40 ffffea0001f10b80 dead000000000005 [ 436.929994][T11486] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 436.938545][T11486] head: 00fff00000000040 ffff88813ff26b40 ffffea0001f10b80 dead000000000005 [ 436.947181][T11486] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 436.955823][T11486] head: 00fff00000000001 ffffea0000cfb281 00000000ffffffff 00000000ffffffff [ 436.964461][T11486] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 436.973094][T11486] page dumped because: kasan: bad access detected [ 436.979486][T11486] page_owner tracks the page as allocated [ 436.985175][T11486] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5187, tgid 5187 (udevadm), ts 20128496182, free_ts 20118877157 [ 437.005297][T11486] post_alloc_hook+0x1c0/0x230 [ 437.010057][T11486] get_page_from_freelist+0x10a3/0x3a30 [ 437.015570][T11486] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 437.021436][T11486] alloc_pages_mpol+0x1fb/0x550 [ 437.026260][T11486] new_slab+0x24a/0x360 [ 437.030386][T11486] ___slab_alloc+0xdc4/0x1ae0 [ 437.035030][T11486] __slab_alloc.constprop.0+0x63/0x110 [ 437.040469][T11486] __kmalloc_cache_noprof+0x477/0x780 [ 437.045812][T11486] inode_doinit_use_xattr+0x54/0x410 [ 437.051068][T11486] inode_doinit_with_dentry+0x10c8/0x12e0 [ 437.056760][T11486] selinux_d_instantiate+0x26/0x30 [ 437.061843][T11486] security_d_instantiate+0x142/0x1a0 [ 437.067188][T11486] d_splice_alias_ops+0x92/0x840 [ 437.072108][T11486] kernfs_iop_lookup+0x23f/0x2d0 [ 437.077019][T11486] lookup_open.isra.0+0x4da/0x1580 [ 437.082126][T11486] path_openat+0x893/0x2cb0 [ 437.086615][T11486] page last free pid 5187 tgid 5187 stack trace: [ 437.092906][T11486] __free_frozen_pages+0x7df/0x1160 [ 437.098076][T11486] qlist_free_all+0x4d/0x120 [ 437.102635][T11486] kasan_quarantine_reduce+0x195/0x1e0 [ 437.108152][T11486] __kasan_slab_alloc+0x69/0x90 [ 437.112984][T11486] kmem_cache_alloc_noprof+0x250/0x6e0 [ 437.118413][T11486] getname_flags.part.0+0x4c/0x550 [ 437.123492][T11486] getname_flags+0x93/0xf0 [ 437.127877][T11486] do_sys_openat2+0xb8/0x1d0 [ 437.132433][T11486] __x64_sys_openat+0x174/0x210 [ 437.137250][T11486] do_syscall_64+0xcd/0xfa0 [ 437.141726][T11486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.147587][T11486] [ 437.149879][T11486] Memory state around the buggy address: [ 437.155475][T11486] ffff888033ecab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 437.163514][T11486] ffff888033ecab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 437.171544][T11486] >ffff888033ecac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 437.179576][T11486] ^ [ 437.185184][T11486] ffff888033ecac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 437.193212][T11486] ffff888033ecad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 437.201240][T11486] ================================================================== [ 437.291433][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 437.291449][ T30] audit: type=1400 audit(1760440863.714:1264): avc: denied { read } for pid=5168 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 437.322684][T11486] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 437.329872][T11486] CPU: 0 UID: 0 PID: 11486 Comm: syz.4.1404 Not tainted syzkaller #0 PREEMPT(full) [ 437.339212][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 437.349242][T11486] Call Trace: [ 437.352496][T11486] [ 437.355414][T11486] dump_stack_lvl+0x3d/0x1f0 [ 437.359982][T11486] vpanic+0x640/0x6f0 [ 437.363951][T11486] panic+0xca/0xd0 [ 437.367642][T11486] ? __pfx_panic+0x10/0x10 [ 437.372029][T11486] ? sysfs_remove_file_ns+0x63/0x70 [ 437.377202][T11486] ? preempt_schedule_common+0x44/0xc0 [ 437.382636][T11486] ? preempt_schedule_thunk+0x16/0x30 [ 437.387984][T11486] check_panic_on_warn+0xab/0xb0 [ 437.392896][T11486] end_report+0x107/0x170 [ 437.397203][T11486] kasan_report+0xee/0x110 [ 437.401609][T11486] ? sysfs_remove_file_ns+0x63/0x70 [ 437.406793][T11486] sysfs_remove_file_ns+0x63/0x70 [ 437.411801][T11486] driver_remove_file+0x4a/0x60 [ 437.416646][T11486] bus_remove_driver+0x224/0x2c0 [ 437.421573][T11486] driver_unregister+0x76/0xb0 [ 437.426318][T11486] comedi_device_detach_locked+0x12f/0xa50 [ 437.432106][T11486] comedi_device_detach+0x67/0xb0 [ 437.437110][T11486] comedi_device_attach+0x43d/0x900 [ 437.442290][T11486] do_devconfig_ioctl+0x1b1/0x710 [ 437.447322][T11486] ? __mutex_lock+0x1c5/0x1060 [ 437.452069][T11486] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 437.457603][T11486] ? find_held_lock+0x2b/0x80 [ 437.462261][T11486] comedi_unlocked_ioctl+0x165d/0x2f00 [ 437.467708][T11486] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 437.473504][T11486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 437.479388][T11486] ? do_vfs_ioctl+0x128/0x14f0 [ 437.484135][T11486] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 437.489141][T11486] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 437.495979][T11486] ? hook_file_ioctl_common+0x145/0x410 [ 437.501506][T11486] ? selinux_file_ioctl+0x180/0x270 [ 437.506691][T11486] ? selinux_file_ioctl+0xb4/0x270 [ 437.511786][T11486] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 437.517590][T11486] __x64_sys_ioctl+0x18e/0x210 [ 437.522356][T11486] do_syscall_64+0xcd/0xfa0 [ 437.526859][T11486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.532736][T11486] RIP: 0033:0x7fcac938eec9 [ 437.537129][T11486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.556714][T11486] RSP: 002b:00007fcaca21b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.565106][T11486] RAX: ffffffffffffffda RBX: 00007fcac95e5fa0 RCX: 00007fcac938eec9 [ 437.573055][T11486] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 437.581006][T11486] RBP: 00007fcac9411f91 R08: 0000000000000000 R09: 0000000000000000 [ 437.588958][T11486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.596911][T11486] R13: 00007fcac95e6038 R14: 00007fcac95e5fa0 R15: 00007ffcc0b8df48 [ 437.604873][T11486] [ 437.608060][T11486] Kernel Offset: disabled [ 437.612355][T11486] Rebooting in 86400 seconds..