last executing test programs: 4m16.783959862s ago: executing program 0 (id=1037): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @local}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000000, 0x2}, 0x50) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xffffffffffffff25, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f00000000c0)={0x28, 0x1, r8, r9, 0x3, 0x8, 0x10}) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x40000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x16c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="001f00"/256], 0x100) sendto$inet6(r11, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400d0121}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x40, 0x2, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}]}, 0x40}}, 0x4000890) 4m16.475615115s ago: executing program 0 (id=1042): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) pipe2(&(0x7f0000019480)={0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00924f00000000000000000000040000000000", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) tee(r0, r1, 0x100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000180)={0x0, r0, 0x30, {0xffffffffffffffc0, 0x800}, 0x9}, 0x1) timer_create(0x3, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000010040)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) timer_create(0x7, &(0x7f0000000000)={0x0, 0x40, 0xc, @thr={&(0x7f0000000100)="acc8a6d7b6b6700690f1cf1056b9ef562628c9536401d63ff2", &(0x7f0000000140)="9a0d8320276407ad17539f6398a67b"}}, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 4m16.341479401s ago: executing program 0 (id=1045): r0 = syz_usb_connect(0x4, 0x36, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x18, 0x5, "d83731604b"}, 0x0, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m15.719636879s ago: executing program 0 (id=1055): open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x80000308) (fail_nth: 3) 4m15.571754173s ago: executing program 0 (id=1057): r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) inotify_init1(0x80800) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r0, 0x20, &(0x7f00000003c0)={&(0x7f0000000280)=""/238, 0xee, 0x0, &(0x7f0000000380)=""/43, 0x2b}}, 0x10) socket$inet6(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x3, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_buf(r5, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) userfaultfd(0x80001) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000480)={0x0, 0x2, 0x8000, 0xfffffffe, 0x12b}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc3ae, 0x1, 0x1000000, 0x318}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6f, 0x400, 0x0, 0x1ea, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.freeze\x00', 0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r7) 4m15.159518329s ago: executing program 0 (id=1060): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000100), 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)={0x1, [0x0]}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000007c0)={r3, 0x8}, &(0x7f0000000800)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030328bd7000fbdbdf250a00000008000300", @ANYRES32=r4, @ANYBLOB="b6db40659f31c57c756f4e7eb21757295c59fd39e7575bad1a3bd1a00f3986fa9c0cc5a95c714890ded11d87c4fc434073299928b92a06e4bc66e8b9237fc48aba99ddd7d81d08d72af2a6c5a03783faf882f73c80314c78e3ab45e003efb0a526065734dca8e412643d8bcd56d350bfd94568733f6a775e141e7e34bee313248463c55b5349990f43227e57e70ef258629115a3c11d133c24dd267f2ac5"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) sendmmsg(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)=@ll={0x11, 0x2, r4, 0x1, 0x3, 0x6, @remote}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[{0xd8, 0x116, 0x8, "41cb14b8e8bc5462f166588f1f879a28574fbac290834fd90cb59bb83a875a5b7c71277e4f8f830fa5a686c0b19af7c2dcfcdf62b0a22b520966500a4df22048d2911b43cf90ce7f5271c57970350fd433f94f537f87e5f09f2c69aa26d06a2ffdb74e9db74755fa62f61e8819ab6da08b9e2fa259e8d93f16c9d11fdb028b4ff113051c2af62e6775d2cd6697719b9d78fe88debedfba76189d11bc97e8a27e040c5d38bb46af43ab0724faefcd1fa50e10d1b257b897d6ba5f042047db1a8f7393b634a7c96275"}, {0x28, 0x115, 0x3, "2574a3f8fcd5b4eed814594fd817d684ab"}, {0xf8, 0x10d, 0xf06, "eff62041f700f81365476cb5a5a9f098c62f923ba3c7392b15ae4d00f424e5b09b048a73a4dbd8b5984bfc7edf1b5a6f1a23478803d2d88d27fe73e47706a1a34b99b3db30258b4f23df7a525122a135a7ce02ab804b21dbc6c91da526ddede135cecec18f0978ba56051332845c1e3f9eb266c45289bc94386ccd95d740754654673d98aeecaaf9bd8a30fb84b7d4b0d8bb34f853cd0861acf1293e4ac424593e615bff3fa4d3d5e13920018addfb3455d9c805c6b3a52e90ed734f4a25d28b1f1364135b318847635ea193a9eb53fe8f232b81a7887b02bef24a3f5424525a29d8955ac5"}, {0xc0, 0x10f, 0x8, "405b7f4fe21aef53013bf85dbeb81327b74a683f60b82f59334ef5cbe85fd74f01a56189e0416bdd37ec72935f72d27a2b4cc933853ec8aa59dc81cf3eface68681136a962b10ba6d4be21fe4bed181be3703fc2a6bd97ea82f679160c14021aeeb0280b5fd01448775a7b89d406b96c55da59aa6ebf9a48cd14767c92a62ead4a87b77de36c6920ae9433ba1f85758e5974f748a163c849d324081c319cf2b77be68c2831fc4f9f444ae1957b7ab1ac"}, {0x110, 0x118, 0x8, "77316b0df7ea59a42b8f0d232646a7b3903799b22e2ea52d488caba3455bf9979a20b455d0426eb11b5bb02ceb3d82e7ba3f168bdf9dbec5846981c792cb8f122642e073446e2ff5bf50f3792936eae8cb39e8764c54381e1a5f0a58328c65bed3e1ff3cbc2085f005afefa364367e2d3ec3eb8d6de821b3fd1921b7fbcae157344daeeee666305ff49395fad93a132d87039c8a0bdf8edcb52ea53765fa7fe81870d763c39dc6c586c82dfe000ce235823d5af104f83a30a8280372365bb52d0025796dcde8ff907d21e49ad44995ce099b6242413337be2b92569904b41d2d744e148ea099d6e177c9202e8ac7bdb89c0ebed5e78c6b5716b2b381"}, {0x68, 0xb8, 0x0, "d850e0956a7fd1493fdcb1288f6fda95fbaa387f065f0805a9ea756d7d6c7213c6639bd1b7195172e37483f5ce5ceb6739b2a6c92e346424c95b6356eb72a8351dcc251c3ee4cd0538e91fffb508f8b48a5cd08498"}, {0x40, 0x10b, 0x8, "16ea1d9013a25b85952375ee1521ac58a00918bffc8a240647f9175b6edb7960d7f23a4b3b0e2c9748"}, {0xa0, 0x10f, 0x4, "7be72f04e7805d58335ad8016b9c3240059e9cb9886a6f4f6d4828c05f984ce7f835c9c4035fad442e25179e479530aaa9446d678d44623fd9733e2cbf3c2caa830916a41e87b8190dbd36cea823c0f0d53c93627582c8ca978a95206f0aef1e7759080d0cf056a2b4f15c1fb5fb4df98e4c719817a171e929c08d945672cb67aa558cb221341188b0d6"}, {0x60, 0x101, 0xb248, "2ebf4f13e8edc4731bb9b652987185ab72806cffc7f85e230b4bf5bd42874b0f0217e6220b5b644b725364cb8f714a93e2b79ad5bc4e84ccca82a0f3fc63227489aa9251edb5f687dc"}], 0x570}}], 0x1, 0x20000014) r6 = shmget$private(0x0, 0x400000, 0x200, &(0x7f000000e000/0x400000)=nil) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_KEEP_ORPHAN(r7, 0x2288, &(0x7f0000000080)) shmctl$SHM_LOCK(r6, 0xb) 4m14.82278203s ago: executing program 32 (id=1060): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000100), 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)={0x1, [0x0]}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000007c0)={r3, 0x8}, &(0x7f0000000800)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030328bd7000fbdbdf250a00000008000300", @ANYRES32=r4, @ANYBLOB="b6db40659f31c57c756f4e7eb21757295c59fd39e7575bad1a3bd1a00f3986fa9c0cc5a95c714890ded11d87c4fc434073299928b92a06e4bc66e8b9237fc48aba99ddd7d81d08d72af2a6c5a03783faf882f73c80314c78e3ab45e003efb0a526065734dca8e412643d8bcd56d350bfd94568733f6a775e141e7e34bee313248463c55b5349990f43227e57e70ef258629115a3c11d133c24dd267f2ac5"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) sendmmsg(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)=@ll={0x11, 0x2, r4, 0x1, 0x3, 0x6, @remote}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[{0xd8, 0x116, 0x8, "41cb14b8e8bc5462f166588f1f879a28574fbac290834fd90cb59bb83a875a5b7c71277e4f8f830fa5a686c0b19af7c2dcfcdf62b0a22b520966500a4df22048d2911b43cf90ce7f5271c57970350fd433f94f537f87e5f09f2c69aa26d06a2ffdb74e9db74755fa62f61e8819ab6da08b9e2fa259e8d93f16c9d11fdb028b4ff113051c2af62e6775d2cd6697719b9d78fe88debedfba76189d11bc97e8a27e040c5d38bb46af43ab0724faefcd1fa50e10d1b257b897d6ba5f042047db1a8f7393b634a7c96275"}, {0x28, 0x115, 0x3, "2574a3f8fcd5b4eed814594fd817d684ab"}, {0xf8, 0x10d, 0xf06, "eff62041f700f81365476cb5a5a9f098c62f923ba3c7392b15ae4d00f424e5b09b048a73a4dbd8b5984bfc7edf1b5a6f1a23478803d2d88d27fe73e47706a1a34b99b3db30258b4f23df7a525122a135a7ce02ab804b21dbc6c91da526ddede135cecec18f0978ba56051332845c1e3f9eb266c45289bc94386ccd95d740754654673d98aeecaaf9bd8a30fb84b7d4b0d8bb34f853cd0861acf1293e4ac424593e615bff3fa4d3d5e13920018addfb3455d9c805c6b3a52e90ed734f4a25d28b1f1364135b318847635ea193a9eb53fe8f232b81a7887b02bef24a3f5424525a29d8955ac5"}, {0xc0, 0x10f, 0x8, "405b7f4fe21aef53013bf85dbeb81327b74a683f60b82f59334ef5cbe85fd74f01a56189e0416bdd37ec72935f72d27a2b4cc933853ec8aa59dc81cf3eface68681136a962b10ba6d4be21fe4bed181be3703fc2a6bd97ea82f679160c14021aeeb0280b5fd01448775a7b89d406b96c55da59aa6ebf9a48cd14767c92a62ead4a87b77de36c6920ae9433ba1f85758e5974f748a163c849d324081c319cf2b77be68c2831fc4f9f444ae1957b7ab1ac"}, {0x110, 0x118, 0x8, "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"}, {0x68, 0xb8, 0x0, "d850e0956a7fd1493fdcb1288f6fda95fbaa387f065f0805a9ea756d7d6c7213c6639bd1b7195172e37483f5ce5ceb6739b2a6c92e346424c95b6356eb72a8351dcc251c3ee4cd0538e91fffb508f8b48a5cd08498"}, {0x40, 0x10b, 0x8, "16ea1d9013a25b85952375ee1521ac58a00918bffc8a240647f9175b6edb7960d7f23a4b3b0e2c9748"}, {0xa0, 0x10f, 0x4, "7be72f04e7805d58335ad8016b9c3240059e9cb9886a6f4f6d4828c05f984ce7f835c9c4035fad442e25179e479530aaa9446d678d44623fd9733e2cbf3c2caa830916a41e87b8190dbd36cea823c0f0d53c93627582c8ca978a95206f0aef1e7759080d0cf056a2b4f15c1fb5fb4df98e4c719817a171e929c08d945672cb67aa558cb221341188b0d6"}, {0x60, 0x101, 0xb248, "2ebf4f13e8edc4731bb9b652987185ab72806cffc7f85e230b4bf5bd42874b0f0217e6220b5b644b725364cb8f714a93e2b79ad5bc4e84ccca82a0f3fc63227489aa9251edb5f687dc"}], 0x570}}], 0x1, 0x20000014) r6 = shmget$private(0x0, 0x400000, 0x200, &(0x7f000000e000/0x400000)=nil) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_KEEP_ORPHAN(r7, 0x2288, &(0x7f0000000080)) shmctl$SHM_LOCK(r6, 0xb) 2m22.691272566s ago: executing program 3 (id=1434): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2m22.536427828s ago: executing program 3 (id=1435): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @mcast2, 0x8}, 0x1c) r3 = userfaultfd(0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000340)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) 2m19.121185552s ago: executing program 3 (id=1446): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004280)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) (fail_nth: 1) 2m18.695708433s ago: executing program 3 (id=1448): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x30, 0x0, 0xfffffffffffffeb9}, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000240)={0x8, 0x4, 0x9a}) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 2m18.474482536s ago: executing program 3 (id=1450): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockname$llc(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xcaa81, 0x181) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x28}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, 0x0, 0x20048000) 2m16.011503631s ago: executing program 3 (id=1456): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x6, &(0x7f0000006680)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) r4 = fsopen(&(0x7f0000000080)='overlay\x00', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b200090585"], 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000040)=0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) 2m15.285488115s ago: executing program 33 (id=1456): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x6, &(0x7f0000006680)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) r4 = fsopen(&(0x7f0000000080)='overlay\x00', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b200090585"], 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000040)=0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) 15.106266122s ago: executing program 2 (id=2142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="000008000340000104000500010001000000f40000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x804) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r4, 0x0, 0xd0, &(0x7f0000000100), &(0x7f0000000140)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa4, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x990}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40010}, 0x24000000) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f00000000c0)='dirsync\x00', 0x0, r7) bind$xdp(r2, &(0x7f0000000380)={0x2c, 0xa, 0x0, 0x28, r7}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcc7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x400000000000000, 0x0, 0x10}, 0x84) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x6, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 13.627921274s ago: executing program 2 (id=2144): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x8000, 0x1}) ioctl$TCXONC(r0, 0x540a, 0x1) 13.430984806s ago: executing program 2 (id=2147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x28, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008008}, 0x4800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001400050000000000000000002d000000010000000500010008000000"], 0x24}}, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf00b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x8, 0xc5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000100)={0x7, 0x400}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) migrate_pages(0x0, 0x3, &(0x7f00000001c0)=0x7f, &(0x7f0000000300)=0xa) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d000000000000000101000005000100080000000800040001000000"], 0x2c}}, 0x0) socket(0x2d, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, 0x0) 10.182925797s ago: executing program 2 (id=2185): socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x341102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000880)={0x0, 0x0, "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", "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"}) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioperm(0x3, 0x5, 0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) 6.317279972s ago: executing program 2 (id=2195): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x810, 0xffffffffffffffff, 0x2000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000018000000c00030800c000180050002000300000024000300dfd722cbab076333ca4e235b39549b844c1274eb199053609ab6602334a8ff37140001800500020000000000080001000100000064000180080001000200000008000400000800003400038006000300a1aa000006000300a0aa00000800020002000000060001000300000006000100ffff000006000300ffff000005000200010000000c000500ff0f000000000000080004008948ffff14000400bc61f114f5399db1c47400dc8650a12d08000300", @ANYRES32], 0xdc}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='veth1_macvtap\x00', 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x2000001}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x4, 0x0, 0xb49, 0x100000000009, 0x8, 0xfffffffe, 0x3}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000f"], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581", @ANYRES8], 0x0) mlock(&(0x7f0000588000/0x1000)=nil, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) fsopen(&(0x7f00000003c0)='ubifs\x00', 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 6.027092491s ago: executing program 6 (id=2198): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') preadv(r0, &(0x7f00000001c0), 0x0, 0x8, 0xffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0xe, 0x4, 0x348, 0xffffffff, 0xd0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1b, 0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}, {{@ipv6={@mcast1, @local, [0xff, 0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xffffffff, 0xff], 'veth1_vlan\x00', 'pim6reg0\x00', {0xff}, {}, 0x33, 0x2, 0x7, 0x2a}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x2}, {0x2, 0x1, 0x1}, 0x0, 0x80000001}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x9dc36dfc48d17a66) symlinkat(&(0x7f0000000200)='./file1\x00', r0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000001b00)={0x2020}, 0x2020) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x3f) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1e, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001040000000000000800000018150000", @ANYRES32=0x1, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000006bc5030062f000000103080006000000652620000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183000000200000000000000000000000d990600ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000efe800007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x64, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003b7431087d077a6210000102030109022400010000000009040000020338b20009050e0000000000000905b3"], 0x0) 5.456549983s ago: executing program 4 (id=2202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.315936391s ago: executing program 4 (id=2203): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) semop(0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x2000}], 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000200)={0xc, r4}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000200)={0xc, r4}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x4) (async) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000780)='^\x8a\x983be\fe1i\x1b\x05Q\x886\xa7\x12f\x14L\x9b\xe0\xdc^\x8e\xa5\x84\xden\xef\x8e\xb0sr\xcb\x9e\xb5ko\xf8\xfb\xc7`Ei\xdc\xb2\x1a\x06\xc0\xeb\x1fg\xf2\x05\xae\xa2y.\x7fAY\xac~|\x19\xf0\x90\xcc\x1d\xe6\xc5\xcc\xeaJ\xfdi\xdf\x8fD\xc3%\x1a]\xa5\xa9,\x9f\xd6\xaf\x8a\"\x9bu\xf4\x00iK\x10%E\x11|\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x80iz\x9bA\x9c\x19\xa1\xba,G\xd2\x0f\xe5\\b\xfe\x84H\xd5\x03y\xaeq\xaeL\xacBX<\xeb\a\'a\xcc\xf4#R\xafj??\xae\t\x1e\xfa\xb7l\xf8\x88\xde\xc0\x1a-\x84\xac\x18\x05\xb1k\x8f\xab>c\xe6\x04\xafr*\xd1yD\x12p\xd0\xfdg\xb7\xa3<\x15F\x10\xe5\xfae7\xbc\xdb\x93:\x84\xe7\xf2\x1c\xed*\xd1{\xaf\xd1\xed\r\xda\xe8\xd5\x0e\x97\xbb\x7f\xdeDO\x16\xca\xb8\x05\x82T!\xa9)\xed\xb4\x97\xae\xd4\xaaPH\x94\x99-)\x1a', 0x0, r1) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='[\x00', &(0x7f0000000100)="0c64fe93f41706623bd0f66dae128e085422348afecc83f2adbdb73c7b925bb3f7f8980a1588ca99ded63e30c004efa342c99c88aa38b6cb52dfa91972fca51d5a3d7ea4820f50b5fc75fd3e", 0x4c) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) (async) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac2(r5, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="070004000000feffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac2(r5, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="070004000000feffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.721093197s ago: executing program 1 (id=2204): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001800)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3d0, 0x2e0, 0x2e0, 0x3d0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0xfc00, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x1, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0xff, 0x4}, {0x0, 0x4, 0x0, 0x5}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x7}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe, 0x0, 0x0, 0xe84}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04, 0xfe}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x6, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {0x4}, {0x8}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x3}, {0x0, 0xb}, {0x4, 0x2, 0x7f}]}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x6}, {0x4, 0x3, 0x1}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x3, 0x4}, {0x2, 0x2, 0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5fc3866b18744b23) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040051}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c200040eaaaaaaaaaabb080045000078fffcee1c8ad1c4775b2676eae76f000000019078ac1e0001ac1414aa0400907803000000470000000000002f0000ac1414bbe0000002440c0201ac1414bb00000005862e0000000306020002020fd109567cb50ec760777fb80755050bc92d3002d91d907b630002020684924d8905020b000000000005ade34b000000000000"], 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x29, 0x2}, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.stat\x00', 0x26e1, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000000)=0x9) lseek(r2, 0x54, 0x3) mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0xb635773f06ebbeee, 0x10, r2, 0xfffff000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='nfs4\x00', 0x1214040, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x6e, [0x6e, 0xa, 0x6, 0x7, 0x10001, 0x2], 0x0, &(0x7f0000000400), &(0x7f0000000480)=""/110}, &(0x7f0000000640)=0x78) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x2400c040) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r6, &(0x7f0000000580)=""/174, 0xff56) openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi1\x00', 0x30801, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x8, &(0x7f0000000400)=r2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffd9b, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x404d090}, 0x8850) 3.979663418s ago: executing program 6 (id=2207): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0xe9c, {"0d06d96fff2900", "3dfa7700", "0000ff4a70f300"}, 0x4000c, 0x4}) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000100)=0xe256) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='8\x00', 0x2) 3.931570912s ago: executing program 1 (id=2208): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x50) 3.910269276s ago: executing program 6 (id=2209): ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) clock_gettime(0x0, &(0x7f0000000040)) fstatfs(0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, 0x0, 0x8400, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa0}}, 0x0) 3.747559021s ago: executing program 4 (id=2210): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) timer_create(0x0, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x3, &(0x7f0000000140)={0x400, 0x6}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0x0, 0x0) ftruncate(r1, 0x6000809) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="dc9ebe30", 0x4}], 0x2}, 0x0) 3.747256938s ago: executing program 1 (id=2211): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x12000, 0x7, 0x3}, 0x30, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioprio_get$uid(0x3, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1, 0x0, 0x3ff}}}}}}}, 0x0) landlock_restrict_self(r1, 0xf) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 2.337045571s ago: executing program 4 (id=2212): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002400)={&(0x7f0000001340)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002380)=[{&(0x7f0000001380)='\v', 0x1}], 0x1, &(0x7f00000023c0)=ANY=[@ANYBLOB="200000000000000084000000020000000800410009000000c0", @ANYRES32=0x0, @ANYBLOB="18"], 0x38, 0x20000000}, 0x8040) 2.297253699s ago: executing program 6 (id=2213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.111551876s ago: executing program 6 (id=2215): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x3, 0x2c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x400000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="180900000000000000bd7002fadbdf25010000000400ae809a0339004da02a61ac232c305b558598d452f7e5d8962722808e5fda393f1a896de81d97f1dba8f4dd707ef517cf19e4d7c0f9ebfbcb82664adbaf2fe0c8492e1f37f5574154700a24a52ba82ec4d650290bd12091b00cc65ac48a8cc7fc99dd275870825993f225e5dfdbf4b1c51a0a6ca9d19b468d84f680b671748edea436f09632bd1ab9bb211e1bb3e6d6e235592bc0056407d48324a3953aba117247ba2890c4ffa3029abee10b9bde38097289cd4b58bc232b52208c4c8cf6c9bab494ca1e229e61f46009d4f5643d50fe6b"], 0x18}}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64$ublk_ch(0xffffffffffffffff, &(0x7f0000001f80)=@buf_max_buf, 0x1000, 0xa) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000001c0)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000ac0)={0x0, 0xd0}, &(0x7f0000000b00)=0x8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) 2.100218693s ago: executing program 5 (id=2216): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x18, 0x0, &(0x7f00000003c0)="b34715ec070050d3abc89b6f7bece076462558cba4b72975", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.959601652s ago: executing program 2 (id=2217): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='2\x00', 0x1) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf255e00000008000300", @ANYRES32=r3, @ANYBLOB="2d518723c65889c9940051095577b20bd26c3bc063deb88a26"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 1.909319769s ago: executing program 5 (id=2218): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="001136381b", 0x5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) 1.899402303s ago: executing program 1 (id=2219): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0xe9c, {"0d06d96fff2900", "3dfa7700", "0000ff4a70f300"}, 0x4000c, 0x4}) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000100)=0xe256) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='8\x00', 0x2) 1.739619303s ago: executing program 5 (id=2220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0xf5ff, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x6}}, 0x94}}, 0x0) 1.738500664s ago: executing program 1 (id=2221): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='addr\x00', &(0x7f0000000080)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='xprtsec\x00', &(0x7f0000000100)='tls\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='cert_serial\x00', &(0x7f0000000180)='1234\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x14, 0x0, 0x70bd2d, 0x0, {0x2, 0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x14) syz_open_dev$ttys(0xc, 0x2, 0x0) 1.543080417s ago: executing program 5 (id=2222): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000708000/0x4000)=nil, &(0x7f000081f000/0x3000)=nil, 0x4000, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}], 0x2}], 0x1, 0x400c0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000000)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x4d, 0x400c080) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x50) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) 748.352513ms ago: executing program 1 (id=2223): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r2, &(0x7f00000000c0)='./cgroup\x00', r2, &(0x7f0000000300)='./cgroup\x00', 0x4) ioctl$TCXONC(r1, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) semop(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r4, &(0x7f0000000000)=[@t={0x81, 0x5, 0x0, 0x1, @generic=0xf}], 0x8) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x5, 0x3, 0x4, @generic=0xffffe861}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x1000, 0x3], 0x4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x30, 0x0) mq_notify(r6, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x40880) mkdir(&(0x7f00000001c0)='./file0\x00', 0x21) ioctl$KIOCSOUND(r5, 0x4b2f, 0x7) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 632.584317ms ago: executing program 6 (id=2224): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000002c40)) r0 = io_uring_setup(0x2817, &(0x7f0000000340)={0x0, 0xeec2, 0x400, 0x1, 0x116}) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x21) close(0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x37, 0xd7, 0x81, 0x10, 0x9022, 0xd632, 0xd781, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xce, 0x9, 0x10, 0x2, "", [{{0x9, 0x4, 0x42, 0x7, 0x0, 0xd6, 0x5f, 0x3, 0xff}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) syz_open_dev$char_usb(0xc, 0xb4, 0x3) read(r0, &(0x7f0000000080)=""/249, 0xf9) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000040)={0x6, 0x7, 0x10021da0, 0x10000, 0xff, "42f407000000195a14c84953dc7e8e5aec7776", 0xfffffffe}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400, 0x7, &(0x7f0000000000)) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 508.097206ms ago: executing program 5 (id=2225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 450.8721ms ago: executing program 4 (id=2226): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0, 0x0, 0xffff0000}]) 380.315491ms ago: executing program 5 (id=2227): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioperm(0x0, 0x6, 0x8000000000004) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r4, 0x0, 0x0, 0x60, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x0, 0x4af6}, {0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x3, 0x0, 0x2}, {0xeda7, 0x4, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xff, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000002, 0x1, 0xffffffffffdffff7, 0x0, 0x5, 0x2404cb, 0x7ffffff, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0x2, 0x2000000000003ff, 0x80000000002], 0x3000, 0x200306}) 0s ago: executing program 4 (id=2228): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000080)="0100000000000000000000000a0000000a0000000a000000030000002000000020000000010000000100") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000101)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000102)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000103)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000104)=0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000105)=0xf9) kernel console output (not intermixed with test programs): 190 [ 332.738610][T11155] sysfs_warn_dup.cold+0x1c/0x28 [ 332.738634][T11155] sysfs_create_dir_ns+0x24b/0x2b0 [ 332.738662][T11155] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 332.738686][T11155] ? find_held_lock+0x2b/0x80 [ 332.738701][T11155] ? kobject_add_internal+0x25f/0x930 [ 332.738723][T11155] ? kobject_add_internal+0x25f/0x930 [ 332.738748][T11155] ? class_dir_child_ns_type+0xd/0x60 [ 332.738772][T11155] kobject_add_internal+0x2c8/0x930 [ 332.738799][T11155] kobject_add+0x16a/0x1e0 [ 332.738821][T11155] ? __pfx_kobject_add+0x10/0x10 [ 332.738845][T11155] ? get_device_parent+0x1b3/0x4c0 [ 332.738866][T11155] ? kobject_put+0xb9/0x640 [ 332.738893][T11155] device_add+0x294/0x1970 [ 332.738916][T11155] ? lockdep_init_map_type+0x5c/0x250 [ 332.738941][T11155] ? __pfx_device_add+0x10/0x10 [ 332.738962][T11155] ? lockdep_init_map_type+0x5c/0x250 [ 332.738982][T11155] ? __init_waitqueue_head+0xca/0x150 [ 332.739010][T11155] tty_register_device_attr+0x388/0x7f0 [ 332.739030][T11155] ? lockdep_init_map_type+0x5c/0x250 [ 332.739050][T11155] ? __pfx_tty_register_device_attr+0x10/0x10 [ 332.739075][T11155] ? tty_port_init+0x156/0x1c0 [ 332.739098][T11155] gsm_activate_mux+0x155/0x2a0 [ 332.739120][T11155] gsmld_ioctl+0x346/0x15c0 [ 332.739146][T11155] ? kasan_quarantine_put+0x104/0x240 [ 332.739165][T11155] ? __pfx_gsmld_ioctl+0x10/0x10 [ 332.739190][T11155] ? __ldsem_down_read_nested+0xf3/0x890 [ 332.739217][T11155] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 332.739246][T11155] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 332.739266][T11155] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 332.739284][T11155] ? __pfx_gsmld_ioctl+0x10/0x10 [ 332.739309][T11155] tty_ioctl+0x11b4/0x1640 [ 332.739330][T11155] ? __pfx_tty_ioctl+0x10/0x10 [ 332.739349][T11155] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 332.739387][T11155] ? __fget_files+0x215/0x3d0 [ 332.739403][T11155] ? hook_file_ioctl_common+0x140/0x440 [ 332.739427][T11155] ? selinux_file_ioctl+0x13b/0x290 [ 332.739452][T11155] ? selinux_file_ioctl+0xb6/0x290 [ 332.739479][T11155] ? __pfx_tty_ioctl+0x10/0x10 [ 332.739503][T11155] __x64_sys_ioctl+0x18e/0x210 [ 332.739529][T11155] do_syscall_64+0x115/0x870 [ 332.739547][T11155] ? clear_bhb_loop+0x40/0x90 [ 332.739567][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.739583][T11155] RIP: 0033:0x7fa2c659e019 [ 332.739598][T11155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.739619][T11155] RSP: 002b:00007fa2c737e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.739635][T11155] RAX: ffffffffffffffda RBX: 00007fa2c6826090 RCX: 00007fa2c659e019 [ 332.739646][T11155] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 332.739655][T11155] RBP: 00007fa2c663500c R08: 0000000000000000 R09: 0000000000000000 [ 332.739665][T11155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.739674][T11155] R13: 00007fa2c6826128 R14: 00007fa2c6826090 R15: 00007ffe93fd1cb8 [ 332.739697][T11155] [ 332.747786][T11155] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 332.779860][ T5713] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 333.204662][ T5713] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 333.223480][T11162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.274702][ T5713] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 333.321945][ T5713] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 333.322015][ T5713] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 333.322052][ T5713] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.330213][T11136] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 333.890535][ T5713] usb 7-1: USB disconnect, device number 6 [ 333.995045][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 334.146036][ T5706] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 334.310773][ T5706] usb 2-1: Using ep0 maxpacket: 32 [ 334.327990][ T5706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.338868][ T5706] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.397351][ T5706] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 334.407753][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.416707][ T5706] usb 2-1: Product: syz [ 334.439865][ T5706] usb 2-1: Manufacturer: syz [ 334.445769][ T5706] usb 2-1: SerialNumber: syz [ 334.477774][ T5706] usb 2-1: config 0 descriptor?? [ 335.426787][T11191] fuse: Bad value for 'fd' [ 335.522350][T11195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.600001][T11195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.634976][T11202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.662954][T11200] Invalid argument reading file caps for ./file0 [ 335.706258][T11206] fuse: fd is not a fuse device [ 335.837827][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 335.837857][ T30] audit: type=1800 audit(2000000232.884:240469): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 336.616401][ T30] audit: type=1800 audit(2000000233.664:240470): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 336.863513][ T30] audit: type=1800 audit(2000000233.914:240471): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 337.021361][ T30] audit: type=1800 audit(2000000234.064:240472): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 337.167062][ T30] audit: type=1800 audit(2000000234.214:240473): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 337.552775][ T30] audit: type=1800 audit(2000000234.604:240474): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 337.855510][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1728'. [ 337.865699][T11242] bridge_slave_1: left allmulticast mode [ 337.871896][T11242] bridge_slave_1: left promiscuous mode [ 337.882144][T11242] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.897618][ T30] audit: type=1800 audit(2000000234.864:240475): pid=11242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1728" name="reclaim" dev="sysfs" ino=1147 res=0 errno=0 [ 338.370304][T11242] bridge_slave_0: left allmulticast mode [ 338.376667][T11242] bridge_slave_0: left promiscuous mode [ 338.389268][T11242] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.214138][ T30] audit: type=1800 audit(2000000236.244:240476): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 339.309079][ T805] usb 2-1: USB disconnect, device number 19 [ 339.400908][ T30] audit: type=1800 audit(2000000236.254:240477): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 339.463242][ T30] audit: type=1400 audit(2000000236.314:240478): avc: denied { setopt } for pid=11253 comm="syz.6.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 339.613623][T11262] Invalid argument reading file caps for ./file0 [ 339.842836][ T5705] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 339.934589][T11271] fuse: Unknown parameter 'fd0xffffffffffffffff0000000000000000000000000000000000000003' [ 340.043155][ T5705] usb 7-1: Using ep0 maxpacket: 32 [ 340.084503][ T5705] usb 7-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 340.130801][ T5705] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 340.196734][ T5705] usb 7-1: config 0 interface 0 has no altsetting 0 [ 340.248193][ T5705] usb 7-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 340.300291][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.301425][T11270] file system registered [ 340.317255][T11270] unloading [ 340.340572][ T5705] usb 7-1: config 0 descriptor?? [ 340.810453][T11280] IPv6: addrconf: prefix option has invalid lifetime [ 340.842333][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 340.842365][ T30] audit: type=1400 audit(2000000237.794:240496): avc: denied { map } for pid=11277 comm="syz.5.1738" path="socket:[31132]" dev="sockfs" ino=31132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 341.180736][ T30] audit: type=1400 audit(2000000237.794:240497): avc: denied { read } for pid=11277 comm="syz.5.1738" path="socket:[31132]" dev="sockfs" ino=31132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 341.702837][ T30] audit: type=1800 audit(2000000238.744:240498): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 341.839009][ T30] audit: type=1800 audit(2000000238.784:240499): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195432 res=0 errno=0 [ 341.873416][ T5705] usbhid 7-1:0.0: can't add hid device: -71 [ 341.907703][ T5705] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 341.923910][ T5705] usb 7-1: USB disconnect, device number 7 [ 342.018031][ T30] audit: type=1800 audit(2000000238.944:240500): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 342.051635][ T30] audit: type=1800 audit(2000000239.034:240501): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 342.133505][ T30] audit: type=1800 audit(2000000239.154:240502): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 342.157217][T11293] fuse: fd is not a fuse device [ 342.187370][ T30] audit: type=1400 audit(2000000239.214:240503): avc: denied { write } for pid=11294 comm="syz.1.1744" name="rd_mcp_0" dev="configfs" ino=22883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.211681][ T30] audit: type=1400 audit(2000000239.214:240504): avc: denied { write } for pid=11294 comm="syz.1.1744" name="rd_mcp_0" dev="configfs" ino=22883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.245408][ T190] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 342.323574][ T30] audit: type=1400 audit(2000000239.374:240505): avc: denied { write } for pid=11297 comm="syz.5.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 342.547465][ T190] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 342.557590][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.576467][ T190] usb 3-1: config 0 descriptor?? [ 342.819147][ T190] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 343.065083][ T190] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 343.075281][ T190] [drm] Initialized udl on minor 2 [ 343.341108][T11318] xt_TPROXY: Can be used only with -p tcp or -p udp [ 343.776233][ T190] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 343.796024][ T190] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 343.806457][ T5714] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 343.816776][ T190] usb 3-1: USB disconnect, device number 24 [ 343.823559][ T5714] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 345.820773][T11334] fuse: fd is not a fuse device [ 345.967809][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 345.967840][ T30] audit: type=1400 audit(2000000242.934:240526): avc: denied { connect } for pid=11330 comm="syz.4.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 346.406893][ T30] audit: type=1400 audit(2000000242.934:240527): avc: denied { create } for pid=11330 comm="syz.4.1753" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 346.468112][T11345] 9p: Bad value for 'wfdno' [ 346.615294][ T30] audit: type=1800 audit(2000000243.314:240528): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 346.638905][ T30] audit: type=1800 audit(2000000243.444:240529): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196360 res=0 errno=0 [ 346.800106][ T30] audit: type=1800 audit(2000000243.714:240530): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 346.865395][ T30] audit: type=1800 audit(2000000243.744:240531): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 346.921425][T11355] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 346.930863][T11355] CPU: 1 UID: 0 PID: 11355 Comm: syz.2.1761 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.930894][T11355] Tainted: [L]=SOFTLOCKUP [ 346.930900][T11355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 346.930909][T11355] Call Trace: [ 346.930915][T11355] [ 346.930921][T11355] dump_stack_lvl+0x100/0x190 [ 346.930949][T11355] sysfs_warn_dup.cold+0x1c/0x28 [ 346.930976][T11355] sysfs_create_dir_ns+0x24b/0x2b0 [ 346.931003][T11355] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 346.931028][T11355] ? find_held_lock+0x2b/0x80 [ 346.931044][T11355] ? kobject_add_internal+0x25f/0x930 [ 346.931069][T11355] ? kobject_add_internal+0x25f/0x930 [ 346.931096][T11355] ? class_dir_child_ns_type+0xd/0x60 [ 346.931125][T11355] kobject_add_internal+0x2c8/0x930 [ 346.931156][T11355] kobject_add+0x16a/0x1e0 [ 346.931183][T11355] ? __pfx_kobject_add+0x10/0x10 [ 346.931211][T11355] ? get_device_parent+0x1b3/0x4c0 [ 346.931234][T11355] ? kobject_put+0xb9/0x640 [ 346.931264][T11355] device_add+0x294/0x1970 [ 346.931289][T11355] ? lockdep_init_map_type+0x5c/0x250 [ 346.931313][T11355] ? __pfx_device_add+0x10/0x10 [ 346.931338][T11355] ? lockdep_init_map_type+0x5c/0x250 [ 346.931361][T11355] ? __init_waitqueue_head+0xca/0x150 [ 346.931393][T11355] tty_register_device_attr+0x388/0x7f0 [ 346.931418][T11355] ? lockdep_init_map_type+0x5c/0x250 [ 346.931443][T11355] ? __pfx_tty_register_device_attr+0x10/0x10 [ 346.931472][T11355] ? tty_port_init+0x156/0x1c0 [ 346.931498][T11355] gsm_activate_mux+0x155/0x2a0 [ 346.931529][T11355] gsmld_ioctl+0x346/0x15c0 [ 346.931562][T11355] ? kasan_quarantine_put+0x104/0x240 [ 346.931584][T11355] ? __pfx_gsmld_ioctl+0x10/0x10 [ 346.931613][T11355] ? __ldsem_down_read_nested+0xf3/0x890 [ 346.931643][T11355] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 346.931673][T11355] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 346.931694][T11355] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 346.931714][T11355] ? __pfx_gsmld_ioctl+0x10/0x10 [ 346.931737][T11355] tty_ioctl+0x11b4/0x1640 [ 346.931763][T11355] ? __pfx_tty_ioctl+0x10/0x10 [ 346.931783][T11355] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 346.931818][T11355] ? __fget_files+0x215/0x3d0 [ 346.931835][T11355] ? hook_file_ioctl_common+0x140/0x440 [ 346.931862][T11355] ? selinux_file_ioctl+0x13b/0x290 [ 346.931887][T11355] ? selinux_file_ioctl+0xb6/0x290 [ 346.931913][T11355] ? __pfx_tty_ioctl+0x10/0x10 [ 346.931935][T11355] __x64_sys_ioctl+0x18e/0x210 [ 346.931961][T11355] do_syscall_64+0x115/0x870 [ 346.931979][T11355] ? clear_bhb_loop+0x40/0x90 [ 346.932000][T11355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.932018][T11355] RIP: 0033:0x7fa2c659e019 [ 346.932032][T11355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.932049][T11355] RSP: 002b:00007fa2c737e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.932067][T11355] RAX: ffffffffffffffda RBX: 00007fa2c6826090 RCX: 00007fa2c659e019 [ 346.932079][T11355] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000004 [ 346.932089][T11355] RBP: 00007fa2c663500c R08: 0000000000000000 R09: 0000000000000000 [ 346.932100][T11355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.932110][T11355] R13: 00007fa2c6826128 R14: 00007fa2c6826090 R15: 00007ffe93fd1cb8 [ 346.932131][T11355] [ 347.279710][T11355] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 347.317378][ T30] audit: type=1800 audit(2000000244.364:240532): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 347.446127][ T30] audit: type=1800 audit(2000000244.384:240533): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196379 res=0 errno=0 [ 347.469341][ T30] audit: type=1800 audit(2000000244.394:240534): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196391 res=0 errno=0 [ 347.493538][ T30] audit: type=1800 audit(2000000244.404:240535): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=196403 res=0 errno=0 [ 347.591564][ T149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.604601][ T149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47869 - 0 [ 347.719569][ T190] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 348.042785][ T149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.053905][ T149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47869 - 0 [ 348.089718][T11362] sctp: [Deprecated]: syz.5.1764 (pid 11362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.089718][T11362] Use struct sctp_sack_info instead [ 348.175945][ T190] usb 3-1: Using ep0 maxpacket: 16 [ 348.186556][ T190] usb 3-1: unable to get BOS descriptor or descriptor too short [ 348.204976][ T190] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 348.246421][ T190] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.284279][ T190] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 348.313018][T11370] Option 'D' to dns_resolver key: bad/missing value [ 348.336311][T11370] overlayfs: failed to clone lowerpath [ 348.342339][ T190] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 348.359216][T11370] overlayfs: failed to clone lowerpath [ 348.945337][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.961509][ T190] usb 3-1: Product: syz [ 348.982806][ T190] usb 3-1: Manufacturer: syz [ 348.987950][ T190] usb 3-1: SerialNumber: syz [ 349.080448][ T149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.139898][ T149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47869 - 0 [ 349.311815][ T149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.365826][ T149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47869 - 0 [ 349.453004][T11374] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 349.915840][ T190] usb 3-1: USB disconnect, device number 25 [ 350.091694][ T149] bridge_slave_1: left allmulticast mode [ 350.125186][ T149] bridge_slave_1: left promiscuous mode [ 350.144242][T11389] ip_tables: iptables: counters copy to user failed while replacing table [ 350.192098][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.250562][ T149] bridge_slave_0: left allmulticast mode [ 350.287498][ T149] bridge_slave_0: left promiscuous mode [ 350.306938][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.800266][ T149] bond1 (unregistering): (slave geneve3): Releasing active interface [ 350.903910][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.950773][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.973638][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 350.973651][ T30] audit: type=1400 audit(2000000248.014:240644): avc: denied { write } for pid=11386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.045031][ T149] bond0 (unregistering): Released all slaves [ 351.057844][ T30] audit: type=1400 audit(2000000248.014:240645): avc: denied { add_name } for pid=11386 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.085984][ T149] bond1 (unregistering): Released all slaves [ 351.112036][ T30] audit: type=1400 audit(2000000248.014:240646): avc: denied { create } for pid=11386 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 351.172755][ T30] audit: type=1400 audit(2000000248.014:240647): avc: denied { write } for pid=11386 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=5871 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 351.308984][ T30] audit: type=1400 audit(2000000248.014:240648): avc: denied { append } for pid=11386 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=5871 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 351.433688][ T30] audit: type=1800 audit(2000000248.354:240649): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 351.591782][ T30] audit: type=1400 audit(2000000248.614:240650): avc: denied { write } for pid=11406 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.868482][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 352.035235][ T30] audit: type=1800 audit(2000000249.074:240651): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 352.247913][ T149] hsr_slave_0: left promiscuous mode [ 352.267907][ T149] hsr_slave_1: left promiscuous mode [ 353.514697][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.524065][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.665185][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.686190][ T30] audit: type=1800 audit(2000000250.734:240652): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 353.725933][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.786324][ T30] audit: type=1400 audit(2000000250.784:240653): avc: denied { write } for pid=11419 comm="syz.2.1777" name="rd_mcp_0" dev="configfs" ino=22883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 353.857833][ T149] veth0_macvtap: left promiscuous mode [ 353.864065][ T149] veth1_vlan: left promiscuous mode [ 353.869645][ T149] veth0_vlan: left promiscuous mode [ 354.030713][T11425] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 354.247494][ T149] team0 (unregistering): Port device team_slave_1 removed [ 354.267429][ T149] team0 (unregistering): Port device team_slave_0 removed [ 354.966581][T11449] xt_hashlimit: size too large, truncated to 1048576 [ 356.004329][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 356.004344][ T30] audit: type=1400 audit(2000000253.054:240667): avc: denied { write } for pid=11436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.088234][ T30] audit: type=1400 audit(2000000253.124:240668): avc: denied { getopt } for pid=11473 comm="syz.5.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 356.108669][T11475] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1790'. [ 356.192831][ T30] audit: type=1400 audit(2000000253.204:240669): avc: denied { bind } for pid=11473 comm="syz.5.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 356.280220][ T30] audit: type=1400 audit(2000000253.204:240670): avc: denied { setopt } for pid=11473 comm="syz.5.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 356.294285][ T5714] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 356.434905][ T30] audit: type=1800 audit(2000000253.414:240671): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 356.498838][ T5714] usb 7-1: Using ep0 maxpacket: 8 [ 356.517896][ T30] audit: type=1400 audit(2000000253.474:240672): avc: denied { write } for pid=11476 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.518625][ T5714] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 356.617405][ T5714] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 356.623802][ T30] audit: type=1800 audit(2000000253.604:240673): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 356.677795][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 356.696200][ T30] audit: type=1800 audit(2000000253.614:240674): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 356.740372][ T30] audit: type=1800 audit(2000000253.634:240675): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 356.767448][ T30] audit: type=1800 audit(2000000253.674:240676): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 356.999384][ T5714] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 357.031917][ T5714] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.071543][ T5714] usb 7-1: Product: syz [ 357.098042][ T5714] usb 7-1: Manufacturer: syz [ 357.121073][ T5714] usb 7-1: SerialNumber: syz [ 357.154115][ T5714] usb 7-1: config 0 descriptor?? [ 357.276209][T11516] netlink: 'syz.4.1796': attribute type 27 has an invalid length. [ 357.663641][ T5714] usb 7-1: USB disconnect, device number 8 [ 357.738238][T11525] fuse: Bad value for 'fd' [ 357.755008][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 357.760932][ T5728] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 357.796019][ T5728] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 357.899716][ T5728] usb 5-1: USB disconnect, device number 23 [ 358.669956][T11546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.328073][T11569] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1810'. [ 361.644378][ T5728] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 361.696349][T11590] kernel read not supported for file /policy (pid: 11590 comm: syz.4.1816) [ 361.719825][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 361.719853][ T30] audit: type=1800 audit(2000000258.754:240712): pid=11590 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1816" name="policy" dev="selinuxfs" ino=20 res=0 errno=0 [ 361.857512][ T30] audit: type=1400 audit(2000000258.824:240713): avc: denied { write } for pid=11587 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.946695][ T5728] usb 2-1: Using ep0 maxpacket: 16 [ 361.969828][ T5728] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 361.990251][ T30] audit: type=1800 audit(2000000258.844:240714): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 362.036632][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 362.083594][ T5728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 362.122809][ T30] audit: type=1800 audit(2000000258.884:240715): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 362.181194][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 362.203452][T11602] overlayfs: missing 'lowerdir' [ 362.219664][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 362.233897][ T5728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 362.247880][T11602] ubi0: attaching mtd0 [ 362.256866][T11602] ubi0: scanning is finished [ 362.257011][ T30] audit: type=1800 audit(2000000258.984:240716): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 362.261774][T11602] ubi0: empty MTD device detected [ 362.306672][ T5728] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 362.329988][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.382977][ T5728] usb 2-1: Product: syz [ 362.393750][ T5728] usb 2-1: Manufacturer: syz [ 362.401553][ T30] audit: type=1800 audit(2000000259.154:240717): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 362.430444][ T5728] usb 2-1: SerialNumber: syz [ 362.463589][ T5728] usb 2-1: config 0 descriptor?? [ 362.476676][ T5728] port100 2-1:0.0: NFC: Could not get supported command types [ 362.487003][ T30] audit: type=1800 audit(2000000259.244:240718): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 362.535603][ T30] audit: type=1800 audit(2000000259.394:240719): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 362.604978][ T30] audit: type=1400 audit(2000000259.474:240720): avc: denied { read } for pid=11610 comm="syz.4.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 362.625325][ T30] audit: type=1800 audit(2000000259.504:240721): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198683 res=0 errno=0 [ 362.636321][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1827'. [ 362.783650][T11602] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 363.180955][ T5728] usb 2-1: USB disconnect, device number 20 [ 363.646938][ T190] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 364.202683][T11660] xt_hashlimit: size too large, truncated to 1048576 [ 364.971009][T11676] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 365.144507][ T190] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 365.159876][ T190] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 365.182412][ T190] usb 5-1: Product: syz [ 365.204805][ T190] usb 5-1: config 0 descriptor?? [ 365.228398][ T190] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 365.241886][ T190] usb 5-1: Detected FT232H [ 365.253496][ T5728] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 365.412841][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 365.419279][ T5728] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 365.432905][ T5728] usb 3-1: config 179 has no interface number 0 [ 365.440219][ T5728] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 365.452922][ T5728] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 365.465125][ T5728] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 365.476769][ T5728] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 365.490361][ T5728] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 365.505308][ T5728] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 365.505918][ T190] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 365.515686][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.541354][T11679] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 365.549359][ T5714] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 365.635065][T11689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1850'. [ 365.713821][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 365.724413][ T5714] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 365.737285][ T5714] usb 2-1: config 0 interface 0 has no altsetting 0 [ 365.743959][ T5714] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 365.753014][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.772428][ T5714] usb 2-1: config 0 descriptor?? [ 365.798415][ T5728] usb 3-1: USB disconnect, device number 26 [ 365.805065][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 365.805112][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 365.848828][ T190] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 365.860352][T11676] CIFS: VFS: Error connecting to socket. Aborting operation. [ 365.860869][ T190] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 365.869971][T11676] CIFS: VFS: cifs_mount failed w/return code = -4 [ 365.888653][ T190] usb 5-1: USB disconnect, device number 24 [ 365.901736][ T190] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 365.915698][ T190] ftdi_sio 5-1:0.0: device disconnected [ 366.290219][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1859'. [ 366.394323][T11713] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1861'. [ 366.597875][ T5714] sunplus 0003:04FC:05D8.0001: unexpected long global item [ 366.606121][ T5714] sunplus 0003:04FC:05D8.0001: probe with driver sunplus failed with error -22 [ 366.727054][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 366.727071][ T30] audit: type=1800 audit(2000000263.714:240784): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199315 res=0 errno=0 [ 366.754807][ T30] audit: type=1800 audit(2000000263.764:240785): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 366.767609][T11733] overlayfs: missing 'lowerdir' [ 367.387374][T11739] netlink: 'syz.6.1868': attribute type 49 has an invalid length. [ 367.496375][T11687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.631918][T11687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.715667][ T30] audit: type=1800 audit(2000000264.764:240786): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 367.915197][ T30] audit: type=1400 audit(2000000264.964:240787): avc: denied { write } for pid=11742 comm="syz.2.1869" path="socket:[33280]" dev="sockfs" ino=33280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 368.301115][ T30] audit: type=1800 audit(2000000265.344:240788): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 368.776159][ T5728] usb 2-1: USB disconnect, device number 21 [ 368.851587][ T30] audit: type=1800 audit(2000000265.894:240789): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 369.030449][ T30] audit: type=1400 audit(2000000266.074:240790): avc: denied { getopt } for pid=11760 comm="syz.5.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 369.203202][T11766] xt_hashlimit: size too large, truncated to 1048576 [ 369.222785][ T5728] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 369.345515][ T30] audit: type=1800 audit(2000000266.394:240791): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 369.383037][ T5728] usb 2-1: Using ep0 maxpacket: 8 [ 369.394409][ T5728] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 369.415919][ T5728] usb 2-1: config 179 has no interface number 0 [ 369.432628][ T5728] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 369.452556][ T5728] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 369.468492][ T5728] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 369.492894][ T5728] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 369.512561][ T5728] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 369.542579][ T5728] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 369.552696][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.588469][T11759] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.595848][ T30] audit: type=1800 audit(2000000266.624:240792): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199387 res=0 errno=0 [ 369.625163][ T30] audit: type=1800 audit(2000000266.674:240793): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=199416 res=0 errno=0 [ 369.684369][ T5696] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 369.875363][ T5696] usb 7-1: unable to get BOS descriptor or descriptor too short [ 369.884860][ T5696] usb 7-1: not running at top speed; connect to a high speed hub [ 369.899221][ T5696] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 369.935191][ T5696] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 369.957326][ T5696] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 369.993854][ T5696] usb 7-1: config 14 has no interface number 0 [ 370.003431][ T5728] usb 2-1: USB disconnect, device number 22 [ 370.009519][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 370.009567][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 370.028516][ T5696] usb 7-1: config 14 has no interface number 1 [ 370.035732][ T5696] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 370.050065][ T5696] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 370.056097][T11784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1881'. [ 370.066263][ T5696] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 370.082690][ T5696] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 370.094423][ T5696] usb 7-1: config 14 interface 57 has no altsetting 0 [ 370.101221][ T5696] usb 7-1: config 14 interface 228 has no altsetting 0 [ 370.110988][ T5696] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 370.121051][ T5696] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.129683][ T5696] usb 7-1: Product: syz [ 370.135946][ T5696] usb 7-1: Manufacturer: syz [ 370.151043][ T5696] usb 7-1: SerialNumber: syz [ 370.571264][ T5696] legousbtower 7-1:14.57: interrupt endpoints not found [ 370.979668][ T5696] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 371.002057][ T5696] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 371.261068][T11804] syzkaller0: entered promiscuous mode [ 371.295429][T11804] syzkaller0: entered allmulticast mode [ 371.562963][ T5696] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 372.173975][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 372.173990][ T30] audit: type=1800 audit(2000000269.224:240827): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 372.282759][ T5696] usb 5-1: Using ep0 maxpacket: 16 [ 372.387004][T11770] usb 7-1: LEGO USB Tower reset control request failed [ 372.403298][ T5696] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.436007][ T5696] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.494084][ T5696] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 372.497204][ T190] usb 7-1: USB disconnect, device number 9 [ 372.588124][ T5696] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 372.695755][ T5696] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.857757][ T30] audit: type=1800 audit(2000000269.904:240828): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 372.890479][ T5696] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 372.912955][ T5696] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 372.925956][ T190] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 372.939612][ T5696] usb 5-1: Manufacturer: syz [ 372.964549][ T5696] usb 5-1: config 0 descriptor?? [ 372.967810][ T30] audit: type=1800 audit(2000000270.014:240829): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200599 res=0 errno=0 [ 373.031470][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.040741][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.091884][T11820] netlink: 'syz.2.1894': attribute type 49 has an invalid length. [ 373.100717][ T30] audit: type=1800 audit(2000000270.054:240830): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=200629 res=0 errno=0 [ 373.126034][ T30] audit: type=1800 audit(2000000270.054:240831): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=200606 res=0 errno=0 [ 373.147453][ T30] audit: type=1800 audit(2000000270.054:240832): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=200607 res=0 errno=0 [ 373.294072][ T5696] rc_core: IR keymap rc-hauppauge not found [ 373.303227][ T5696] Registered IR keymap rc-empty [ 373.310954][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 373.333749][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 373.381591][ T5696] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 373.395348][ T5696] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 373.415996][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 373.453383][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 373.493713][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 373.522651][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 373.562957][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 373.598404][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 373.622953][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 373.642861][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 373.661942][ T190] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 373.675013][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 373.692677][ T30] audit: type=1400 audit(2000000270.744:240833): avc: denied { getopt } for pid=11835 comm="syz.5.1898" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 373.713290][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 373.733444][ T5696] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 373.845349][ T5696] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 373.855587][ T30] audit: type=1400 audit(2000000270.894:240834): avc: denied { accept } for pid=11837 comm="syz.5.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 373.864879][ T5696] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 373.926244][ T30] audit: type=1400 audit(2000000270.894:240835): avc: denied { write } for pid=11837 comm="syz.5.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 373.972097][ T30] audit: type=1400 audit(2000000270.944:240836): avc: denied { read } for pid=11837 comm="syz.5.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 373.999635][ T190] usb 7-1: unable to get BOS descriptor or descriptor too short [ 374.037047][ T190] usb 7-1: config 6 has an invalid interface number: 96 but max is 0 [ 374.095679][ T190] usb 7-1: config 6 has no interface number 0 [ 374.131651][ T190] usb 7-1: string descriptor 0 read error: -22 [ 374.155787][ T190] usb 7-1: New USB device found, idVendor=0cad, idProduct=9013, bcdDevice=43.3e [ 374.239178][ T190] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.301576][ T190] usb_serial_simple 7-1:6.96: motorola_tetra converter detected [ 374.389220][ T190] usb 7-1: motorola_tetra converter now attached to ttyUSB0 [ 374.442817][ T5696] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 374.633940][ T5696] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 374.642700][ T5696] usb 3-1: config 0 has no interface number 0 [ 374.655124][ T5696] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 374.685114][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.751194][ T5696] usb 3-1: Product: syz [ 374.757515][T11825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.771951][ T5696] usb 3-1: Manufacturer: syz [ 374.788093][ T5696] usb 3-1: SerialNumber: syz [ 374.798821][T11825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.842036][ T5696] usb 3-1: config 0 descriptor?? [ 374.946183][T11825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.010445][T11825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.101239][T11825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.178551][T11825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.200050][ T5696] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 375.326545][ T5696] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 375.345494][ T5728] usb 7-1: USB disconnect, device number 10 [ 375.434220][ T5696] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 375.491256][ T5696] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 375.544576][ T5728] motorola_tetra ttyUSB0: motorola_tetra converter now disconnected from ttyUSB0 [ 375.647710][ T5696] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 375.658823][ T5728] usb_serial_simple 7-1:6.96: device disconnected [ 376.409855][ T5728] usb 5-1: USB disconnect, device number 25 [ 376.639299][T11878] Cannot find map_set index 1 as target [ 376.915936][T11885] netlink: 'syz.4.1907': attribute type 29 has an invalid length. [ 378.005699][T11885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 378.053572][T11885] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 378.129625][T11885] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 378.141966][T11885] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 378.160876][T11885] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 378.186246][T11885] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 378.224021][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 378.224035][ T30] audit: type=1400 audit(2000000275.274:240899): avc: denied { write } for pid=11899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.397307][T11885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 378.421288][T11885] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 378.479686][T11885] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 378.513322][T11885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 378.540905][T11885] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 378.578276][T11885] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 378.621859][ T30] audit: type=1400 audit(2000000275.664:240900): avc: denied { write } for pid=11919 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.797888][ T5728] usb 3-1: USB disconnect, device number 27 [ 378.901942][ T5728] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 378.956175][ T30] audit: type=1800 audit(2000000275.964:240901): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 378.982021][ T5728] keyspan 3-1:0.133: device disconnected [ 379.055131][ T30] audit: type=1800 audit(2000000275.974:240902): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 379.206027][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 379.520135][ T30] audit: type=1800 audit(2000000276.564:240903): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 379.682795][ T30] audit: type=1800 audit(2000000276.724:240904): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 379.770458][ T30] audit: type=1400 audit(2000000276.774:240905): avc: denied { write } for pid=11927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.880452][ T30] audit: type=1800 audit(2000000276.864:240906): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 379.981039][ T30] audit: type=1800 audit(2000000277.024:240907): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 380.063347][T11949] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1918'. [ 380.076020][T11949] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1918'. [ 380.120338][ T30] audit: type=1800 audit(2000000277.084:240908): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 380.142407][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 380.151293][ T5622] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 380.222854][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 380.257689][ T5622] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 380.484472][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 380.622258][T11958] erspan0: entered promiscuous mode [ 381.523854][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 381.733798][T11973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11973 comm=syz.1.1925 [ 382.179863][ T5713] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 382.292845][ T5696] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 382.296683][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 382.412271][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 382.509020][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 382.532838][ T5696] usb 3-1: Using ep0 maxpacket: 16 [ 382.546705][ T5696] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 382.556786][ T5696] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.646115][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 382.665778][ T5696] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.675581][ T5696] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.675670][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.675705][ T5696] usb 3-1: Product: syz [ 382.675777][ T5696] usb 3-1: Manufacturer: syz [ 382.675809][ T5696] usb 3-1: SerialNumber: syz [ 382.811112][ T5696] usb 3-1: 0:2 : does not exist [ 382.979550][ T5696] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 383.092273][ T5713] usb 2-1: Using ep0 maxpacket: 8 [ 383.099847][ T5713] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 383.117598][ T5713] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 383.129115][ T5713] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 383.140376][ T5713] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 383.157665][ T5696] usb 3-1: USB disconnect, device number 28 [ 383.384843][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 383.384861][ T30] audit: type=1800 audit(2000000280.404:240938): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 383.432868][ T30] audit: type=1800 audit(2000000280.414:240939): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=26944 res=0 errno=0 [ 383.454202][ T30] audit: type=1800 audit(2000000280.414:240940): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=26945 res=0 errno=0 [ 383.612888][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 383.720910][ T5713] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 383.731234][ T5713] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 383.906396][ T30] audit: type=1800 audit(2000000280.524:240941): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 384.042932][ T30] audit: type=1800 audit(2000000281.004:240942): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 384.169743][ T30] audit: type=1800 audit(2000000281.214:240943): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 384.213032][ T30] audit: type=1400 audit(2000000281.234:240944): avc: denied { append } for pid=12003 comm="syz.4.1936" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 384.258124][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 384.266402][ T9] usb 7-1: config 179 has no interface number 0 [ 384.272670][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 384.283722][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 384.294925][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 384.312709][ T30] audit: type=1800 audit(2000000281.354:240945): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 384.334809][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 384.346227][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 384.381187][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 384.390492][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.403337][ T30] audit: type=1800 audit(2000000281.454:240946): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203399 res=0 errno=0 [ 384.426082][ T30] audit: type=1800 audit(2000000281.454:240947): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=203428 res=0 errno=0 [ 384.475680][T11978] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 384.486916][T12018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9097 sclass=netlink_route_socket pid=12018 comm=syz.2.1939 [ 384.583519][ T5713] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 384.593482][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.631208][ T5713] usb 2-1: Product: syz [ 384.638516][ T5713] usb 2-1: Manufacturer: syz [ 384.644081][ T5713] usb 2-1: SerialNumber: syz [ 384.702615][ T5713] usb 2-1: can't set config #168, error -71 [ 384.702974][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 384.717651][ T5713] usb 2-1: USB disconnect, device number 23 [ 384.825609][ T5696] usb 7-1: USB disconnect, device number 11 [ 384.918997][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 385.332043][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1944'. [ 386.774748][T12056] vxfs: unable to read disk superblock at 1 [ 386.811004][T12056] vxfs: unable to read disk superblock at 8 [ 386.832421][T12056] vxfs: can't find superblock. [ 387.008770][T12069] netlink: 'syz.2.1953': attribute type 4 has an invalid length. [ 387.059955][T12069] netlink: 'syz.2.1953': attribute type 4 has an invalid length. [ 387.332339][ T5728] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 387.443026][ T5696] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 387.492735][ T5728] usb 5-1: Using ep0 maxpacket: 8 [ 387.521254][ T5728] usb 5-1: unable to get BOS descriptor or descriptor too short [ 387.552086][ T5728] usb 5-1: config 1 has an invalid interface number: 240 but max is 2 [ 387.574451][ T5728] usb 5-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 387.617313][ T5728] usb 5-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 387.633943][ T5696] usb 7-1: Using ep0 maxpacket: 16 [ 387.650307][ T5696] usb 7-1: config 3 has an invalid interface number: 88 but max is 0 [ 387.691532][ T5728] usb 5-1: config 1 has no interface number 3 [ 387.700825][ T5696] usb 7-1: config 3 has no interface number 0 [ 387.732763][ T5728] usb 5-1: too many endpoints for config 1 interface 240 altsetting 0: 195, using maximum allowed: 30 [ 387.753105][ T5696] usb 7-1: config 3 interface 88 has no altsetting 0 [ 387.836043][ T5696] usb 7-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=5c.a8 [ 387.851047][ T5728] usb 5-1: config 1 interface 240 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 195 [ 387.899542][T12089] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 387.910842][ T5696] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.942777][ T5696] usb 7-1: Product: syz [ 387.957009][ T5728] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 387.976919][ T5696] usb 7-1: Manufacturer: syz [ 387.999690][ T5696] usb 7-1: SerialNumber: syz [ 388.007206][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.015869][ T5706] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 388.057976][ T5728] usb 5-1: Product: syz [ 388.081830][ T5728] usb 5-1: Manufacturer: syz [ 388.102337][ T5728] usb 5-1: SerialNumber: syz [ 388.193034][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 388.204255][ T5706] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 388.213464][ T5706] usb 2-1: config 0 has no interface number 0 [ 388.230200][ T5706] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 388.247781][T12075] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1957'. [ 388.257516][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.266957][ T5706] usb 2-1: Product: syz [ 388.274636][T12075] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1957'. [ 388.284213][ T5706] usb 2-1: Manufacturer: syz [ 388.288848][ T5706] usb 2-1: SerialNumber: syz [ 388.294207][T12075] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1957'. [ 388.306254][ T5706] usb 2-1: config 0 descriptor?? [ 388.328131][T12075] 9p: Bad value for 'rfdno' [ 388.380595][ T5696] kl5kusb105 7-1:3.88: KL5KUSB105D / PalmConnect converter detected [ 388.399733][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 388.399747][ T30] audit: type=1800 audit(2000000285.444:240990): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204038 res=0 errno=0 [ 388.451109][ T5696] usb 7-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 388.480838][ T5696] usb 7-1: USB disconnect, device number 12 [ 388.487569][ T30] audit: type=1800 audit(2000000285.454:240991): pid=9546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=204042 res=0 errno=0 [ 388.521045][ T5696] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 388.555652][T12083] Option 'D' to dns_resolver key: bad/missing value [ 388.573579][ T5696] kl5kusb105 7-1:3.88: device disconnected [ 388.598420][T12101] Option 'D' to dns_resolver key: bad/missing value [ 388.627729][ T30] audit: type=1400 audit(2000000285.494:240992): avc: denied { setopt } for pid=12070 comm="syz.4.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 388.649984][T12101] overlayfs: failed to clone lowerpath [ 388.988050][T12102] overlayfs: failed to clone lowerpath [ 388.993984][ T30] audit: type=1800 audit(2000000285.524:240993): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=203816 res=0 errno=0 [ 389.066233][ T30] audit: type=1800 audit(2000000285.524:240994): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=203817 res=0 errno=0 [ 389.098309][ T30] audit: type=1800 audit(2000000285.524:240995): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=203796 res=0 errno=0 [ 389.140488][ T30] audit: type=1800 audit(2000000285.544:240996): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=203818 res=0 errno=0 [ 389.203346][ T5706] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 389.223304][ T5706] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized! [ 389.236152][ T30] audit: type=1800 audit(2000000285.544:240997): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204070 res=0 errno=0 [ 389.285860][ T5706] uvcvideo 2-1:0.31: Failed to create links for entity 5 [ 389.298726][ T5706] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 389.326803][ T30] audit: type=1800 audit(2000000285.564:240998): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204137 res=0 errno=0 [ 389.351301][ T5728] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 389.371344][ T5706] usb 2-1: USB disconnect, device number 24 [ 389.456175][ T30] audit: type=1800 audit(2000000285.564:240999): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204151 res=0 errno=0 [ 390.283322][ T5728] usb 5-1: USB disconnect, device number 26 [ 390.303025][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 390.602275][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 391.377921][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 391.392398][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.477145][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 391.514257][ T9] pvrusb2: ********** [ 391.539983][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 391.597591][ T9] pvrusb2: Important functionality might not be entirely working. [ 391.664376][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 391.767609][ T9] pvrusb2: ********** [ 391.819610][ T2362] pvrusb2: Invalid write control endpoint [ 392.041898][ T5706] usb 3-1: USB disconnect, device number 29 [ 392.266316][ T2362] pvrusb2: Invalid write control endpoint [ 392.307581][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 392.324414][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 392.416941][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 392.426942][ T2362] pvrusb2: Device being rendered inoperable [ 392.497753][T12161] netlink: 'syz.5.1978': attribute type 10 has an invalid length. [ 392.568115][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 392.580011][T12161] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 392.596165][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 392.677529][ T2362] pvrusb2: Attached sub-driver cx25840 [ 392.707874][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 392.762824][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 393.034264][T12173] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1981'. [ 393.306460][T12179] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 393.375792][T12179] CPU: 0 UID: 0 PID: 12179 Comm: syz.1.1983 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.375825][T12179] Tainted: [L]=SOFTLOCKUP [ 393.375832][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 393.375850][T12179] Call Trace: [ 393.375856][T12179] [ 393.375865][T12179] dump_stack_lvl+0x100/0x190 [ 393.375894][T12179] sysfs_warn_dup.cold+0x1c/0x28 [ 393.375922][T12179] sysfs_create_dir_ns+0x24b/0x2b0 [ 393.375952][T12179] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 393.375978][T12179] ? find_held_lock+0x2b/0x80 [ 393.375994][T12179] ? kobject_add_internal+0x25f/0x930 [ 393.376018][T12179] ? kobject_add_internal+0x25f/0x930 [ 393.376045][T12179] ? class_dir_child_ns_type+0xd/0x60 [ 393.376073][T12179] kobject_add_internal+0x2c8/0x930 [ 393.376105][T12179] kobject_add+0x16a/0x1e0 [ 393.376132][T12179] ? __pfx_kobject_add+0x10/0x10 [ 393.376160][T12179] ? get_device_parent+0x1b3/0x4c0 [ 393.376183][T12179] ? kobject_put+0xb9/0x640 [ 393.376212][T12179] device_add+0x294/0x1970 [ 393.376237][T12179] ? lockdep_init_map_type+0x5c/0x250 [ 393.376259][T12179] ? __pfx_device_add+0x10/0x10 [ 393.376282][T12179] ? lockdep_init_map_type+0x5c/0x250 [ 393.376304][T12179] ? __init_waitqueue_head+0xca/0x150 [ 393.376335][T12179] tty_register_device_attr+0x388/0x7f0 [ 393.376357][T12179] ? lockdep_init_map_type+0x5c/0x250 [ 393.376380][T12179] ? __pfx_tty_register_device_attr+0x10/0x10 [ 393.376408][T12179] ? tty_port_init+0x156/0x1c0 [ 393.376434][T12179] gsm_activate_mux+0x155/0x2a0 [ 393.376455][T12179] gsmld_ioctl+0x346/0x15c0 [ 393.376474][T12179] ? kasan_quarantine_put+0x104/0x240 [ 393.376487][T12179] ? __pfx_gsmld_ioctl+0x10/0x10 [ 393.376504][T12179] ? __ldsem_down_read_nested+0xf3/0x890 [ 393.376523][T12179] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 393.376542][T12179] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 393.376556][T12179] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 393.376568][T12179] ? __pfx_gsmld_ioctl+0x10/0x10 [ 393.376583][T12179] tty_ioctl+0x11b4/0x1640 [ 393.376596][T12179] ? __pfx_tty_ioctl+0x10/0x10 [ 393.376609][T12179] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 393.376632][T12179] ? __fget_files+0x215/0x3d0 [ 393.376642][T12179] ? hook_file_ioctl_common+0x140/0x440 [ 393.376659][T12179] ? selinux_file_ioctl+0x13b/0x290 [ 393.376675][T12179] ? selinux_file_ioctl+0xb6/0x290 [ 393.376692][T12179] ? __pfx_tty_ioctl+0x10/0x10 [ 393.376705][T12179] __x64_sys_ioctl+0x18e/0x210 [ 393.376722][T12179] do_syscall_64+0x115/0x870 [ 393.376736][T12179] ? clear_bhb_loop+0x40/0x90 [ 393.376749][T12179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.376761][T12179] RIP: 0033:0x7f857079e019 [ 393.376771][T12179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.376782][T12179] RSP: 002b:00007f857167b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.376793][T12179] RAX: ffffffffffffffda RBX: 00007f8570a26090 RCX: 00007f857079e019 [ 393.376800][T12179] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000004 [ 393.376806][T12179] RBP: 00007f857083500c R08: 0000000000000000 R09: 0000000000000000 [ 393.376813][T12179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.376819][T12179] R13: 00007f8570a26128 R14: 00007f8570a26090 R15: 00007ffee2e678e8 [ 393.376834][T12179] [ 393.732742][T12179] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 393.811668][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 393.811684][ T30] audit: type=1800 audit(2000000290.824:241056): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 393.865044][ T30] audit: type=1800 audit(2000000290.834:241057): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204580 res=0 errno=0 [ 393.891654][ T30] audit: type=1800 audit(2000000290.834:241058): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204592 res=0 errno=0 [ 393.914144][ T30] audit: type=1800 audit(2000000290.834:241059): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204604 res=0 errno=0 [ 393.936157][ T30] audit: type=1800 audit(2000000290.834:241060): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204616 res=0 errno=0 [ 393.958204][ T30] audit: type=1800 audit(2000000290.834:241061): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204628 res=0 errno=0 [ 393.981970][ T30] audit: type=1800 audit(2000000290.834:241062): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204640 res=0 errno=0 [ 394.007483][T12179] SELinux: policydb version 32769 does not match my version range 15-35 [ 394.034323][T12179] SELinux: failed to load policy [ 394.102843][ T30] audit: type=1800 audit(2000000291.154:241063): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 394.211675][ T30] audit: type=1800 audit(2000000291.174:241064): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204652 res=0 errno=0 [ 394.360013][ T30] audit: type=1800 audit(2000000291.224:241065): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204665 res=0 errno=0 [ 394.382396][ T190] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 394.499646][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1991'. [ 394.575744][ T190] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 394.595361][ T190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.621248][ T190] usb 7-1: config 0 descriptor?? [ 394.632138][ T190] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 395.432850][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1993'. [ 395.843252][T12215] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 395.851988][T12215] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 395.860747][T12215] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 396.267636][T12225] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 396.489481][ T190] gspca_stv06xx: I2C: Read error writing address: -71 [ 396.524837][ T190] usb 7-1: USB disconnect, device number 13 [ 396.535519][ T5706] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 396.747544][ T5706] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 396.790551][ T5706] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.860574][ T5706] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 396.921706][ T5706] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 396.978104][ T5706] usb 5-1: Manufacturer: syz [ 397.026766][ T5706] usb 5-1: config 0 descriptor?? [ 397.060982][ T5706] igorplugusb 5-1:0.0: endpoint incorrect [ 398.906823][ T190] usb 5-1: USB disconnect, device number 27 [ 398.944082][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 398.944092][ T30] audit: type=1800 audit(2000000295.984:241149): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 399.135170][ T30] audit: type=1800 audit(2000000296.174:241150): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 399.915387][ T30] audit: type=1800 audit(2000000296.964:241151): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 399.948326][T12316] 9p: Bad value for 'wfdno' [ 400.027809][T12316] netlink: 'syz.4.2013': attribute type 1 has an invalid length. [ 400.152815][ T5706] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 400.328845][ T5706] usb 7-1: unable to get BOS descriptor or descriptor too short [ 400.359356][T12316] 8021q: adding VLAN 0 to HW filter on device bond3 [ 400.388745][ T5706] usb 7-1: not running at top speed; connect to a high speed hub [ 400.417087][ T5706] usb 7-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 400.471208][ T5706] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 400.513981][ T5706] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.571847][ T5706] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 400.600755][ T5706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.627518][ T5706] usb 7-1: Product: syz [ 400.640216][ T5706] usb 7-1: Manufacturer: syz [ 400.653957][ T5706] usb 7-1: SerialNumber: syz [ 400.679617][T12313] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 400.702829][ T30] audit: type=1800 audit(2000000297.744:241152): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206006 res=0 errno=0 [ 400.837466][ T30] audit: type=1800 audit(2000000297.814:241153): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=206038 res=0 errno=0 [ 401.060406][ T30] audit: type=1800 audit(2000000297.814:241154): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=206013 res=0 errno=0 [ 401.093118][ T30] audit: type=1800 audit(2000000297.824:241155): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=206014 res=0 errno=0 [ 401.114624][ T30] audit: type=1400 audit(2000000298.084:241156): avc: denied { link } for pid=12289 comm="syz.1.2009" name="#b" dev="tmpfs" ino=2148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 401.279902][T12292] evm: overlay not supported [ 401.389612][ T30] audit: type=1400 audit(2000000298.104:241157): avc: denied { rename } for pid=12289 comm="syz.1.2009" name="#c" dev="tmpfs" ino=2148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 401.734260][ T30] audit: type=1800 audit(2000000298.374:241158): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 402.018153][ T5706] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.041748][ T5706] usb 7-1: MIDIStreaming interface descriptor not found [ 402.318582][ T5706] usb 7-1: USB disconnect, device number 14 [ 402.694384][ T9546] udevd[9546]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.542551][ T190] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 403.701237][T12386] syzkaller0: entered promiscuous mode [ 403.714368][ T190] usb 2-1: Using ep0 maxpacket: 8 [ 403.717818][T12386] syzkaller0: entered allmulticast mode [ 403.727630][ T190] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 403.746055][ T190] usb 2-1: config 179 has no interface number 0 [ 403.763046][ T190] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 403.798198][ T190] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 403.824272][ T190] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 403.837552][ T190] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 403.849128][ T190] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 403.865680][ T190] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 403.874971][ T190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.899606][T12370] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 404.093677][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 404.093692][ T30] audit: type=1800 audit(2000000296.146:241184): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 404.212078][ T30] audit: type=1800 audit(2000000296.256:241185): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 404.220295][ T5706] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 404.287146][ T805] usb 2-1: USB disconnect, device number 25 [ 404.287207][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 404.301589][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 404.463132][ T5706] usb 7-1: Using ep0 maxpacket: 8 [ 404.469745][ T5706] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.480989][ T5706] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 404.504239][ T5706] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.567185][ T5706] usb 7-1: config 0 descriptor?? [ 404.585091][ T30] audit: type=1800 audit(2000000296.636:241186): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206525 res=0 errno=0 [ 404.598687][ T5706] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 404.615469][ T30] audit: type=1800 audit(2000000296.636:241187): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=206554 res=0 errno=0 [ 404.675504][ T30] audit: type=1800 audit(2000000296.636:241188): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=206532 res=0 errno=0 [ 404.924542][ T30] audit: type=1800 audit(2000000296.646:241189): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=206533 res=0 errno=0 [ 405.107949][ T30] audit: type=1800 audit(2000000296.666:241190): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 405.196525][ T30] audit: type=1800 audit(2000000296.666:241191): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=206534 res=0 errno=0 [ 405.251536][ T30] audit: type=1800 audit(2000000296.696:241192): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206574 res=0 errno=0 [ 405.324238][ T30] audit: type=1800 audit(2000000297.156:241193): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 405.874836][T12440] netlink: 'syz.5.2051': attribute type 21 has an invalid length. [ 405.892820][T12440] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2051'. [ 405.972207][ T5822] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 406.061460][ T5706] gspca_vc032x: reg_w err -71 [ 406.067165][ T5706] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 406.094757][ T5706] usb 7-1: USB disconnect, device number 15 [ 406.122498][ T5822] usb 2-1: device descriptor read/64, error -71 [ 406.362423][ T5822] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 406.949013][ T5822] usb 2-1: device descriptor read/64, error -71 [ 407.063125][ T5822] usb usb2-port1: attempt power cycle [ 407.432265][ T5822] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 407.474083][ T5822] usb 2-1: device descriptor read/8, error -71 [ 407.571926][T12482] xt_HMARK: spi-set and port-set can't be combined [ 407.586534][ T5706] IPVS: starting estimator thread 0... [ 407.692882][T12483] IPVS: using max 40 ests per chain, 96000 per kthread [ 407.870733][ T5822] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 408.001296][ T5706] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 408.416606][ T190] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 408.426536][ T5822] usb 2-1: device descriptor read/8, error -71 [ 408.443059][ T5706] usb 5-1: Using ep0 maxpacket: 8 [ 408.451905][ T5706] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.463188][ T5706] usb 5-1: config 0 has no interfaces? [ 408.469901][ T5706] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 408.481580][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.494498][ T5706] usb 5-1: config 0 descriptor?? [ 408.552757][ T5822] usb usb2-port1: unable to enumerate USB device [ 408.602994][ T190] usb 7-1: Using ep0 maxpacket: 8 [ 408.872805][ T805] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 408.931891][ T190] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 408.940571][ T190] usb 7-1: config 179 has no interface number 0 [ 408.948474][ T190] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 408.960540][ T190] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 408.973245][ T190] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 408.984371][ T190] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 408.995753][ T190] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 409.008952][ T190] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 409.017976][ T190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.031599][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2075'. [ 409.043884][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.058732][ T805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.069155][ T805] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 409.083045][T12480] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 409.090456][ T805] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 409.106990][ T805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.119125][ T805] usb 3-1: config 0 descriptor?? [ 409.124734][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 409.124744][ T30] audit: type=1800 audit(2000000301.166:241227): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206758 res=0 errno=0 [ 409.161173][ T30] audit: type=1800 audit(2000000301.166:241228): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=206787 res=0 errno=0 [ 409.188941][ T30] audit: type=1800 audit(2000000301.166:241229): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=206765 res=0 errno=0 [ 409.211484][ T30] audit: type=1800 audit(2000000301.166:241230): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=206766 res=0 errno=0 [ 409.246638][ T30] audit: type=1800 audit(2000000301.166:241231): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=206767 res=0 errno=0 [ 409.269730][ T30] audit: type=1800 audit(2000000301.236:241232): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206825 res=0 errno=0 [ 409.291426][ T30] audit: type=1800 audit(2000000301.266:241233): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206807 res=0 errno=0 [ 409.500653][ T5706] usb 7-1: USB disconnect, device number 16 [ 409.500747][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 409.515238][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 409.589585][ T30] audit: type=1800 audit(2000000301.636:241234): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206893 res=0 errno=0 [ 409.629435][ T805] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 409.656940][ T30] audit: type=1800 audit(2000000301.666:241235): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206910 res=0 errno=0 [ 409.695794][ T30] audit: type=1800 audit(2000000301.676:241236): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 410.295923][T12531] veth0: entered promiscuous mode [ 410.775829][T12530] veth0: left promiscuous mode [ 411.429811][ T5822] usb 5-1: USB disconnect, device number 28 [ 412.995620][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2083'. [ 413.526059][ T5728] usb 3-1: USB disconnect, device number 30 [ 413.953969][T12561] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 414.029735][T12561] kvm: pic: non byte read [ 414.082529][T12561] kvm: pic: level sensitive irq not supported [ 414.096706][T12561] kvm: pic: non byte read [ 414.109990][ T5622] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 414.228908][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 414.228938][ T30] audit: type=1800 audit(2000000306.276:241251): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 414.326504][ T30] audit: type=1800 audit(2000000306.366:241252): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 414.369199][ T30] audit: type=1400 audit(2000000306.416:241253): avc: denied { write } for pid=12585 comm="syz.4.2093" name="rd_mcp_0" dev="configfs" ino=22883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 414.395634][ T30] audit: type=1400 audit(2000000306.446:241254): avc: denied { write } for pid=12585 comm="syz.4.2093" name="rd_mcp_0" dev="configfs" ino=22883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 414.473060][ T190] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 414.536582][ T30] audit: type=1800 audit(2000000306.586:241255): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 415.251955][ T30] audit: type=1800 audit(2000000307.296:241256): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 415.331864][ T30] audit: type=1800 audit(2000000307.376:241257): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 415.532825][ T30] audit: type=1800 audit(2000000307.576:241258): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 415.618385][ T30] audit: type=1800 audit(2000000307.586:241259): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 415.681350][ T30] audit: type=1800 audit(2000000307.666:241260): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 415.891351][ T190] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 415.911299][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.209730][T12631] overlayfs: failed to clone upperpath [ 416.322933][ T5706] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 416.487240][ T5706] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 416.508953][ T5706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.525465][ T5706] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 416.535640][ T5706] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 416.547170][ T5706] usb 2-1: Manufacturer: syz [ 416.561811][ T5706] usb 2-1: config 0 descriptor?? [ 416.577321][ T5706] igorplugusb 2-1:0.0: endpoint incorrect [ 416.681207][ T190] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 416.759331][ T190] ATM dev 0: poll status: error -71 [ 416.782066][ T190] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 416.887696][ T190] usb 3-1: USB disconnect, device number 31 [ 417.106535][ T5706] usb 2-1: USB disconnect, device number 30 [ 418.186810][T12657] syzkaller0: entered promiscuous mode [ 418.193000][T12657] syzkaller0: entered allmulticast mode [ 418.441468][T12671] tipc: Enabling of bearer rejected, failed to enable media [ 418.533378][T12678] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 418.544010][T12678] CPU: 0 UID: 0 PID: 12678 Comm: syz.4.2121 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.544045][T12678] Tainted: [L]=SOFTLOCKUP [ 418.544052][T12678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 418.544065][T12678] Call Trace: [ 418.544071][T12678] [ 418.544079][T12678] dump_stack_lvl+0x100/0x190 [ 418.544108][T12678] sysfs_warn_dup.cold+0x1c/0x28 [ 418.544137][T12678] sysfs_create_dir_ns+0x24b/0x2b0 [ 418.544168][T12678] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 418.544199][T12678] ? find_held_lock+0x2b/0x80 [ 418.544217][T12678] ? kobject_add_internal+0x25f/0x930 [ 418.544246][T12678] ? kobject_add_internal+0x25f/0x930 [ 418.544276][T12678] ? class_dir_child_ns_type+0xd/0x60 [ 418.544307][T12678] kobject_add_internal+0x2c8/0x930 [ 418.544340][T12678] kobject_add+0x16a/0x1e0 [ 418.544367][T12678] ? __pfx_kobject_add+0x10/0x10 [ 418.544397][T12678] ? get_device_parent+0x1b3/0x4c0 [ 418.544423][T12678] ? kobject_put+0xb9/0x640 [ 418.544456][T12678] device_add+0x294/0x1970 [ 418.544483][T12678] ? lockdep_init_map_type+0x5c/0x250 [ 418.544507][T12678] ? __pfx_device_add+0x10/0x10 [ 418.544538][T12678] ? lockdep_init_map_type+0x5c/0x250 [ 418.544563][T12678] ? __init_waitqueue_head+0xca/0x150 [ 418.544596][T12678] tty_register_device_attr+0x388/0x7f0 [ 418.544621][T12678] ? lockdep_init_map_type+0x5c/0x250 [ 418.544647][T12678] ? __pfx_tty_register_device_attr+0x10/0x10 [ 418.544677][T12678] ? tty_port_init+0x156/0x1c0 [ 418.544705][T12678] gsm_activate_mux+0x155/0x2a0 [ 418.544731][T12678] gsmld_ioctl+0x346/0x15c0 [ 418.544766][T12678] ? kasan_quarantine_put+0x104/0x240 [ 418.544789][T12678] ? __pfx_gsmld_ioctl+0x10/0x10 [ 418.544821][T12678] ? irqentry_exit+0x24d/0xa00 [ 418.544864][T12678] ? __pfx_gsmld_ioctl+0x10/0x10 [ 418.544890][T12678] tty_ioctl+0x11b4/0x1640 [ 418.544914][T12678] ? __pfx_tty_ioctl+0x10/0x10 [ 418.544937][T12678] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 418.544977][T12678] ? __fget_files+0x215/0x3d0 [ 418.544996][T12678] ? hook_file_ioctl_common+0x140/0x440 [ 418.545025][T12678] ? selinux_file_ioctl+0x13b/0x290 [ 418.545053][T12678] ? selinux_file_ioctl+0xb6/0x290 [ 418.545084][T12678] ? __pfx_tty_ioctl+0x10/0x10 [ 418.545108][T12678] __x64_sys_ioctl+0x18e/0x210 [ 418.545139][T12678] do_syscall_64+0x115/0x870 [ 418.545160][T12678] ? clear_bhb_loop+0x40/0x90 [ 418.545183][T12678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.545203][T12678] RIP: 0033:0x7fce15b9e019 [ 418.545219][T12678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.545237][T12678] RSP: 002b:00007fce16a79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.545256][T12678] RAX: ffffffffffffffda RBX: 00007fce15e26180 RCX: 00007fce15b9e019 [ 418.545268][T12678] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000007 [ 418.545280][T12678] RBP: 00007fce15c3500c R08: 0000000000000000 R09: 0000000000000000 [ 418.545290][T12678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.545301][T12678] R13: 00007fce15e26218 R14: 00007fce15e26180 R15: 00007ffff52de1f8 [ 418.545328][T12678] [ 418.545603][T12678] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 419.306650][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 419.306670][ T30] audit: type=1800 audit(2000000311.246:241296): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209052 res=0 errno=0 [ 419.711876][ T30] audit: type=1800 audit(2000000311.506:241297): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 419.943523][ T30] audit: type=1800 audit(2000000311.596:241298): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209064 res=0 errno=0 [ 419.972759][ T30] audit: type=1800 audit(2000000311.636:241299): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209076 res=0 errno=0 [ 419.996839][ T30] audit: type=1800 audit(2000000311.706:241300): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209088 res=0 errno=0 [ 420.020068][ T30] audit: type=1800 audit(2000000311.816:241301): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209100 res=0 errno=0 [ 420.047199][ T30] audit: type=1800 audit(2000000311.886:241302): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209112 res=0 errno=0 [ 420.070279][ T30] audit: type=1800 audit(2000000311.936:241303): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209124 res=0 errno=0 [ 420.165586][T12684] overlay: Unknown parameter 'smackfsfloor' [ 420.171588][ T30] audit: type=1800 audit(2000000311.946:241304): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209136 res=0 errno=0 [ 420.289496][ T30] audit: type=1800 audit(2000000312.186:241305): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209148 res=0 errno=0 [ 420.873073][ T190] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 421.086114][ T190] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 421.155348][ T190] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.288456][T12710] tipc: Enabling of bearer rejected, failed to enable media [ 421.635292][ T190] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 421.645218][ T190] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 421.660160][ T190] usb 7-1: Manufacturer: syz [ 421.692334][ T190] usb 7-1: config 0 descriptor?? [ 421.811916][ T190] usb 7-1: can't set config #0, error -71 [ 421.848332][ T5622] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 421.848977][ T190] usb 7-1: USB disconnect, device number 17 [ 421.902512][ T5822] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 422.084778][ T5822] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 422.102243][ T5706] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 422.122272][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.162305][ T5822] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 422.173975][ T5822] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 422.183278][ T5822] usb 5-1: Manufacturer: syz [ 422.194592][ T5822] usb 5-1: config 0 descriptor?? [ 422.219036][ T5822] igorplugusb 5-1:0.0: endpoint incorrect [ 422.232957][ T5706] usb 2-1: device descriptor read/64, error -71 [ 422.570146][T12742] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes. [ 423.522763][ T5706] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 423.707988][ T5706] usb 2-1: device descriptor read/64, error -71 [ 423.833589][ T5706] usb usb2-port1: attempt power cycle [ 423.834278][ T5822] usb 5-1: USB disconnect, device number 29 [ 424.177238][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2147'. [ 424.203617][ T5706] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 424.243319][ T5706] usb 2-1: device descriptor read/8, error -71 [ 424.399153][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 424.399180][ T30] audit: type=1800 audit(2000000316.446:241387): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 424.486939][ T30] audit: type=1400 audit(2000000316.506:241388): avc: denied { create } for pid=12766 comm="syz.5.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 424.503054][ T5706] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 424.511512][ T5822] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 424.566804][ T30] audit: type=1400 audit(2000000316.506:241389): avc: denied { bind } for pid=12766 comm="syz.5.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 424.575827][ T5706] usb 2-1: device descriptor read/8, error -71 [ 424.609790][ T5622] Bluetooth: hci4: unexpected event for opcode 0x0c38 [ 424.617561][ T30] audit: type=1800 audit(2000000316.576:241390): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 424.725569][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 424.737387][ T30] audit: type=1800 audit(2000000316.756:241391): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 424.759738][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 424.762598][ T5706] usb usb2-port1: unable to enumerate USB device [ 424.773035][ T5822] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 424.773059][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.783315][ T5822] usb 3-1: config 0 descriptor?? [ 424.788954][ T30] audit: type=1800 audit(2000000316.826:241392): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210691 res=0 errno=0 [ 424.847214][ T30] audit: type=1800 audit(2000000316.826:241393): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=210720 res=0 errno=0 [ 424.887323][ T30] audit: type=1800 audit(2000000316.826:241394): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=210698 res=0 errno=0 [ 424.946140][ T30] audit: type=1800 audit(2000000316.826:241395): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=210699 res=0 errno=0 [ 425.006057][ T30] audit: type=1800 audit(2000000316.826:241396): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=210700 res=0 errno=0 [ 425.667795][ T5822] aquacomputer_d5next 0003:0C70:F00B.0003: unknown main item tag 0x0 [ 425.687176][ T5822] aquacomputer_d5next 0003:0C70:F00B.0003: unknown main item tag 0x0 [ 425.696152][ T5822] aquacomputer_d5next 0003:0C70:F00B.0003: unknown main item tag 0x0 [ 425.816548][ T5822] aquacomputer_d5next 0003:0C70:F00B.0003: unknown main item tag 0x0 [ 425.856548][ T5822] aquacomputer_d5next 0003:0C70:F00B.0003: unknown main item tag 0x0 [ 425.900606][ T5822] aquacomputer_d5next 0003:0C70:F00B.0003: unknown main item tag 0x0 [ 425.938326][T12800] tmpfs: Unknown parameter '00000000000000000000005b j+7gIeW+QxXƁ9 ڙ PEƊgk&/SݸQqWh\ ΞfqG` [ 543.083253][ C1] __schedule+0x125c/0x6730 [ 543.087771][ C1] ? __pfx___schedule+0x10/0x10 [ 543.092616][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 543.097985][ C1] preempt_schedule_common+0x42/0xc0 [ 543.103263][ C1] preempt_schedule_thunk+0x16/0x40 [ 543.108459][ C1] _raw_spin_unlock+0x3e/0x50 [ 543.113126][ C1] __zap_vma_range+0x16f7/0x4a30 [ 543.118078][ C1] ? __lock_acquire+0x49f/0x1a40 [ 543.123012][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 543.128299][ C1] ? find_held_lock+0x2b/0x80 [ 543.132964][ C1] ? unmap_vmas+0x239/0x5f0 [ 543.137471][ C1] unmap_vmas+0x299/0x5f0 [ 543.141802][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 543.146650][ C1] ? mas_next_slot+0x10a3/0x1960 [ 543.151596][ C1] exit_mmap+0x1ef/0xa00 [ 543.155837][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 543.160592][ C1] ? rcu_is_watching+0x12/0xc0 [ 543.165357][ C1] ? uprobe_clear_state+0x49/0x260 [ 543.170466][ C1] ? find_held_lock+0x2b/0x80 [ 543.175130][ C1] ? uprobe_clear_state+0x5f/0x260 [ 543.180244][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 543.185882][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 543.191514][ C1] __mmput+0x12a/0x410 [ 543.195584][ C1] mmput+0x67/0x80 [ 543.199302][ C1] do_exit+0x8b1/0x2ae0 [ 543.203460][ C1] ? __pfx_do_exit+0x10/0x10 [ 543.208044][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 543.214021][ C1] do_group_exit+0xd5/0x2a0 [ 543.218514][ C1] get_signal+0x1ec7/0x21e0 [ 543.223024][ C1] ? __pfx_get_signal+0x10/0x10 [ 543.227875][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 543.233414][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 543.239573][ C1] irqentry_exit+0x402/0xa00 [ 543.244159][ C1] asm_exc_page_fault+0x26/0x30 [ 543.248998][ C1] RIP: 0033:0x7f857079e021 [ 543.253407][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 543.259488][ C1] RAX: 0000000000000000 RBX: 00007f8570a25fa0 RCX: 00007f857079e019 [ 543.267452][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 543.275433][ C1] RBP: 00007f857083500c R08: 0000000000000000 R09: 0000000000000000 [ 543.283392][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 543.291348][ C1] R13: 00007f8570a26038 R14: 00007f8570a25fa0 R15: 00007ffee2e678e8 [ 543.299325][ C1] [ 543.302332][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g65213 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 543.314637][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=21459 [ 543.322513][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g65213 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 543.333877][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 543.343827][ C1] rcu: RCU grace-period kthread stack dump: [ 543.349712][ C1] task:rcu_preempt state:I stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 543.361622][ C1] Call Trace: [ 543.364889][ C1] [ 543.367812][ C1] __schedule+0x125c/0x6730 [ 543.372324][ C1] ? __pfx___schedule+0x10/0x10 [ 543.377164][ C1] ? find_held_lock+0x2b/0x80 [ 543.381832][ C1] ? schedule+0x225/0x2c0 [ 543.386156][ C1] schedule+0xdd/0x2c0 [ 543.390214][ C1] schedule_timeout+0x127/0x280 [ 543.395077][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 543.400447][ C1] ? __pfx_process_timeout+0x10/0x10 [ 543.405725][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 543.411520][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 543.416974][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 543.421734][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 543.427017][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 543.431948][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 543.437137][ C1] ? rcu_is_watching+0x12/0xc0 [ 543.441896][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 543.447693][ C1] rcu_gp_kthread+0x179/0x230 [ 543.452378][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 543.457568][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 543.463368][ C1] ? __kthread_parkme+0x18c/0x230 [ 543.468393][ C1] ? kthread+0x13a/0x450 [ 543.472625][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 543.477813][ C1] kthread+0x370/0x450 [ 543.481871][ C1] ? __pfx_kthread+0x10/0x10 [ 543.486450][ C1] ret_from_fork+0x72b/0xd50 [ 543.491036][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 543.496143][ C1] ? __switch_to+0x800/0x10f0 [ 543.500809][ C1] ? __pfx_kthread+0x10/0x10 [ 543.505391][ C1] ret_from_fork_asm+0x1a/0x30 [ 543.510163][ C1] [ 543.513169][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 543.519472][ C1] Sending NMI from CPU 1 to CPUs 0: [ 543.524673][ C0] NMI backtrace for cpu 0 [ 543.524687][ C0] CPU: 0 UID: 0 PID: 12986 Comm: syz.6.2224 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.524705][ C0] Tainted: [L]=SOFTLOCKUP [ 543.524710][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 543.524717][ C0] RIP: 0010:lock_is_held_type+0x2e/0x140 [ 543.524734][ C0] Code: 8b 0d ba 13 67 05 b8 ff ff ff ff 85 c9 0f 84 ed 00 00 00 65 8b 15 d2 05 a9 08 85 d2 0f 85 de 00 00 00 41 57 41 56 41 55 41 54 <55> 53 48 83 ec 08 65 48 8b 2d fc be a8 08 8b 95 9c 0b 00 00 85 d2 [ 543.524747][ C0] RSP: 0018:ffffc90000007e40 EFLAGS: 00000046 [ 543.524758][ C0] RAX: 00000000ffffffff RBX: ffff8880b8428640 RCX: 0000000000000001 [ 543.524766][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff8880b8428418 [ 543.524775][ C0] RBP: ffff888032e2a300 R08: 0000000000000005 R09: 0000000000000000 [ 543.524783][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 543.524796][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880b8428690 [ 543.524805][ C0] FS: 00007f731a1dc6c0(0000) GS:ffff888123dda000(0000) knlGS:0000000000000000 [ 543.524819][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.524828][ C0] CR2: 00007fc66f942000 CR3: 0000000032d47000 CR4: 00000000003526f0 [ 543.524837][ C0] Call Trace: [ 543.524841][ C0] [ 543.524847][ C0] enqueue_hrtimer+0x24f/0x2f0 [ 543.524868][ C0] __hrtimer_run_queues+0x6ed/0x9c0 [ 543.524890][ C0] hrtimer_interrupt+0x3e5/0x940 [ 543.524907][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 543.524928][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 543.524943][ C0] [ 543.524947][ C0] [ 543.524952][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 543.524967][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 543.524982][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 5f 27 f6 48 89 df e8 fe ae 27 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 be 16 f6 65 8b 05 4e c7 a5 08 85 c0 74 16 5b [ 543.524994][ C0] RSP: 0018:ffffc90006377b28 EFLAGS: 00000246 [ 543.525005][ C0] RAX: 0000000000000002 RBX: ffffffff9b7413d8 RCX: 0000000000000000 [ 543.525014][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a76e9 RDI: ffffffff8c402680 [ 543.525022][ C0] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 543.525030][ C0] R10: 0000000000000001 R11: ffffffffffffffff R12: ffffffff9b741140 [ 543.525039][ C0] R13: 0000000000000000 R14: ffffc90006377c80 R15: ffffffff9b74131c [ 543.525054][ C0] __do_adjtimex+0x892/0xe70 [ 543.525072][ C0] ? __pfx___do_adjtimex+0x10/0x10 [ 543.525090][ C0] ? __lock_acquire+0x49f/0x1a40 [ 543.525107][ C0] do_adjtimex+0xa0/0x370 [ 543.525124][ C0] ? __pfx_do_adjtimex+0x10/0x10 [ 543.525147][ C0] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 543.525167][ C0] __do_sys_clock_adjtime+0x177/0x290 [ 543.525186][ C0] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 543.525205][ C0] ? __pfx_do_futex+0x10/0x10 [ 543.525232][ C0] do_syscall_64+0x115/0x870 [ 543.525247][ C0] ? clear_bhb_loop+0x40/0x90 [ 543.525262][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.525275][ C0] RIP: 0033:0x7f731939e019 [ 543.525286][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.525299][ C0] RSP: 002b:00007f731a1dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 543.525311][ C0] RAX: ffffffffffffffda RBX: 00007f7319625fa0 RCX: 00007f731939e019 [ 543.525320][ C0] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000000 [ 543.525328][ C0] RBP: 00007f731943500c R08: 0000000000000000 R09: 0000000000000000 [ 543.525337][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.525345][ C0] R13: 00007f7319626038 R14: 00007f7319625fa0 R15: 00007fff4a1a1278 [ 543.525358][ C0]