last executing test programs: 7.136634162s ago: executing program 0 (id=783): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x440, 0x1) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r0}, 0x50) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r3}, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x24, 0x27, 0x5, 0xffffffff, 0x0, r3}, 0x0, 0x0, &(0x7f0000000000)) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x11205600, 0xfffd, 0x6, 0x0, 0x8, 0x0, 0x0, 0x4, 0xd0}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x84, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5414, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x305802, 0x9) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)="89", 0x1}, {0x0, 0xf4}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x440, 0x1) (async) unshare(0x400) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r0}, 0x50) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) (async) syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000000)) (async) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r3}, 0x0, 0x0, &(0x7f0000000000)) (async) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x24, 0x27, 0x5, 0xffffffff, 0x0, r3}, 0x0, 0x0, &(0x7f0000000000)) (async) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x11205600, 0xfffd, 0x6, 0x0, 0x8, 0x0, 0x0, 0x4, 0xd0}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x84, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) (async) ioctl$TIOCGSOFTCAR(r4, 0x5414, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x305802, 0x9) (async) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)="89", 0x1}, {0x0, 0xf4}], 0x2) (async) 6.970339668s ago: executing program 4 (id=784): listen(0xffffffffffffffff, 0x8) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0}) (async) syz_clone(0xa012c000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, &(0x7f0000001080)) (rerun: 32) 6.844835831s ago: executing program 0 (id=785): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x40894, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) (async) openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6.727766436s ago: executing program 0 (id=786): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) sendmsg$nl_route(r1, &(0x7f0000002200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getnexthop={0x50, 0x6a, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8}, @NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x2044894}, 0x800) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002240), 0x30001, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0x400000000008, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) 6.470025671s ago: executing program 0 (id=788): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000d030000000000009f440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a27172"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000003, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)=0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r8, 0xc0984124, &(0x7f0000000300)) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0x4112, 0x0) prctl$PR_SET_NAME(0xf, 0x0) 6.39690339s ago: executing program 2 (id=789): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000400)=0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x9, &(0x7f0000000200)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x19}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_open_dev$dmmidi(0x0, 0x200, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0x2, 0x4e27, 0x6, 0xa, 0x20, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x4, 0x9}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3500, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x10004, 0x2c}, 0x50) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 5.92580409s ago: executing program 2 (id=791): unshare(0x22020600) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002400048013000100627273b021d72ff897792e4236961a"], 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) r4 = epoll_create1(0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x0, 0x1, 0x5, 0x4010}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 5.770161881s ago: executing program 4 (id=792): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x5) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x6) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000480)={0x91e, r6}) process_madvise(r7, &(0x7f00000018c0)=[{&(0x7f00000004c0)="8c84969038cf7f844248b7ef15850a828e3b709982a9d1c12ed34c259c43486a3ea97fc9d00d2b1bbf3bbec33cffb3703f083c42fef9454b9c82efea64bac0feda0f7a2d9a668064340340971738edb28daa14ebc17ae9c7e7acc1a6c77105fe738ba4e937411e43f7ab19d759a7cb0c5358463a51e540a066594e260cd6ea676d6c7f9a6dbea59414d6d97296124c92d6496507fc04e5c3f5ad085ef478d537fe155fc5b2b504c0ea06455d9104c33f8b969296ba66bdbda97c5f8a797962f3b14f1f271908c128d11d334d3bea94fbc96e90688a2777129889965654cb6d", 0xdf}, {&(0x7f00000005c0)="d514c8b6888bb0f8beb4076dd10485d24cc44063c0bbce00a5fe2565f4cef38eef1516ee3de4cb3c256bb1dcf1d0bfba9ad180bf2d14a40f2958b91dce3ba6479205e773a6087a1a842b178c09e9add6da4d1a4869f70ae597aeee0b26e25ece95fd5cd4e73fbfe82fb392adbadec30002fa", 0x72}, {&(0x7f0000000640)="a5162905f462759b572c556716c95ca219f6da9ade2ae23e1221f2c5aa0f37a2495c0fe868ff34eff2b0576818481c882d019ebe8a851a5f1815a8f36149f50914da9e7b2d7dcccb2a6c5fac145b6022ba5ad99cb1656687579042cf04db8d12c310e8a010f6536059f144bca663d9d9659d25728d4c1b18384be7656ba65ba3f66fb2024a711a4e942da2d3b2b0f1d4bd86a649f496e4fea3fbb9b9c27bdddb68fe71bdab319e290d40af7a46412a683c5e7471c0ae8fd264990e17ba8037b5b2e8d984c25bad6e0be67da35042eb71ee2aa221175034b46d81ab4d339f95d42a5a7ae716927681aeae3f9e09afb248b02edee608efc7211b1f678ad919229835cbff71add9338d47625a913acafa2330edce191a7a6cf829929cefe9c09a1dd1ed43ff3721734d7cbba0bc96b73a5361841ad22468b3a42ffaed9a67128e6825aff089234545183a278fd68dc7ca593d171b3693666b7e59d4804a6e8e45280a671c8064236a65fae3352b0646fad00a6e29c0fab8c15fb3b2387e0e8ba47a40beeb4c7f64378286a4ca82d22a4cefb8cc4825985cbdad24dd93a9cfb795b5ca6b8f053e6c6c1bfdb85b7e6b78809ec66f43ce4eb0f5ddb5a3d34634acffe711b8beffeb3a118383b4b93531c2425f86cf1b27c0acefa9387976e52e78bafe0978c0f976e2bdea61df56c015e927208423182eee83647a0781fb03de6c6f6e16b1d4dc0b6de49515aa0f7ca1c756076371f16a238acb034d02fc2b12faf70fc83f1727d23748a89e7124a2d75d66a397eb716f16c32a5dfb5396eed6df21315e461cc9c12f8e9502fd90eaf63bfacd270edfa41bd0ff24db3b2a8a512db56f6f671d10980801c2aaaf3b9713ca315e1fe501fbaa46627d86eda9df3b3ee8432d1a5792c02ea7b30f0b1a51c72a14d17bde7d75d199c44f972f982bcbc73360ca564776a36427e719838aa70530da5010a407416aa5f4c4ac3f875f5af88a43aeaf1054c4a2104fcff96079aa0e866485362b4c4c065349ce6a1a24dc8c6638cf39d26698dbfa84d7da4d29961f4d7785b0c2b48f5ae160e61a98193bf3c5901ff5e0c4608dad71bbb7fb414509d5accc8b22958a9b3f492f23c1c9fdd87c09ef3df6b3c6d1f8d6e9caa54d6efd6be6396b602e7707ecb5294abe58426c3191fe12d388018c44d90b3af2a09d8927d1603c2d24b98851aab56988690319d42f9927808d7d4e5d478636cd65544b51e55d3e81378a05012b55479e2557aee8024c62e4381d1d93df3927a94097759149c847ec7bfa73d3d7aefda58263559339806c68a0ba17b1fe76270525f395217178e68ddadd0ee380bc9acef9364a58e4b82d246c64d50aefa7e26b8ea554c995b2d86f0a0c8502c40107786e054e88c6237083abb08388d9ed98ecec4e287c1e05185e6ac255881f626b841de02cd518e214b50021fb76de1941990391bb918cff62c42f74556a62148efd2fed44f1e7658b8b0dcf9c1ec3fee858f38c3f3703d80b64b75fb57b304f60b0d3c528fb755ffa64d71134f14d95800ad3416a8cb6b51741c10c66074c5a073dd00d0df73e83351839929d1d6654c4e629305a2038a18a91a3174852ab498361df5f4c5b19257465546fd2ada09c79ea7583be5280eebed1fafc477a8e32d0157f1fb9a7f090e410adab8908d5d43fe79cbe5e23bb4760108371ba3b8d39a1b15753a90591d995f625e3ded18d2ff831e2c467a878c9ba28cfb2c75291dc51c2a6cc8d98f6af096a3038b43912cf1c583f99191f04a5a0e6544474d21f0985c4b8b4828947754d8e01cfea3da2a3ed12894dba7de6bcea5520a616bf231ea1a0f4fc1cfe403b0fb688d285a4395c7507a73e73a8761e91d7d71422e5ed2d180c357ff278063daa71fc92593a520a9c8946f312a0812521aef332f295d7682d9946c607faabac96dba14eb9d7c203554882dae2bac4caa5caa3d4d2e74c89168ee301ad631075983d5775101e3b75efd0d0dccb32948486a3dc5b5b88d7ea5bd12de2b5505093c146d387412186c92470b208478b082cbe09ca36fc34bd3f5da8ebb5928dbce2c7ed8ed2cf02c1c3060606a2a48e62cf5acd802ae40926d5ce1e8890ac6af5daaef346ec46a68cb885925a1c5ed7603e9c8564a30c8be80f759ebc952c53a0710d41a16cf67349470fabb74ed5f3012d02276b10b36bf93c71e648d3a69f3513e156baf5b105670689304649c6b2b118ab1ac30ed449a541d4e30cf6c73acbe7a13c875a9cfcd3861a045a5efc117d1f9b1534521a799dbe8fb96a72c92a8395db22d0efa8d0af1902312b015893fa0e70c550f6b91bec50008536c7cbc91f4f55b39a3ff395e535e20a1a2239b13c1bda4f9c0df1406e9c25c295f9d841918fe95db5104da91d57f52f13976e6c0567d48352398e8d7c8d06f57dc000860e3d45f79b67536289822587d946d6ca2f47746b04d6247a4b4425e56652febeb4d734af3d53d884a69fc044a147e22d58b3aba9ef8e67d5d95dcd05b213c44e68444f4a30edace26027f6115c1ab9e79b008191b35ca783adeaf866ff605367cd9724280b4ae1409bf16d53aab07c1e69f03cb009814842e2b9c830fcd4e1bc61ba82db537747e618c19a147d2616ccdf6ccdf580fc2dbc06594ad2b9dce74487caae9de51e8fbc1c8ad0180725efafe76debfbc8e6afccef50baf72e480098cf0ac5f997d59af3776158a8c4aa6f41e7b0262dc7bc25e0c3fd41188a0d9a40eee78dd7e1f648444b0a266bb6a8995967b33ddc8fa7a625124bf13bf61b921a189b4375d20b105191d2d589cf607ac551b307e9cc6e4fa0eca011098887a9e640c784cbe115f560ef3a15f6c2328493423a7a110a99dbaf6f0171ed26579733c019f97e3031afed9efecd800efa9ecc7b264e19802c226921bdcfe2c6eea876c963ee1063825e6947b4f1fe09a3efb5362765a553f0540716690ff6e4571a71f817e3829d5028d5fa684b224c5bac41fafe3fe77f5f022ff58d5f57aaaa79b63dedae6f6277707603150502208ed0e8718af21aad988988f88d7119ebadc525c2c9c4a6f17aec16d278800040f4fab1b17a2488076c1e40344c45659f8be43b2888ecae8863b9f967dd029c76861f185f8afdc129fc6fe502dac491dd7fd21cef43d60ecc3878553e147c1c3d4eae8c298961936b8b27fda192580c509b299914a667a128c00334d5ceaa2b2bc238e6021a1621d9d35563fc15fdaaef9b7416222c972f225842f9076430858495c39c9a949c4cb8bfbe2c7aa5f34b400e80ad09c01ee981d48fabec4744a9289cb9d7bd3ecff3e787fdaaae6d9a58510761a38c6bd6a2f92b75faa7d6aeb13dc7857325a4c0d31004260132c86dfe3610aa14864a4870d52b416256ec9fbc72639215b7bf7e61cb09fa1d61fc7b046374f69d7f96b3fd648ed9247a66e11cca67cc2e15ff7ace2739bcced09ba97dd521b05c6c345677004e523701cf60c38bb557c4a7f67e6dabb520bf52b1b0bb795dcaa7e30d27e3e0b9b98c70d2f2ccb6cd2eb98adb3e9ff47b0567a5f90cab643de77e97ef82f868067f9f5ffa3b1cb6c0dc114a3bd42e5e4ea1c63217e63439c60227ce8ff2f8182217a16e2281b35288f5dbca600827d7c87e5444f8a026a016b0db38dd0a6f58c91050fe502fc3abbad4d26111a9ea58d0747b4bfd50cd30d283f99f4209b108dce7ede4c3645d8bd59aa4dd077ce13bd4dbe4fc19c4d508d4fa458d1f23f104c0f2c5ff00497bf8d5dd253bd463c99cf795632026ce66ab1ad95c78a5cfe2e42a7342d253fa84a853292dc5e53b06edb896f08e895cc673e5d9c546f982171e500eb7361bbef5d98163ab5aac1bd5d7027e48c561260a6d046b94b25565e0e41b2b23d558b4d14a49453c32d527d57b6941b219e1ecde7a7bf2f1834e813019e092d7e026f94c9f5fef98f9bb7889658646b3eba45fdaa89bfb059a37ea5c92184708a435b35cba59df62b1cb511bf58808197c33b35e3225a5e41ea06ed55f501dbd69c115dd754fa3da64997175fb7fc6b2e2575d805fd554e878c8b3d2aa5b054a4af5297c8f69b98513b664e3845e40e402e26e53f8ffecbcd075379e3a7dcee2492c9e486bcb7095da2a6bdbb0c3ec6d6af34b898a7982e6e659bee49d2ba281ab64d0f70364f2979a4798b669e2d421b06cab4c8c09f7b6989c87343263b33dc73d3b998df858fe6907cd931c45514180a31af4068396e9f5a31cf0001865d534641e986eff1a235330b731eadf398d1f505c174540e6c5d2e5d38c64558ebb18fbfdb74546aa07f1fd1ca96ad5af627289a4cf6e4fbb5ccc4f3378d8b7be48834c67ea8fff60a2fb19a59511b2d89ab954f02cba8501c26fd9ae31d5af1478ec6fff6a2c61df2fc05d3f635164b7c3b6766c7a1b5cce3ac9e792d97c7a1e25ac1d7313403be79e244df711214c223761312963439290871506af7c069bffae078395c0dceddbb61dd99c0e67b9d213dbea533f5f1ba7a873e499c3a4c013ebbd9ab7f7445e4be4f8904316b511a7ed7ffc3200ca865d91d9a4f8a19351cfb9e514ca372126aed5bd157ec2090d47af568b12436d883ee51d8df8d2530e0a5141c91f13cae4a8d1bd596cb9e8957b85fb03cac9b3475b92c923139c5c5e220be01ad5046b6f6eacaa0eebc145fa461d4575c2719c1f0cf00173153bf9798de57e307f7d50d1fb1609e7250a7b56ff83aaa957d5effb9412f861f989b13dd6adf36e263b76ffc1339797af2a9b16612e5ad94d79e61e52627e418d5844e33c98eab0c20bd90bf4c7f64170f760c32e0aca0cf71caf3c4181d60fa9892a6954c66d158ee4bc22f442536722a4050eb47be2bae2c8e681d2f9578baffc5e84763cd4f0c8c98f02f50c42e45a94436b73f5431a1a16cd9947c4acab62ee71ba5cf2e3a878c26a830c71483d877dffd336d19c5368c2360ee37f4af4b4b840d8f091dcf5d47d0ede1d19108868a895407c75448d53aa8c4cca8e2a7b3e09e58a1726eacbfacd2da6def5da61d97d7e3180d3788c66620e6225064832431e24f8380d5a800e4f6af51d76f8ce0631804aba0d8998258600e7baf1b926d82523e12b34e8c842c5d4091ee843b093e469ebcbf6fe4f856c7c5dc594186b2313802ad27a2a579093c09026435f9beaf72ef345af218e7f305b9568c11629ba49ae1e0cb15632f6861c0fde3d9a7ba5bb3c02030d1b5e424869bee5641b0199f7541986a0ebe2250e29c5b1935697ef006116482cb2416ae3255d3dbff3d4bdd60e62911f13b72e5b52b4386c11a3bd833a94f2be230c0cbc54fb0a2177f7ba8e18fe823d55311444b011c50059e7031b7113ebcc7b2f343399b68791fda94c0d69a92c390ffb849709d831c31e6e92f31b8d7897221cccc5548a37b899d3036ccf4deb65e842c38888bd37e21bc7f44c2c6ba78e986cc47cd8a8db3a03f0a05a408b9cfbd6a8abef6aa9b8784a26e0c0bb9f672737b292f60d2f9ce70b564cef428cf6ab11d454f0dbea0970a2042c680ec64718f0ecc92db2cc8127b674d7e470bbd8c3e0a00bd00157ab72a83b34369faea1b65bad07e682b022d79e940556f912b0f77b4299b8482bf17dfccb2c350eb548e07a385c0b2d7b2830d4e4f033e39dae32dc754c43ef1a24330164cb1e9a3c6c5b2b0ad3de9793360e7bbb2de7ec8f5b5fd4b1f1c9df493d5d89999bbf9ccd7a64f838fafbc6830b1c8c08e3619fe850bfbc43f8c4368fc2c975573d8f79dc9f6f542a125230519ddd6e", 0x1000}, {&(0x7f0000001640)="ae787f", 0x3}, {&(0x7f0000001680)="de374860fc80f621500240051f87b95005fa976c3c82d7d08035241dfd83836dead25bf6c1ebc36c99369bbc00e1882953383c3538e2f3882fc54bd3c551f33280bf9cec257649e5d3ca20c25f6f387736635300f152a2e522506146d3a299ff3c3322d04379f5bda6582f2bc9625c05260cb7bc48659881615817cbe2897f9d73dcf0a199658732786e41c408af4601ae16150ebf09e81fdead5f", 0x9b}, {&(0x7f0000001740)="380acb1c9c54bf87ccbfdc1e27294cd0c05ca5a8d858db3b5dbbad793ca6eec38e2291efed75d0d089207769eaf09c76bd16f95b87c4ad595f2290f0d9236e65461d4623c0781662b47c084478e814030027271e21734eb59d332e4cf10afcb2268385640669bdaf812b059898a036a2684c", 0x72}, {&(0x7f00000017c0)="52827377b0af6800c24275b8ce95b60c5c6d9569daebf24910e979b3b8a18389e387bf95107a02dfc7f60fdc0dc15c116df8", 0x32}, {&(0x7f0000001800)="7c4b52c36ae86ebff7d44ad4a4be4a4c52a3180b2847b2fb00bf208ae30d1997324fbc08d56c0f5d7b14dcfe0b466a9617e6e3cb269f0a07f590b56f34938b78421df77ef2193c1193800c8c89a5bcd321bbfb387019839bf289011e7e620e1488ec73a7f9205e01377ee91e7b75fca3a34dda00ec2d70cc2ca7ff84ca847691f14d27de5d", 0x85}], 0x8, 0x15, 0x0) setxattr$security_capability(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980), &(0x7f00000019c0)=@v3={0x3000000, [{0x8, 0x3}, {0x81, 0x81}], 0xee00}, 0x18, 0x3) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000001a00), &(0x7f0000001a40)='./file0\x00', 0x8, 0x2) lsetxattr$trusted_overlay_nlink(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0), &(0x7f0000001b00)={'U-', 0xffff}, 0x16, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001b80), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4001010) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x20, 0x0, 0x122, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0xb}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x880) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001dc0), 0x88500, 0x0) r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000001e00), 0x400400) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000001e40)={r10, 0x7, 0x3, r7}) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000002080)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f00)={0x128, r11, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xb0, 0x8, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "02074b8ade9d9e426d5128288d5498db75db48f5e1870a23a5ee7b647d853edf"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9ececa0df16f03cfa9903e52f0ad5e79f7f33e29e8a9e444d46d184d709cd802"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x691d, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x128}}, 0x2000c000) inotify_add_watch(r9, &(0x7f00000020c0)='./file0/file0\x00', 0x4000202) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x28, r12, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000010}, 0x40010) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000026c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002680)={&(0x7f00000023c0)={0x2a0, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c484a76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27f85975}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79d61abb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e36870}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ba7637b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b9d15be}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66ad21dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x748b5629}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7113212e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f43ce94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x317d3897}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ab46c6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47019fad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5031cde2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d0e4499}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb4, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7974}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x237c9ede}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x681f1a95}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7682cec6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x28f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e83a8c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb69}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6665de9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x421e5b92}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24623547}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77f7fb2a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7803}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30b2}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb944}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bb4ad97}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6be32530}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa20e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ab7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3f2}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x434543e0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13d5b936}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x363b09ae}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c862c7f}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee7c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ae6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbcbd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f87}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x2a0}}, 0x4000) 5.67545986s ago: executing program 4 (id=793): unshare(0x6a040000) (async, rerun: 32) unshare(0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00', 0x3}, 0x18) (async) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) 5.102570445s ago: executing program 1 (id=794): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/cgroup.procs\x00', 0x18b3c3, 0x128) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 32) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x7) r5 = accept4(r4, 0x0, 0x0, 0x800) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$XFS_IOC_FSINUMBERS(r5, 0xc0205867, &(0x7f00000002c0)={&(0x7f0000000100)=0x403, 0x3f, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000940)}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) io_setup(0x1000, &(0x7f0000001d00)=0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x8, r0, &(0x7f0000000180)='3', 0x1, 0x5, 0x0, 0x2}]) (async) landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x7, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) capset(&(0x7f00000001c0)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000300)={0x1, 0x2, 0x9, 0x52, 0x4}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000040)={0x33}) (async) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) (async, rerun: 64) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r9, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r10, 0xffffffffffffffff}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRES32=r11, @ANYRES32=r11, @ANYRES8=r10], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r12}, 0xc) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000180)={0x2}) 4.838498801s ago: executing program 2 (id=795): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="6423e9c87d085734718adb330d936a1b61", @ANYRES32=0x0, @ANYBLOB="150c0000000000002800128009000100766c616e000000001800028006000100040000000c0002001c0000001000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0a000100aaaaaaaaaa160000"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000000)={0x7, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000100), r1}}, 0x18) 4.769358763s ago: executing program 2 (id=796): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r0, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe2(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getgid() mount$9p_virtio(&(0x7f0000000280), 0x0, &(0x7f0000000340), 0x20000, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=virtio,fscache,dfltgid=', @ANYBLOB="2c63616368653d6c6f6f73652c63836368653d6c6f6f73652c736d61636b6673"]) r5 = dup2(r4, r4) setresuid(0xee01, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x8, 0x0) prlimit64(r6, 0x6, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote, @private0, @mcast2, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, 0x0) 4.76545367s ago: executing program 1 (id=797): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000001c0)={0x5, 0x7, 0xeeef0000, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000fffffffffffffffffffffffd2e5f"], 0x48) writev(0xffffffffffffffff, 0x0, 0xffffffffffffff6a) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r6, &(0x7f0000ffc000/0x3000)=nil, 0x4000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) shmctl$IPC_RMID(r6, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 4.682528423s ago: executing program 4 (id=798): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000000)) 4.573632535s ago: executing program 0 (id=799): openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x20000801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) flistxattr(r1, 0x0, 0x0) shmat(0x0, &(0x7f0000e42000/0x4000)=nil, 0x6000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) syz_open_dev$dri(0x0, 0x1f, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x500) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="120100000b529708410e42416ed40102030109022400011e000000090400020221f768000905013d000401ff07090502"], 0x0) syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) 3.433778673s ago: executing program 2 (id=800): ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000240)="65527d294a9a2ee291e289a90df32746d942a0a8676ca0ee57ac004648e2d0f26ae5972b5e897e0eb01ffd753459eef9a7da4b9abc9646d6567443e8aa9c741cbe4b72aae0dd95bf4feb9528a44e6b44bf526a47e91ff0f6a01b22ea6b6975e74c72f2d0a123eb328ea845cb4f288ae2a0295cbae05517ab2513e7efd84a57147fa1fafbeb5dc395fd5d8854df8d055a642fe228b7bb420450f972b173c8732a8cec962ee33520beca498617ff78e9698954c2708b304ac582bfa534b8663faf661ae1f0157c78116b841b46443a4f2bd89049b54300") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="0201000000000010ac054182000000000001090224000100000000090400001113000000092100000001220500090581872d8ec9e73b7fab87f9bafccd3759e80360a87ee2f89f93a5e20536ce9ffba1a9506240909dfc619a20c0aa139a24c1d75f612019342c8f35af25e82dfb71ca37b014393cb7211ea246555a52cdb93db936e8e6e532be38ef8e3a0d4b0d81ed2f0c720fac5e0236fd2ca42585"], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x1, 0x1, "a9"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 3.230120746s ago: executing program 4 (id=801): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) syz_open_dev$char_usb(0xc, 0xb4, 0x7fffffffffffffff) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) fallocate(r0, 0x48, 0x4, 0x4) 2.91287532s ago: executing program 3 (id=802): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214", 0x7}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_snmp6\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "3daf8cfa5f4e590f", "a64ee3262217d9c9f1d5189e48e640f04f86d2c3ed536c1b5f002e9dd3de2e4d", "23bdf635", "e825025efab48bbe"}, 0x24) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="8ea50100bbbbbbbb4e48961576437015bbbbd8b4f3d784a4d01c9785fdc168050000"], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.670603789s ago: executing program 3 (id=803): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r2, &(0x7f0000000100)='0\x00', 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = epoll_create1(0x0) (async, rerun: 64) epoll_create1(0x0) (async, rerun: 64) r5 = dup(0xffffffffffffffff) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x7a, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, 0x0, 0x8000) write$qrtrtun(r2, &(0x7f00000000c0)="c50e6d411b74", 0x6) process_vm_readv(r0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/4075, 0xfeb}], 0x1, 0x0) sendfile(r4, r1, &(0x7f00000002c0)=0x3, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x8}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) (async) poll(&(0x7f0000000040)=[{r4}, {r2, 0x9082}, {r3, 0x130}, {r6, 0x4}, {r3, 0x20c8}, {r5, 0x41}], 0x6, 0x10000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 2.482121656s ago: executing program 3 (id=804): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf) 2.209088984s ago: executing program 3 (id=805): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, &(0x7f00000002c0)=0x7) (async) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000300)=ANY=[]) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfff}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "5fd7f076f29a9217eafcfcbc3fad96ef"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000040) 2.157486779s ago: executing program 1 (id=806): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r2 = accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x80800) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newneigh={0x48, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x10, 0x0, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_VLAN={0x6}, @NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_NH_ID={0x8, 0xd, 0xff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000280)={0x5, "9dfdb563d04cb1b9d636421eccc4fc79e8b1173f30b3f2b041ced0becce4fbf4", 0x3, 0xffffff01, 0x4, 0x4000, 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x111840, 0x0) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f0000000340)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000003c0)={0x330, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @mcast1, 0xfffffbff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @private2, 0xffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7832}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "6b4b872d473c699f07316070bd45073afd11320b9cb668"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "b251c2f3b0af7e70b2089f1a42005c4804b3359d7857ae6906d6ccabeb"}}, @TIPC_NLA_NODE_ID={0x53, 0x3, "b979c14afbb320661b569a632013e3b0a64ff9e0b90a139a6475c946c374a5db7526a1c482d72c2f05c4447ef6ef41665fbf4f10a94fa55e804958149e091b1720081da72fe25f0e416445d9943697"}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "c14eec0d83898b6476c21a1ab8bf5df6baae99929e0bb20ff9948eadb60ef34c5ad92f44a2719a552de27064a7059c159e7b56081f58249413ee0d5b297a41b3470b1211f4e6283d18cdc20a4becb99386f85aa5f8830343f6546f6a1f1f0ff98b91f99f33da24"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1a4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x98b}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000780), 0x101100, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) r10 = pidfd_getfd(r8, r9, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), r7) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r11, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bridge\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000900)=0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r12, 0xd, 0x2001) socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGARP(r10, 0x8954, &(0x7f0000000940)={{0x2, 0x4e22, @loopback}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x62, {0x2, 0x4e22, @broadcast}, 'netpci0\x00'}) file_setattr(r10, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x3, 0x9, 0x7, 0x7}, 0x18, 0x100) ioctl$BINDER_GET_NODE_DEBUG_INFO(r10, 0xc018620b, &(0x7f0000000a40)={0x1}) io_setup(0x5, &(0x7f0000000a80)) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r7) sendmsg$BATADV_CMD_TP_METER(r13, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r14, 0x800, 0x70bd25, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x199}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004880}, 0x4040) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r13) sendmsg$NL80211_CMD_ABORT_SCAN(r10, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r15, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x28000040) 2.068307326s ago: executing program 3 (id=807): socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyS3(0xffffff9c, 0x0, 0x210100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4208, r0) ptrace$peekuser(0x3, r0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffe, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r5 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x1, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="120000000700000008"], 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.889947895s ago: executing program 1 (id=808): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20, 0x0, r3, {0x7, 0x4, 0x4, 0x8}}, 0x20) creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000300)="644ee8", 0x3}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x1], 0x0, 0x0, 0x1}}, 0x40) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 1.863704166s ago: executing program 3 (id=809): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x89d, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='<'], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x840) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x4, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="200629"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r8, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x48}}, 0x20000000) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) 1.460465623s ago: executing program 0 (id=810): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0x6, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x8080, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=0x0, @ANYBLOB=',dont_measure,fsuuid=\x00664f027-106b-e022-0481-=', @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673726f6f743dae38352b6422dc5202f30054e9433d66f278432bdd868af7effd8582e69e6376000104763d07d9458fff8c2c3c1f06ca6c1e45297b9bf159c94304df8f093452596a51000515ff60889cb20f8ac1b30063402b2e4a2c8b2c00"]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000020a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0xc4) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r4, 0x5423, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_crypto(r0, 0x0, 0x84000) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000100)=0x22) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 1.367279557s ago: executing program 4 (id=811): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(0xffffffffffffffff, 0x0, 0x0, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002080), 0x284e83, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x2, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r7 = dup3(r6, r4, 0x0) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) 966.23863ms ago: executing program 1 (id=812): ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f000075a000/0x2000)=nil, 0x2000}, 0x1}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000004c0)={0x4, r3}, 0x0) landlock_restrict_self(r2, 0x0) renameat2(r1, &(0x7f0000000540)='file3/file5\x00', r1, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 314.370775ms ago: executing program 2 (id=813): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="02"], 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYRES64=r0, @ANYRESDEC=r6, @ANYRES8=r4], 0x3c}}, 0x40080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f00000005c0)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r7, 0x3b8a, &(0x7f0000000340)={0x28, 0x0, r9, 0xcb, &(0x7f00000004c0)=""/203}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) 0s ago: executing program 1 (id=814): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000d0d755c4c9c47528addb243700", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf253e00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4", 0x27, 0x840, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774", 0xc}], 0x3, &(0x7f00000014c0)}}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) kernel console output (not intermixed with test programs): g 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 143.345637][ T29] usb 2-1: config 0 interface 70 altsetting 5 endpoint 0xB has invalid wMaxPacketSize 0 [ 143.356362][ T29] usb 2-1: config 0 interface 70 has no altsetting 0 [ 143.370156][ T29] usb 2-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 143.394430][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.403272][ T29] usb 2-1: Product: syz [ 143.413380][ T29] usb 2-1: Manufacturer: syz [ 143.418723][ T29] usb 2-1: SerialNumber: syz [ 143.427248][ T29] usb 2-1: config 0 descriptor?? [ 143.498059][ T5738] usb 3-1: Using ep0 maxpacket: 16 [ 143.505650][ T5738] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 143.514140][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 143.545437][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 143.577308][ T5738] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 143.587035][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.618599][ T5738] usb 3-1: Product: syz [ 143.627085][ T5738] usb 3-1: Manufacturer: syz [ 143.640372][ T5738] usb 3-1: SerialNumber: syz [ 144.326228][ T5738] usb 3-1: config 0 descriptor?? [ 144.402259][ T5709] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 144.744364][ T5738] usb 3-1: USB disconnect, device number 18 [ 144.756372][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 144.756384][ T30] audit: type=1400 audit(1777204723.640:863): avc: denied { append } for pid=7255 comm="syz.4.299" name="demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 144.807324][ T29] ti_usb_3410_5052 2-1:0.70: TI USB 3410 1 port adapter converter detected [ 144.818128][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 144.830985][ T5709] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.849328][ T29] ti_usb_3410_5052 2-1:0.70: missing endpoints [ 144.857565][ T5709] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 144.881571][ T29] usb 2-1: USB disconnect, device number 9 [ 144.890633][ T5709] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.915260][ T5709] usb 1-1: config 1 interface 0 has no altsetting 0 [ 144.927881][ T5709] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 144.937189][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.945862][ T5709] usb 1-1: Product: syz [ 144.950846][ T5709] usb 1-1: Manufacturer: syz [ 144.955468][ T5709] usb 1-1: SerialNumber: syz [ 144.983168][ T30] audit: type=1400 audit(1777204723.870:864): avc: denied { load_policy } for pid=7264 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 144.983365][ T7265] SELinux: truncated policydb string identifier [ 145.012132][ T7265] SELinux: failed to load policy [ 145.016753][ T7268] tipc: Failed to remove unknown binding: 66,0,0/0:2846057232/2846057233 [ 145.031004][ T7268] tipc: Failed to remove unknown binding: 66,0,0/0:2846057232/2846057233 [ 145.040546][ T30] audit: type=1326 audit(1777204723.920:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7264 comm="syz.4.301" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafa9d9cdd9 code=0x0 [ 145.175652][ T5709] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 145.221849][ T5709] usb 1-1: USB disconnect, device number 17 [ 145.251001][ T5709] usblp0: removed [ 145.613784][ T7286] XFS (nbd1): no-recovery mounts must be read-only. [ 145.773286][ T5709] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 146.129230][ T5709] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.152857][ T5709] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.184568][ T30] audit: type=1400 audit(1777204725.070:866): avc: denied { add_name } for pid=7292 comm="syz.4.309" name="blkio.bfq.io_wait_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.236245][ T5709] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.247886][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.257136][ T30] audit: type=1400 audit(1777204725.100:867): avc: denied { create } for pid=7292 comm="syz.4.309" name="blkio.bfq.io_wait_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 146.279863][ T5709] usb 1-1: SerialNumber: syz [ 146.286427][ T30] audit: type=1400 audit(1777204725.100:868): avc: denied { associate } for pid=7292 comm="syz.4.309" name="blkio.bfq.io_wait_time_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 146.317144][ T30] audit: type=1400 audit(1777204725.110:869): avc: denied { connect } for pid=7295 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.353497][ T7296] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 146.497326][ T7306] netlink: 'syz.2.311': attribute type 27 has an invalid length. [ 146.521538][ T7279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.531192][ T7279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.543285][ T7279] netlink: 'syz.0.304': attribute type 40 has an invalid length. [ 146.605548][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.614454][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.626419][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.304'. [ 146.770574][ T7306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.790058][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.802529][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.813217][ T7306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.966133][ T80] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.982940][ T5709] usb 1-1: 0:2 : does not exist [ 146.993248][ T80] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.019607][ T80] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.050650][ T80] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.123450][ T5709] usb 1-1: USB disconnect, device number 18 [ 147.159242][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.477657][ T5738] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 147.535207][ T7324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.567489][ T29] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 147.612230][ T7327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7327 comm=syz.0.317 [ 147.626809][ T30] audit: type=1400 audit(1777204726.520:870): avc: denied { ioctl } for pid=7330 comm="syz.4.318" path="net:[4026533899]" dev="nsfs" ino=4026533899 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 147.661991][ T5738] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.693100][ T5738] usb 3-1: config 1 interface 0 has no altsetting 0 [ 147.706864][ T5738] usb 3-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 147.716236][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.725002][ T5738] usb 3-1: Product: Ԙ苰î‹ê¯«íœ£å¨²ëŠŠã–·ä»µâˆæ‘¦î¿¸â¦Ÿì¢‹è‚±à¾¯å³¾Ã’䂨좑䬜㊞㚠[ 147.748042][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 147.755057][ T5738] usb 3-1: Manufacturer: Ы [ 147.761258][ T5738] usb 3-1: SerialNumber: syz [ 147.762557][ T29] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 147.778303][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.791707][ T29] usb 2-1: Product: syz [ 147.796031][ T29] usb 2-1: Manufacturer: syz [ 147.801050][ T29] usb 2-1: SerialNumber: syz [ 147.938231][ T5820] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 148.007747][ T5738] usbhid 3-1:1.0: can't add hid device: -71 [ 148.019229][ T5738] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 148.044554][ T5738] usb 3-1: USB disconnect, device number 19 [ 148.110515][ T5820] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 148.126318][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.144818][ T29] usb 2-1: USB disconnect, device number 10 [ 148.164282][ T5820] usb 1-1: Product: syz [ 148.173635][ T5820] usb 1-1: Manufacturer: syz [ 148.180842][ T5820] usb 1-1: SerialNumber: syz [ 148.205119][ T5820] usb 1-1: config 0 descriptor?? [ 148.220851][ T5345] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 148.243227][ T5820] hub 1-1:0.0: bad descriptor, ignoring hub [ 148.249444][ T5820] hub 1-1:0.0: probe with driver hub failed with error -5 [ 148.262608][ T5820] f81232 1-1:0.0: f81534a converter detected [ 148.378521][ T5345] usb 4-1: Using ep0 maxpacket: 16 [ 148.391797][ T5345] usb 4-1: config 0 has no interfaces? [ 148.406321][ T5345] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 148.415839][ T5345] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 148.424062][ T5345] usb 4-1: Manufacturer: syz [ 148.434340][ T5820] usb 1-1: f81534a converter now attached to ttyUSB0 [ 148.444159][ T5345] usb 4-1: config 0 descriptor?? [ 148.694324][ T7334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.713120][ T7334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.839137][ T5820] usb 1-1: USB disconnect, device number 19 [ 148.853339][ T5820] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 148.870271][ T5820] f81232 1-1:0.0: device disconnected [ 149.070804][ T7354] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28909 sclass=netlink_audit_socket pid=7354 comm=syz.4.325 [ 149.149846][ T7354] binder: 7350:7354 ioctl c0306201 0 returned -14 [ 149.891431][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.327'. [ 149.985313][ T30] audit: type=1400 audit(1777204728.870:871): avc: denied { connect } for pid=7355 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.147905][ T29] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 150.247527][ T30] audit: type=1400 audit(1777204729.030:872): avc: denied { block_suspend } for pid=7363 comm="syz.0.329" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 150.282924][ T30] audit: type=1400 audit(1777204729.170:873): avc: denied { read } for pid=7363 comm="syz.0.329" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 150.319032][ T7364] bridge_slave_0 (unregistering): left allmulticast mode [ 150.338427][ T7364] bridge_slave_0 (unregistering): left promiscuous mode [ 150.361955][ T30] audit: type=1400 audit(1777204729.170:874): avc: denied { open } for pid=7363 comm="syz.0.329" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 150.389460][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.423811][ T7369] netlink: 76 bytes leftover after parsing attributes in process `syz.4.330'. [ 150.441115][ T30] audit: type=1400 audit(1777204729.320:875): avc: denied { setattr } for pid=7355 comm="syz.1.326" name="NETLINK" dev="sockfs" ino=17650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.467147][ T29] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 150.480777][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.496063][ T29] usb 3-1: config 0 descriptor?? [ 150.771242][ T7374] netlink: 'syz.0.331': attribute type 3 has an invalid length. [ 150.773313][ T29] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 151.430954][ T5820] usb 4-1: USB disconnect, device number 13 [ 151.481165][ T29] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 151.516725][ T29] [drm] Initialized udl on minor 2 [ 151.872832][ T29] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 151.905130][ T29] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 151.993531][ T7387] XFS (nbd4): no-recovery mounts must be read-only. [ 152.016512][ T29] usb 3-1: USB disconnect, device number 20 [ 152.023661][ T5738] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 152.452292][ T5738] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 152.588056][ T7389] GUP no longer grows the stack in syz.0.334 (7389): 200000004000-200000005000 (200000001000) [ 152.669812][ T7389] CPU: 1 UID: 0 PID: 7389 Comm: syz.0.334 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.669845][ T7389] Tainted: [L]=SOFTLOCKUP [ 152.669852][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.669865][ T7389] Call Trace: [ 152.669871][ T7389] [ 152.669885][ T7389] dump_stack_lvl+0x100/0x190 [ 152.669916][ T7389] gup_vma_lookup.cold+0x83/0x96 [ 152.669945][ T7389] __get_user_pages+0x241/0x32a0 [ 152.669976][ T7389] ? down_read_killable+0x307/0x4b0 [ 152.670003][ T7389] ? __pfx___get_user_pages+0x10/0x10 [ 152.670031][ T7389] __gup_longterm_locked+0x87d/0x16f0 [ 152.670052][ T7389] ? __lock_acquire+0x4a5/0x2630 [ 152.670080][ T7389] ? __pfx___gup_longterm_locked+0x10/0x10 [ 152.670103][ T7389] ? lock_acquire+0x1b1/0x370 [ 152.670135][ T7389] gup_fast_fallback+0x16dc/0x2790 [ 152.670174][ T7389] ? __pfx_gup_fast_fallback+0x10/0x10 [ 152.670199][ T7389] ? __lock_acquire+0x4a5/0x2630 [ 152.670223][ T7389] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 152.670246][ T7389] get_user_pages_fast+0xa7/0xf0 [ 152.670269][ T7389] ? __pfx_get_user_pages_fast+0x10/0x10 [ 152.670297][ T7389] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 152.670328][ T7389] ? __mutex_lock+0x26d/0x1b10 [ 152.670349][ T7389] ? pipe_lock+0x69/0x80 [ 152.670371][ T7389] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 152.670399][ T7389] ? __pfx___mutex_lock+0x10/0x10 [ 152.670418][ T7389] ? find_held_lock+0x2b/0x80 [ 152.670435][ T7389] ? futex_unqueue+0x133/0x2c0 [ 152.670461][ T7389] ? import_ubuf+0x1b6/0x220 [ 152.670490][ T7389] iov_iter_get_pages2+0xa3/0x100 [ 152.670515][ T7389] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 152.670540][ T7389] ? wait_for_space+0x2ca/0x3b0 [ 152.670568][ T7389] __do_sys_vmsplice+0x7dd/0x13c0 [ 152.670604][ T7389] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 152.670636][ T7389] ? __pfx_futex_wait+0x10/0x10 [ 152.670701][ T7389] ? do_syscall_64+0x10b/0xf80 [ 152.670721][ T7389] do_syscall_64+0x10b/0xf80 [ 152.670739][ T7389] ? clear_bhb_loop+0x40/0x90 [ 152.670761][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.670780][ T7389] RIP: 0033:0x7f044579cdd9 [ 152.670796][ T7389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.670814][ T7389] RSP: 002b:00007f04466c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 152.670833][ T7389] RAX: ffffffffffffffda RBX: 00007f0445a15fa0 RCX: 00007f044579cdd9 [ 152.670845][ T7389] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000007 [ 152.670856][ T7389] RBP: 00007f0445832d69 R08: 0000000000000000 R09: 0000000000000000 [ 152.670866][ T7389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.670883][ T7389] R13: 00007f0445a16038 R14: 00007f0445a15fa0 R15: 00007ffcac1b4b18 [ 152.670908][ T7389] [ 153.042855][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 153.051681][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 153.070986][ T30] audit: type=1400 audit(1777204731.930:876): avc: denied { bind } for pid=7399 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.116705][ T7401] netlink: 'syz.4.335': attribute type 12 has an invalid length. [ 153.207043][ T7401] netlink: 76 bytes leftover after parsing attributes in process `syz.4.335'. [ 154.140372][ T7416] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.146464][ T7416] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.152851][ T7416] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 154.158924][ T7416] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.526229][ T30] audit: type=1400 audit(1777204733.410:877): avc: denied { create } for pid=7423 comm="syz.2.343" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 154.634560][ T30] audit: type=1400 audit(1777204733.520:878): avc: denied { mount } for pid=7425 comm="syz.2.344" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 154.750002][ T5345] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 154.967720][ T29] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 155.073999][ T7429] netlink: 252 bytes leftover after parsing attributes in process `syz.0.345'. [ 155.187599][ T5345] usb 5-1: device descriptor read/64, error -71 [ 155.205246][ T7432] netlink: 'syz.3.346': attribute type 2 has an invalid length. [ 155.219848][ T29] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 155.229672][ T29] usb 3-1: config 1 has no interface number 0 [ 155.241607][ T29] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 155.274403][ T29] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 155.285676][ T7432] : entered promiscuous mode [ 155.294428][ T29] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.312341][ T29] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 155.331783][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.356416][ T29] usb 3-1: Product: syz [ 155.365239][ T29] usb 3-1: Manufacturer: syz [ 155.371546][ T29] usb 3-1: SerialNumber: syz [ 155.387295][ T7427] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 155.428685][ T5345] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 155.567485][ T5345] usb 5-1: device descriptor read/64, error -71 [ 155.602173][ T7426] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 155.870493][ T29] usb 3-1: Incompatible driver and firmware versions [ 156.147516][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.153617][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.227590][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.235113][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 156.342468][ T30] audit: type=1400 audit(1777204735.120:879): avc: denied { create } for pid=7448 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 156.444573][ T24] usb 3-1: USB disconnect, device number 21 [ 156.488340][ T30] audit: type=1400 audit(1777204735.220:880): avc: denied { listen } for pid=7448 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 156.497239][ T7455] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20002 [ 156.508408][ T5345] usb usb5-port1: attempt power cycle [ 156.567146][ T7461] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20001 [ 156.655151][ T7463] Device name cannot be null; rc = [-22] [ 156.768072][ T7473] netlink: 60 bytes leftover after parsing attributes in process `syz.4.357'. [ 156.828966][ T30] audit: type=1400 audit(1777204735.720:881): avc: denied { map } for pid=7475 comm="syz.1.358" path="socket:[17843]" dev="sockfs" ino=17843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 156.860964][ T30] audit: type=1400 audit(1777204735.720:882): avc: denied { accept } for pid=7475 comm="syz.1.358" path="socket:[17843]" dev="sockfs" ino=17843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 157.542328][ T7469] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.549383][ T7469] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.555490][ T7469] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 157.561889][ T7469] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 157.622664][ T7490] netlink: 'syz.4.361': attribute type 1 has an invalid length. [ 157.650290][ T7490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=7490 comm=syz.4.361 [ 157.664315][ T30] audit: type=1400 audit(1777204736.550:883): avc: denied { setopt } for pid=7493 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.696733][ T7494] QAT: failed to copy from user cfg_data. [ 157.732863][ T7497] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 157.807722][ T5345] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 157.814720][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 157.837362][ T7501] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 157.902199][ T7500] Cannot find del_set index 2 as target [ 157.942604][ T7501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.969107][ T5345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.983754][ T5345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.991407][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 157.995372][ T5345] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 158.008095][ T5345] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 158.016115][ T5345] usb 3-1: Manufacturer: syz [ 158.026936][ T5345] usb 3-1: config 0 descriptor?? [ 158.041060][ T24] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 158.041929][ T30] audit: type=1400 audit(1777204736.930:884): avc: denied { getopt } for pid=7503 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.119384][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.138584][ T24] usb 1-1: Product: syz [ 158.153552][ T24] usb 1-1: Manufacturer: syz [ 158.169784][ T24] usb 1-1: SerialNumber: syz [ 158.181487][ T7501] bond3: (slave ip6erspan0): making interface the new active one [ 158.190240][ T24] usb 1-1: config 0 descriptor?? [ 158.210866][ T7501] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 158.391437][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 158.400710][ T7512] netlink: 'syz.4.367': attribute type 30 has an invalid length. [ 158.410404][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 158.440521][ T24] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 020 [ 158.462966][ T30] audit: type=1400 audit(1777204737.340:885): avc: denied { create } for pid=7465 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 158.517164][ T5345] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 158.553405][ T5345] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 158.571308][ T5345] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 158.598085][ T5345] usb 3-1: USB disconnect, device number 22 [ 158.799313][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.937139][ T7525] Bluetooth: MGMT ver 1.23 [ 159.323788][ T24] IPVS: starting estimator thread 0... [ 159.430896][ T7529] IPVS: using max 75 ests per chain, 180000 per kthread [ 159.491549][ T7534] syzkaller0: entered promiscuous mode [ 159.497094][ T7534] syzkaller0: entered allmulticast mode [ 159.503443][ T7463] i2c i2c-1: failure reading status [ 159.607606][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.613779][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 159.621409][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.322710][ T30] audit: type=1400 audit(1777204739.210:886): avc: denied { watch_reads } for pid=7555 comm="syz.4.378" path="/64" dev="tmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 160.707314][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 160.751932][ T5820] usb 1-1: USB disconnect, device number 20 [ 161.189345][ T7558] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 162.124640][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.138388][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.196210][ T7596] netem: change failed [ 162.203133][ T7596] kvm: kvm [7595]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 162.212314][ T7596] kvm: kvm [7595]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 162.307511][ T5820] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 162.357483][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 162.473776][ T5820] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 162.493354][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.549646][ T29] usb 5-1: device descriptor read/64, error -71 [ 162.572095][ T5820] usb 1-1: config 0 descriptor?? [ 163.107809][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 163.191496][ T5820] usb 1-1: Cannot read MAC address [ 163.207584][ T5820] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 163.225443][ T5820] usb 1-1: USB disconnect, device number 21 [ 163.276964][ T29] usb 5-1: device descriptor read/64, error -71 [ 163.397937][ T29] usb usb5-port1: attempt power cycle [ 163.425705][ T30] audit: type=1400 audit(1777204742.310:887): avc: denied { accept } for pid=7620 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.527540][ T5608] Bluetooth: hci5: command 0x1003 tx timeout [ 163.557615][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 163.651272][ T30] audit: type=1400 audit(1777204742.540:888): avc: denied { setopt } for pid=7628 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 164.008244][ T7630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.152603][ T30] audit: type=1400 audit(1777204742.540:889): avc: denied { read } for pid=7628 comm="syz.3.393" path="socket:[17093]" dev="sockfs" ino=17093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 164.190347][ T30] audit: type=1400 audit(1777204742.540:890): avc: denied { write } for pid=7628 comm="syz.3.393" path="socket:[17093]" dev="sockfs" ino=17093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 164.219998][ T29] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 164.230919][ T30] audit: type=1400 audit(1777204742.540:891): avc: denied { setopt } for pid=7628 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.253478][ T29] usb 5-1: device descriptor read/8, error -71 [ 164.272118][ T30] audit: type=1400 audit(1777204742.540:892): avc: denied { getopt } for pid=7628 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.407183][ T7636] netlink: 124 bytes leftover after parsing attributes in process `syz.3.395'. [ 164.408106][ T30] audit: type=1400 audit(1777204742.930:893): avc: denied { mounton } for pid=7622 comm="syz.2.391" path="/74/file0" dev="ramfs" ino=18297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 164.460713][ T7636] 9pnet_fd: Insufficient options for proto=fd [ 164.473037][ T30] audit: type=1400 audit(1777204743.290:894): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 164.527974][ T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 164.661504][ T30] audit: type=1400 audit(1777204743.350:895): avc: denied { mounton } for pid=7635 comm="syz.3.395" path="/96/file0" dev="tmpfs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 164.750858][ T7646] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 165.056769][ T29] usb 5-1: device descriptor read/8, error -71 [ 165.063255][ T30] audit: type=1400 audit(1777204743.430:896): avc: denied { getopt } for pid=7637 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 165.168062][ T29] usb usb5-port1: unable to enumerate USB device [ 165.698303][ T29] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 166.012447][ T7661] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 166.018996][ T7661] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.027025][ T7661] vhci_hcd vhci_hcd.0: Device attached [ 166.043820][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 166.128367][ T29] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 6547, setting to 64 [ 166.252796][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 166.467591][ T24] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 166.897261][ T7662] vhci_hcd: connection closed [ 166.972754][ T80] vhci_hcd vhci_hcd.1: stop threads [ 167.070083][ T80] vhci_hcd vhci_hcd.1: release socket [ 167.150892][ T80] vhci_hcd vhci_hcd.1: disconnect device [ 167.750003][ T24] usb 35-1: enqueue for inactive port 0 [ 167.762909][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 167.789429][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.811574][ T29] usb 5-1: Product: syz [ 167.827911][ T29] usb 5-1: Manufacturer: 㷙⹎⯊ඔ茣෱庼೚ᕷ횮ᑇèšï¹„໵㥹輂嚖ꢼ咒ꬥ猒Җ哿鶘颤á¡ê™»êº“䗸ä—眥ꎣ欵節ﲶ탽䅽翧佪ﱡ조摿ֈ쬔ൕé—ᇧퟋꬪᦽ晚쉙䱗ꭕ⣂䀻黻㤒݆謀쵌鴱湩䄱ï’胇崞ǟ㺯췵 [ 167.858555][ T24] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 167.891037][ T29] usb 5-1: SerialNumber: syz [ 167.912979][ T7650] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.495231][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 168.495263][ T30] audit: type=1400 audit(1777204747.370:901): avc: denied { setattr } for pid=7649 comm="syz.4.399" name="RAW" dev="sockfs" ino=18399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.635027][ T29] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 2 proto 2 vid 0x0525 pid 0xA4A8 [ 168.662942][ T29] usb 5-1: USB disconnect, device number 14 [ 168.696538][ T29] usblp0: removed [ 168.956364][ T30] audit: type=1400 audit(1777204747.840:902): avc: denied { connect } for pid=7684 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.075944][ T7727] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 170.083158][ T7727] overlayfs: failed to set xattr on upper [ 170.088935][ T7727] overlayfs: ...falling back to redirect_dir=nofollow. [ 170.095776][ T7727] overlayfs: ...falling back to index=off. [ 170.101617][ T7727] overlayfs: ...falling back to uuid=null. [ 170.108761][ T7727] overlayfs: conflicting lowerdir path [ 170.389505][ T30] audit: type=1400 audit(1777204749.280:903): avc: denied { bind } for pid=7731 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.568029][ T29] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 170.599142][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 170.663650][ T30] audit: type=1400 audit(1777204749.550:904): avc: denied { getopt } for pid=7748 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.713207][ T29] usb 4-1: device descriptor read/64, error -71 [ 170.731938][ T30] audit: type=1400 audit(1777204749.620:905): avc: denied { mount } for pid=7744 comm="syz.4.420" name="/" dev="autofs" ino=18481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 170.920232][ T30] audit: type=1400 audit(1777204749.810:906): avc: denied { connect } for pid=7746 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 171.134673][ T7760] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 171.664887][ T30] audit: type=1400 audit(1777204749.960:907): avc: denied { mounton } for pid=7755 comm="syz.0.425" path="/84/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 171.699073][ T29] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 171.754846][ T7754] kernel profiling enabled (shift: 27) [ 171.867505][ T29] usb 4-1: device descriptor read/64, error -71 [ 172.089962][ T29] usb usb4-port1: attempt power cycle [ 172.530756][ T29] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 172.864297][ T29] usb 4-1: device descriptor read/8, error -71 [ 172.943665][ T30] audit: type=1400 audit(1777204751.820:908): avc: denied { setopt } for pid=7782 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.993368][ T30] audit: type=1400 audit(1777204751.830:909): avc: denied { connect } for pid=7782 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 173.213458][ T30] audit: type=1400 audit(1777204752.100:910): avc: denied { ioctl } for pid=7782 comm="syz.1.432" path="socket:[19569]" dev="sockfs" ino=19569 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 173.683924][ T7810] netlink: 'syz.3.438': attribute type 32 has an invalid length. [ 174.199609][ T5723] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 174.377848][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 174.396491][ T5723] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 174.421337][ T5723] usb 5-1: config 0 has no interface number 0 [ 174.442764][ T5723] usb 5-1: config 0 interface 184 has no altsetting 0 [ 174.468546][ T5723] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 174.488700][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.517201][ T5723] usb 5-1: Product: syz [ 174.535264][ T7813] input: syz0 as /devices/virtual/input/input9 [ 174.551427][ T5723] usb 5-1: Manufacturer: syz [ 174.563419][ T5723] usb 5-1: SerialNumber: syz [ 174.582702][ T5723] usb 5-1: config 0 descriptor?? [ 175.555241][ T7828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.648403][ T5723] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 175.670933][ T5723] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 175.683855][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 175.683869][ T30] audit: type=1400 audit(1777204754.570:913): avc: denied { mount } for pid=7832 comm="syz.3.445" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 175.717818][ T5723] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 175.743395][ T5723] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 175.769380][ T5723] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 175.793820][ T5723] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 175.817584][ T5723] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 175.847507][ T5345] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 175.917686][ T5702] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 175.933520][ T5820] usb 5-1: USB disconnect, device number 15 [ 176.014883][ T5345] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 176.045706][ T5345] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 176.087753][ T5702] usb 1-1: device descriptor read/64, error -71 [ 176.118509][ T5345] usb 2-1: config 0 has no interface number 0 [ 176.144539][ T5345] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 176.196052][ T5345] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 176.215656][ T5345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.233700][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 176.245163][ T5345] usb 2-1: Product: syz [ 176.253389][ T5345] usb 2-1: Manufacturer: syz [ 176.268315][ T5345] usb 2-1: SerialNumber: syz [ 176.327394][ T5345] usb 2-1: config 0 descriptor?? [ 176.358415][ T5702] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 176.538133][ T5702] usb 1-1: device descriptor read/64, error -71 [ 176.579555][ T5345] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 176.759143][ T5702] usb usb1-port1: attempt power cycle [ 176.826039][ T5345] nokiaca42v2 ttyUSB0: required endpoint is missing [ 176.933132][ T5345] usb 2-1: USB disconnect, device number 11 [ 177.003073][ T5345] cypress_m8 2-1:0.35: device disconnected [ 177.116662][ T30] audit: type=1400 audit(1777204756.000:914): avc: denied { bind } for pid=7856 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.207806][ T5702] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 177.229519][ T5702] usb 1-1: device descriptor read/8, error -71 [ 177.564848][ T5702] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 177.590973][ T5702] usb 1-1: device descriptor read/8, error -71 [ 177.663299][ T7867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.692635][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 177.713639][ T5702] usb usb1-port1: unable to enumerate USB device [ 177.732225][ T7867] tipc: Started in network mode [ 177.739582][ T7867] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 177.753273][ T7867] tipc: Enabled bearer , priority 10 [ 177.763509][ T30] audit: type=1400 audit(1777204756.650:915): avc: denied { setopt } for pid=7866 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 177.865894][ T30] audit: type=1400 audit(1777204756.740:916): avc: denied { map } for pid=7866 comm="syz.1.453" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 178.710247][ T7887] fuse: Unknown parameter 'roo"¹o¡»€Ïütrèæfmode' [ 178.741371][ T7886] netlink: 'syz.3.457': attribute type 10 has an invalid length. [ 178.767061][ T7886] netlink: 40 bytes leftover after parsing attributes in process `syz.3.457'. [ 178.879920][ T5702] tipc: Node number set to 1 [ 179.279709][ T7904] XFS (nbd0): no-recovery mounts must be read-only. [ 180.086575][ T30] audit: type=1400 audit(1777204758.960:917): avc: denied { append } for pid=7910 comm="syz.2.465" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 181.827086][ T30] audit: type=1400 audit(1777204760.710:918): avc: denied { name_connect } for pid=7939 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 182.359222][ T7960] XFS (nbd2): no-recovery mounts must be read-only. [ 183.080727][ T30] audit: type=1400 audit(1777204761.840:919): avc: denied { append } for pid=7965 comm="syz.3.479" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 183.348237][ T30] audit: type=1400 audit(1777204761.840:920): avc: denied { write } for pid=7965 comm="syz.3.479" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 183.382838][ T30] audit: type=1400 audit(1777204761.840:921): avc: denied { open } for pid=7965 comm="syz.3.479" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 183.461772][ T7977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.482'. [ 183.539863][ T7977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.482'. [ 184.405096][ T30] audit: type=1400 audit(1777204763.290:922): avc: denied { getopt } for pid=7995 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.717506][ T24] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 184.754589][ T8013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8013 comm=syz.3.492 [ 184.822770][ T5723] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 184.857726][ T8016] random: crng reseeded on system resumption [ 184.874449][ T24] usb 2-1: device descriptor read/64, error -71 [ 184.971126][ T5723] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.148385][ T24] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 185.287501][ T24] usb 2-1: device descriptor read/64, error -71 [ 185.377494][ T5723] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 185.408056][ T24] usb usb2-port1: attempt power cycle [ 185.547480][ T5723] usb 3-1: Using ep0 maxpacket: 32 [ 185.564389][ T5723] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 185.585084][ T5723] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 185.599790][ T5723] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.617502][ T5723] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 185.661209][ T5723] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 185.678115][ T5723] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 185.691576][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.768729][ T5723] usb 3-1: config 0 descriptor?? [ 185.777771][ T24] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 185.810719][ T24] usb 2-1: device descriptor read/8, error -71 [ 185.871917][ T8024] devpts: Bad value for 'max' [ 186.000988][ T5702] usb 3-1: USB disconnect, device number 23 [ 186.058090][ T24] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 186.077847][ T24] usb 2-1: device descriptor read/8, error -71 [ 186.117490][ T5723] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 186.125116][ T5738] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 186.189792][ T24] usb usb2-port1: unable to enumerate USB device [ 186.197475][ T5820] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 186.258024][ T5738] usb 5-1: device descriptor read/64, error -71 [ 186.278791][ T5723] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 186.291051][ T5723] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 186.300182][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.308260][ T5723] usb 1-1: Product: syz [ 186.312417][ T5723] usb 1-1: Manufacturer: syz [ 186.316982][ T5723] usb 1-1: SerialNumber: syz [ 186.326161][ T5723] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 186.357570][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 186.364285][ T5820] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 186.372896][ T5820] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 186.381985][ T5820] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 186.392131][ T5820] usb 4-1: config 1 has no interface number 0 [ 186.398270][ T5820] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.409171][ T5820] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 186.422063][ T5820] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 186.431239][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.439312][ T5702] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 186.452636][ T5820] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 186.497551][ T5738] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 186.597550][ T5702] usb 3-1: Using ep0 maxpacket: 32 [ 186.604141][ T5702] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 186.612584][ T5702] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 186.621276][ T5702] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.627491][ T5738] usb 5-1: device descriptor read/64, error -71 [ 186.631450][ T5702] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 186.646869][ T5702] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 186.660025][ T5702] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 186.670878][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.679017][ T5820] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 186.690608][ T5702] usb 3-1: config 0 descriptor?? [ 186.740906][ T5723] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 186.751973][ T5738] usb usb5-port1: attempt power cycle [ 186.759648][ T5723] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 186.769035][ T5723] usb 1-1: media controller created [ 186.786556][ T5723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.902218][ T5723] usb 1-1: USB disconnect, device number 26 [ 187.097498][ T5738] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 187.127934][ T5738] usb 5-1: device descriptor read/8, error -71 [ 187.159853][ T5702] usb 4-1: USB disconnect, device number 18 [ 187.168221][ T5702] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 187.367542][ T5738] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 187.387977][ T5738] usb 5-1: device descriptor read/8, error -71 [ 187.497803][ T5738] usb usb5-port1: unable to enumerate USB device [ 187.504583][ T5622] Bluetooth: hci0: unexpected event 0x30 length: 255 > 3 [ 187.647520][ T5723] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 188.099885][ T5723] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 188.110141][ T5723] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 188.122241][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 65401, setting to 1024 [ 188.134693][ T5723] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 188.523894][ T5723] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 188.533146][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.544009][ T5723] usb 1-1: Product: syz [ 188.548223][ T5723] usb 1-1: Manufacturer: syz [ 188.552876][ T5723] usb 1-1: SerialNumber: syz [ 188.633104][ T5820] usb 3-1: USB disconnect, device number 24 [ 188.635148][ T30] audit: type=1400 audit(1777204767.500:923): avc: denied { relabelfrom } for pid=8055 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 188.662795][ T5723] usb 1-1: config 0 descriptor?? [ 188.668012][ T30] audit: type=1400 audit(1777204767.500:924): avc: denied { relabelto } for pid=8055 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 188.690463][ T8035] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 188.697725][ T8035] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 188.705980][ T5723] usb 1-1: ucan: probing device on interface #0 [ 188.721105][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.728910][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.663943][ T5723] usb 1-1: ucan: could not read protocol version, ret=0 [ 189.673356][ T5723] usb 1-1: ucan: probe failed; try to update the device firmware [ 189.759594][ T5723] usb 1-1: USB disconnect, device number 27 [ 189.842582][ T30] audit: type=1400 audit(1777204768.730:925): avc: denied { bind } for pid=8079 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 189.927725][ T24] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 190.068182][ T8096] fuse: Bad value for 'fd' [ 190.128578][ T5820] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 190.191354][ T8098] netlink: 220 bytes leftover after parsing attributes in process `syz.3.514'. [ 190.200412][ T8098] netlink: 'syz.3.514': attribute type 2 has an invalid length. [ 190.670429][ T5820] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 190.684565][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 190.698246][ T5820] usb 3-1: Product: syz [ 190.704820][ T5820] usb 3-1: SerialNumber: syz [ 190.720634][ T5820] usb 3-1: config 0 descriptor?? [ 190.867526][ T5723] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 191.027638][ T5723] usb 5-1: Using ep0 maxpacket: 8 [ 191.045164][ T5723] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 191.071077][ T5723] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 191.092775][ T5723] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 191.105639][ T5723] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 191.120561][ T5723] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 191.132809][ T5723] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.146136][ T5723] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 191.155553][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.217504][ T5738] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 191.401450][ T30] audit: type=1400 audit(1777204770.290:926): avc: denied { remount } for pid=8113 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 191.451983][ T5723] usb 5-1: usb_control_msg returned -32 [ 191.468345][ T5738] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 191.477889][ T5723] usbtmc 5-1:16.0: can't read capabilities [ 191.487621][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 191.510090][ T5738] usb 4-1: Product: syz [ 191.523215][ T5738] usb 4-1: SerialNumber: syz [ 191.624267][ T5738] usb 4-1: config 0 descriptor?? [ 191.816267][ T8116] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 191.833455][ T5723] usb 5-1: USB disconnect, device number 20 [ 192.048081][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 192.570025][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 192.577687][ T24] usb 2-1: can't read configurations, error -71 [ 192.950317][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 192.987367][ T5820] usb 3-1: USB disconnect, device number 25 [ 193.181276][ T24] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 193.192356][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.223535][ T24] usb 2-1: Product: syz [ 193.238478][ T24] usb 2-1: Manufacturer: syz [ 193.245697][ T24] usb 2-1: SerialNumber: syz [ 193.256208][ T24] usb 2-1: config 0 descriptor?? [ 193.268925][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 193.276498][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 193.486961][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 193.521287][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.549841][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 193.567654][ T24] usb 2-1: media controller created [ 193.725281][ T8139] trusted_key: encrypted_key: insufficient parameters specified [ 193.803629][ T30] audit: type=1400 audit(1777204772.650:927): avc: denied { bind } for pid=8133 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 193.998731][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.095989][ T5738] usb 4-1: USB disconnect, device number 19 [ 194.107580][ T5820] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 194.150532][ T8143] ptrace attach of "./syz-executor exec"[8144] was attempted by "./syz-executor exec"[8143] [ 194.175267][ T24] DVB: Unable to find symbol dib7000p_attach() [ 194.193177][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 194.267561][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 194.267579][ T24] Registered IR keymap rc-empty [ 194.267892][ T24] dvb-usb: could not initialize remote control. [ 194.267903][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 194.330432][ T5820] usb 5-1: Using ep0 maxpacket: 16 [ 194.332053][ T5820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.332081][ T5820] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.335071][ T5820] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 194.335101][ T5820] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 194.335121][ T5820] usb 5-1: Product: syz [ 194.335146][ T5820] usb 5-1: Manufacturer: syz [ 194.335161][ T5820] usb 5-1: SerialNumber: syz [ 194.337364][ T5820] usb 5-1: config 0 descriptor?? [ 194.372315][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 194.372329][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.529'. [ 194.393051][ T8154] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 194.410848][ T8154] bond4 (unregistering): Released all slaves [ 194.561628][ T8136] netlink: 56 bytes leftover after parsing attributes in process `syz.4.525'. [ 194.562611][ T8136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.562854][ T8136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.566281][ T5738] usb 5-1: USB disconnect, device number 21 [ 195.246467][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 195.257176][ T8175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.534'. [ 195.637546][ T24] usb 2-1: USB disconnect, device number 17 [ 196.188328][ T8177] 9pnet_fd: p9_fd_create_tcp (8177): problem connecting socket to 127.0.0.1 [ 196.294373][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 196.607522][ T29] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 196.797585][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 196.900257][ T29] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 137, using maximum allowed: 30 [ 197.035677][ T29] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 137 [ 197.156611][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.271423][ T29] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 197.409842][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.634391][ T29] usb 1-1: config 0 descriptor?? [ 197.837347][ T30] audit: type=1400 audit(1777204776.720:928): avc: denied { setopt } for pid=8186 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.915210][ T8212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.954230][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.981614][ T8215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.009406][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.022254][ T8215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.084139][ T29] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 198.110175][ T8212] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 198.123817][ T29] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 198.172065][ T29] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 198.215365][ T29] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 198.277796][ T29] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 198.297187][ T29] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 198.370429][ T29] dragonrise 0003:0079:0011.0006: reserved main item tag 0xe [ 198.481150][ T29] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 198.505555][ T29] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 198.954312][ T29] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 198.963929][ T30] audit: type=1400 audit(1777204777.850:929): avc: denied { ioctl } for pid=8228 comm="syz.1.547" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 198.995917][ T29] dragonrise 0003:0079:0011.0006: unknown main item tag 0x0 [ 199.091300][ T29] dragonrise 0003:0079:0011.0006: hidraw0: USB HID v0.20 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0 [ 199.166737][ T29] usb 1-1: USB disconnect, device number 28 [ 199.334487][ T8231] fido_id[8231]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 199.418323][ T8219] block device autoloading is deprecated and will be removed. [ 199.607616][ T5820] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 199.768088][ T5820] usb 4-1: device descriptor read/64, error -71 [ 200.017539][ T5820] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 200.177862][ T5820] usb 4-1: device descriptor read/64, error -71 [ 200.318502][ T5820] usb usb4-port1: attempt power cycle [ 200.537488][ T5738] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 200.747514][ T5820] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 201.006719][ T5820] usb 4-1: device descriptor read/8, error -71 [ 201.470408][ T5738] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 201.780413][ T5738] usb 2-1: config 5 has no interface number 0 [ 201.805471][ T5738] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 201.877534][ T5820] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 201.899009][ T5738] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 30768, setting to 64 [ 201.915580][ T5738] usb 2-1: config 5 interface 123 has no altsetting 0 [ 201.926345][ T5738] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 201.927956][ T5820] usb 4-1: device descriptor read/8, error -71 [ 201.935596][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.212001][ T5738] usb 2-1: Product: syz [ 202.216683][ T5738] usb 2-1: Manufacturer: syz [ 202.221362][ T5738] usb 2-1: SerialNumber: syz [ 202.232011][ T8247] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 202.382120][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.396536][ T5820] usb usb4-port1: unable to enumerate USB device [ 202.411098][ T8268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8268 comm=syz.4.557 [ 202.427471][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.577429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 203.109726][ T5738] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 203.136277][ T8268] netlink: 36 bytes leftover after parsing attributes in process `syz.4.557'. [ 203.157346][ T5738] usb 2-1: USB disconnect, device number 18 [ 203.185587][ T8273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.558'. [ 203.269422][ T8273] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 204.670666][ T30] audit: type=1400 audit(1777204783.560:930): avc: denied { lock } for pid=8292 comm="syz.4.562" path="socket:[21769]" dev="sockfs" ino=21769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.149962][ T8293] netlink: 48 bytes leftover after parsing attributes in process `syz.4.562'. [ 205.158875][ T8293] netlink: 'syz.4.562': attribute type 1 has an invalid length. [ 205.279719][ T8301] comedi: valid board names for 8255 driver are: [ 205.304103][ T8301] 8255 [ 205.317149][ T8301] comedi: valid board names for vmk80xx driver are: [ 205.322638][ T8310] i2c i2c-0: Invalid block write size 34 [ 205.349188][ T8301] vmk80xx [ 205.353196][ T8301] comedi: valid board names for usbduxsigma driver are: [ 205.380236][ T8301] usbduxsigma [ 205.390567][ T8301] comedi: valid board names for usbduxfast driver are: [ 205.419117][ T8301] usbduxfast [ 205.436389][ T8301] comedi: valid board names for usbdux driver are: [ 205.454925][ T8301] usbdux [ 205.473669][ T8301] comedi: valid board names for ni6501 driver are: [ 205.500594][ T8301] ni6501 [ 205.508324][ T8301] comedi: valid board names for dt9812 driver are: [ 205.515030][ T8301] dt9812 [ 205.518140][ T8301] comedi: valid board names for ni_labpc_cs driver are: [ 205.525544][ T8301] ni_labpc_cs [ 205.530233][ T8301] comedi: valid board names for ni_daq_700 driver are: [ 205.540249][ T8301] ni_daq_700 [ 205.545340][ T8301] comedi: valid board names for labpc_pci driver are: [ 205.553988][ T8301] labpc_pci [ 205.557239][ T8301] comedi: valid board names for adl_pci9118 driver are: [ 205.564490][ T8301] pci9118dg [ 205.568135][ T8301] pci9118hg [ 205.571403][ T8301] pci9118hr [ 205.574707][ T8301] comedi: valid board names for 8255_pci driver are: [ 205.577650][ T5820] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 205.594133][ T8301] 8255_pci [ 205.597283][ T8301] comedi: valid board names for s526 driver are: [ 205.604532][ T8301] s526 [ 205.611609][ T8301] comedi: valid board names for multiq3 driver are: [ 205.618757][ T8301] multiq3 [ 205.625025][ T8301] comedi: valid board names for pcmuio driver are: [ 205.631972][ T8301] pcmuio48 [ 205.637657][ T8301] pcmuio96 [ 205.643323][ T8301] comedi: valid board names for pcmmio driver are: [ 205.650208][ T8301] pcmmio [ 205.653210][ T8301] comedi: valid board names for pcmda12 driver are: [ 205.659983][ T5738] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 205.679966][ T8301] pcmda12 [ 205.688440][ T8301] comedi: valid board names for pcmad driver are: [ 205.697116][ T8301] pcmad12 [ 205.700961][ T8301] pcmad16 [ 205.707662][ T8301] comedi: valid board names for ni_labpc driver are: [ 205.717205][ T8301] lab-pc-1200 [ 205.721628][ T8301] lab-pc-1200ai [ 205.726251][ T8301] lab-pc+ [ 205.729679][ T8301] comedi: valid board names for atmio16 driver are: [ 205.736994][ T8301] atmio16 [ 205.740911][ T8301] atmio16d [ 205.747640][ T8301] comedi: valid board names for ni_at_ao driver are: [ 205.757663][ T8301] at-ao-6 [ 205.762001][ T8301] at-ao-10 [ 205.766368][ T8301] comedi: valid board names for ni_at_a2150 driver are: [ 205.777187][ T8301] ni_at_a2150 [ 205.779365][ T5820] usb 5-1: not running at top speed; connect to a high speed hub [ 205.791777][ T8301] comedi: valid board names for adq12b driver are: [ 205.794023][ T5820] usb 5-1: config 11 has an invalid interface number: 47 but max is 0 [ 205.813666][ T5820] usb 5-1: config 11 has no interface number 0 [ 205.814698][ T8301] adq12b [ 205.829984][ T5738] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 205.840045][ T5820] usb 5-1: config 11 interface 47 has no altsetting 0 [ 205.850150][ T8301] comedi: valid board names for mpc624 driver are: [ 205.861692][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.870197][ T8301] mpc624 [ 205.870911][ T5820] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=6d.bf [ 205.883321][ T8301] comedi: valid board names for c6xdigio driver are: [ 205.890213][ T5738] usb 1-1: Product: syz [ 205.895508][ T5738] usb 1-1: Manufacturer: syz [ 205.895525][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.911595][ T8301] c6xdigio [ 205.916895][ T8301] comedi: valid board names for aio_iiro_16 driver are: [ 205.924155][ T5738] usb 1-1: SerialNumber: syz [ 205.936173][ T5738] usb 1-1: config 0 descriptor?? [ 205.942930][ T8301] aio_iiro_16 [ 205.947760][ T8301] comedi: valid board names for aio_aio12_8 driver are: [ 205.955821][ T5820] usb 5-1: Product: syz [ 205.964301][ T8301] aio_aio12_8 [ 205.968373][ T5820] usb 5-1: Manufacturer: syz [ 205.977545][ T5820] usb 5-1: SerialNumber: syz [ 205.995641][ T8301] aio_ai12_8 [ 206.002455][ T8301] aio_ao12_4 [ 206.006850][ T8301] comedi: valid board names for fl512 driver are: [ 206.013648][ T8301] fl512 [ 206.023194][ T8301] comedi: valid board names for dmm32at driver are: [ 206.057729][ T8301] dmm32at [ 206.075521][ T8301] comedi: valid board names for dt282x driver are: [ 206.091954][ T8301] dt2821 [ 206.096725][ T8301] dt2821-f [ 206.108229][ T5723] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 206.115822][ T8301] dt2821-g [ 206.124448][ T8301] dt2823 [ 206.136212][ T8301] dt2824-pgh [ 206.147831][ T8301] dt2824-pgl [ 206.157282][ T8301] dt2825 [ 206.172451][ T5738] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 206.181302][ T8301] dt2827 [ 206.184500][ T8301] dt2828 [ 206.187759][ T8301] dt2829 [ 206.192912][ T8301] dt21-ez [ 206.206022][ T8301] dt23-ez [ 206.216732][ T8301] dt24-ez [ 206.219897][ T8301] dt24-ez-pgl [ 206.254597][ T8301] comedi: valid board names for dt2817 driver are: [ 206.270711][ T5723] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 206.281945][ T8301] dt2817 [ 206.288003][ T8301] comedi: valid board names for dt2815 driver are: [ 206.294667][ T5723] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.309415][ T8301] dt2815 [ 206.313845][ T8301] comedi: valid board names for dt2814 driver are: [ 206.320636][ T5723] usb 3-1: config 2 interface 0 has no altsetting 0 [ 206.327916][ T8301] dt2814 [ 206.331000][ T8301] comedi: valid board names for dt2811 driver are: [ 206.339775][ T5723] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 206.350520][ T8301] dt2811-pgh [ 206.367501][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 206.382287][ T5820] usb 5-1: USB disconnect, device number 22 [ 206.394224][ T8301] dt2811-pgl [ 206.399358][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.411585][ T8301] comedi: valid board names for dt2801 driver are: [ 206.420604][ T5723] usb 3-1: Product: syz [ 206.425766][ T8301] dt2801 [ 206.431519][ T5723] usb 3-1: Manufacturer: syz [ 206.442628][ T8301] comedi: valid board names for das6402 driver are: [ 206.450419][ T5723] usb 3-1: SerialNumber: syz [ 206.470996][ T8301] das6402-12 [ 206.474459][ T8301] das6402-16 [ 206.501718][ T8301] comedi: valid board names for das1800 driver are: [ 206.537996][ T8301] das-1701st [ 206.548594][ T8301] das-1701st-da [ 206.556795][ T8301] das-1702st [ 206.565864][ T8301] das-1702st-da [ 206.570746][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 206.576771][ T8301] das-1702hr [ 206.582337][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.592074][ T8301] das-1702hr-da [ 206.596579][ T24] usb 2-1: config 159 has an invalid interface number: 195 but max is 0 [ 206.605932][ T24] usb 2-1: config 159 has no interface number 0 [ 206.612590][ T8301] das-1701ao [ 206.616081][ T8301] das-1702ao [ 206.619497][ T24] usb 2-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 206.630538][ T8301] das-1801st [ 206.635635][ T8301] das-1801st-da [ 206.645010][ T8301] das-1802st [ 206.648427][ T24] usb 2-1: config 159 interface 195 has no altsetting 0 [ 206.655586][ T8301] das-1802st-da [ 206.659325][ T8301] das-1802hr [ 206.662684][ T8301] das-1802hr-da [ 206.668858][ T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 206.679155][ T8301] das-1801hc [ 206.682466][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.693034][ T8301] das-1802hc [ 206.697573][ T8301] das-1801ao [ 206.700944][ T24] usb 2-1: Product: syz [ 206.705098][ T8301] das-1802ao [ 206.711564][ T24] usb 2-1: Manufacturer: syz [ 206.716162][ T8301] comedi: valid board names for das800 driver are: [ 206.722956][ T24] usb 2-1: SerialNumber: syz [ 206.727755][ T8301] das-800 [ 206.734343][ T8301] cio-das800 [ 206.741264][ T8301] das-801 [ 206.749147][ T8301] cio-das801 [ 206.755751][ T8301] das-802 [ 206.769088][ T8301] cio-das802 [ 206.773604][ T8301] cio-das802/16 [ 206.784342][ T8301] comedi: valid board names for isa-das08 driver are: [ 206.793185][ T8301] isa-das08 [ 206.797338][ T8301] das08-pgm [ 206.798006][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.809402][ T8301] das08-pgh [ 206.815226][ T8301] das08-pgl [ 206.822367][ T8301] das08-aoh [ 206.829181][ T8301] das08-aol [ 206.835761][ T8301] das08-aom [ 206.842518][ T8301] das08/jr-ao [ 206.849394][ T8301] das08jr-16-ao [ 206.857073][ T8301] pc104-das08 [ 206.864141][ T8301] das08jr/16 [ 206.872767][ T8301] comedi: valid board names for das16m1 driver are: [ 206.888739][ T8301] das16m1 [ 206.894465][ T8301] comedi: valid board names for dac02 driver are: [ 206.909558][ T8301] dac02 [ 206.921049][ T5723] ims_pcu 3-1:2.0: Missing CDC union descriptor [ 206.929152][ T8301] comedi: valid board names for rti802 driver are: [ 206.939734][ T5723] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22 [ 206.951162][ T8301] rti802 [ 206.962970][ T8301] comedi: valid board names for rti800 driver are: [ 206.973777][ T24] udl 2-1:159.195: [drm] Unrecognized vendor firmware descriptor [ 206.992272][ T5723] usb 3-1: USB disconnect, device number 26 [ 206.998206][ T8301] rti800 [ 207.001987][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 207.010637][ T8301] rti815 [ 207.023772][ T8301] comedi: valid board names for pcm3724 driver are: [ 207.041988][ T8301] pcm3724 [ 207.047241][ T24] [drm] Initialized udl 0.0.1 for 2-1:159.195 on minor 2 [ 207.054415][ T8301] comedi: valid board names for pcl818 driver are: [ 207.061975][ T24] [drm] Initialized udl on minor 2 [ 207.067225][ T8301] pcl818l [ 207.071393][ T8301] pcl818h [ 207.074482][ T24] udl 2-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 207.083071][ T8301] pcl818hd [ 207.086560][ T8301] pcl818hg [ 207.092169][ T8301] pcl818 [ 207.095542][ T24] udl 2-1:159.195: [drm] Cannot find any crtc or sizes [ 207.102452][ T8301] pcl718 [ 207.106806][ T8301] pcm3718 [ 207.112403][ T29] udl 2-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 207.122205][ T8301] comedi: valid board names for pcl816 driver are: [ 207.130631][ T24] usb 2-1: USB disconnect, device number 19 [ 207.140378][ T29] udl 2-1:159.195: [drm] Cannot find any crtc or sizes [ 207.149250][ T8301] pcl816 [ 207.157540][ T8301] pcl814b [ 207.172018][ T8301] comedi: valid board names for pcl812 driver are: [ 207.192634][ T8301] pcl812 [ 207.199386][ T8301] pcl812pg [ 207.206836][ T8301] acl8112pg [ 207.219339][ T8301] acl8112dg [ 207.227230][ T8301] acl8112hg [ 207.235795][ T8301] a821pgl [ 207.243239][ T8301] a821pglnda [ 207.252323][ T8301] a821pgh [ 207.258425][ T8301] a822pgl [ 207.264978][ T8301] a822pgh [ 207.275587][ T8301] a823pgl [ 207.293312][ T8301] a823pgh [ 207.296335][ T8301] pcl813 [ 207.304944][ T8301] pcl813b [ 207.311274][ T8301] acl8113 [ 207.332509][ T8301] iso813 [ 207.341672][ T8301] acl8216 [ 207.349888][ T8301] a826pg [ 207.354386][ T8301] comedi: valid board names for pcl730 driver are: [ 207.373398][ T8301] pcl730 [ 207.381914][ T8301] iso730 [ 207.393167][ T8301] acl7130 [ 207.398748][ T8301] pcm3730 [ 207.404636][ T8301] pcl725 [ 207.407962][ T8301] p8r8dio [ 207.419992][ T8301] acl7225b [ 207.428882][ T8301] p16r16dio [ 207.438343][ T8301] pcl733 [ 207.445238][ T8301] pcl734 [ 207.449952][ T8301] opmm-1616-xt [ 207.457263][ T8301] pearl-mm-p [ 207.462562][ T8301] ir104-pbf [ 207.470002][ T8301] comedi: valid board names for pcl726 driver are: [ 207.480305][ T8301] pcl726 [ 207.493068][ T8301] pcl727 [ 207.496002][ T8301] pcl728 [ 207.500613][ T8301] acl6126 [ 207.503634][ T8301] acl6128 [ 207.506638][ T8301] comedi: valid board names for pcl724 driver are: [ 207.515003][ T8301] pcl724 [ 207.524842][ T8301] pcl722 [ 207.530391][ T8301] pcl731 [ 207.536854][ T8301] acl7122 [ 207.543102][ T8301] acl7124 [ 207.559099][ T8301] pet48dio [ 207.571899][ T8301] pcmio48 [ 207.579278][ T8301] onyx-mm-dio [ 207.589848][ T8301] comedi: valid board names for pcl711 driver are: [ 207.605982][ T5738] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 207.617728][ T8301] pcl711 [ 207.621231][ T8301] pcl711b [ 207.629026][ T8301] acl8112hg [ 207.636909][ T5738] usb 1-1: USB disconnect, device number 29 [ 207.645989][ T8301] acl8112dg [ 207.656425][ T8301] comedi: valid board names for amplc_pc263 driver are: [ 207.681804][ T8301] pc263 [ 207.688201][ T8301] comedi: valid board names for amplc_pc236 driver are: [ 207.701442][ T8301] pc36at [ 207.727358][ T8301] comedi: valid board names for amplc_dio200 driver are: [ 207.761276][ T8301] pc212e [ 207.769689][ T8301] pc214e [ 207.882582][ T8301] pc215e [ 207.889176][ T8301] pc218e [ 207.901182][ T8301] pc272e [ 207.912251][ T8301] comedi: valid board names for comedi_parport driver are: [ 208.002018][ T8331] NILFS (nullb0): couldn't find nilfs on the device [ 208.181938][ T30] audit: type=1400 audit(1777204786.920:931): avc: denied { read } for pid=8328 comm="syz.1.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 208.262618][ T8301] comedi_parport [ 208.272522][ T8301] comedi: valid board names for comedi_test driver are: [ 208.286498][ T8334] loop2: detected capacity change from 0 to 7 [ 208.306195][ T8334] Dev loop2: unable to read RDB block 7 [ 208.313197][ T8301] comedi_test [ 208.321958][ T8301] comedi: valid board names for comedi_bond driver are: [ 208.322797][ T8334] loop2: unable to read partition table [ 208.339591][ T8301] comedi_bond [ 208.346049][ T8334] loop2: partition table beyond EOD, truncated [ 208.358247][ T8334] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 208.799097][ T8355] netlink: 104 bytes leftover after parsing attributes in process `syz.1.582'. [ 208.867460][ T5608] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.915349][ T8355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.582'. [ 209.236150][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 209.644877][ T30] audit: type=1400 audit(1777204788.530:932): avc: denied { map } for pid=8369 comm="syz.1.585" path="socket:[21129]" dev="sockfs" ino=21129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 209.719046][ T30] audit: type=1400 audit(1777204788.560:933): avc: denied { read } for pid=8369 comm="syz.1.585" path="socket:[21129]" dev="sockfs" ino=21129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 209.788119][ T8378] 9p: p9: multiple sources not supported [ 210.248315][ T8396] random: crng reseeded on system resumption [ 210.973865][ T8421] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 210.983560][ T8421] SELinux: failed to load policy [ 211.764193][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 211.918234][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 211.927981][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 211.948068][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.989627][ T8438] xt_hashlimit: size too large, truncated to 1048576 [ 212.111440][ T24] usb 4-1: config 0 descriptor?? [ 212.173924][ T5716] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 212.392605][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 212.411318][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 212.440812][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 212.457762][ T24] usb 4-1: media controller created [ 212.497701][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.511085][ T5716] usb 2-1: Using ep0 maxpacket: 32 [ 212.530208][ T5716] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 212.550089][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.568352][ T5716] usb 2-1: Product: syz [ 212.575394][ T5716] usb 2-1: Manufacturer: syz [ 212.581945][ T5716] usb 2-1: SerialNumber: syz [ 212.614031][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.601'. [ 212.626897][ T5716] usb 2-1: config 0 descriptor?? [ 212.656708][ T8426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.683125][ T8426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.720836][ T24] az6027: usb out operation failed. (-71) [ 212.863894][ T24] az6027: usb out operation failed. (-71) [ 212.871027][ T24] stb0899_attach: Driver disabled by Kconfig [ 212.877041][ T24] az6027: no front-end attached [ 212.877041][ T24] [ 212.888143][ T24] az6027: usb out operation failed. (-71) [ 212.893866][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 212.908097][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 212.946454][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 213.120716][ T5716] airspy 2-1:0.0: Board ID: 00 [ 213.121128][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 213.140415][ T5716] airspy 2-1:0.0: Firmware version: [ 213.152543][ T8461] netlink: 'syz.0.609': attribute type 2 has an invalid length. [ 213.160240][ T8461] netlink: 'syz.0.609': attribute type 11 has an invalid length. [ 213.167958][ T8461] netlink: 132 bytes leftover after parsing attributes in process `syz.0.609'. [ 213.189119][ T24] usb 4-1: USB disconnect, device number 24 [ 213.264059][ T29] hid_parser_main: 28 callbacks suppressed [ 213.264072][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 213.441107][ T29] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.984468][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 214.494662][ T8464] fido_id[8464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.762115][ T5716] airspy 2-1:0.0: Registered as swradio24 [ 214.787501][ T5716] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 214.819447][ T30] audit: type=1400 audit(1777204793.710:934): avc: denied { create } for pid=8469 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 215.076319][ T8478] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.612'. [ 215.274267][ T8485] xt_hashlimit: size too large, truncated to 1048576 [ 215.861244][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.616'. [ 215.870338][ T8492] netlink: 212 bytes leftover after parsing attributes in process `syz.0.616'. [ 215.879672][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.616'. [ 216.358581][ T29] usb 2-1: USB disconnect, device number 20 [ 216.527505][ T5738] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 216.731905][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 216.739888][ T5738] usb 3-1: device descriptor read/64, error -71 [ 217.228888][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.236425][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 217.245767][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.257098][ T24] usb 1-1: config 0 descriptor?? [ 217.367540][ T5738] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 217.508055][ T5738] usb 3-1: device descriptor read/64, error -71 [ 217.762489][ T5738] usb usb3-port1: attempt power cycle [ 217.826271][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 218.107499][ T5738] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 218.150397][ T5738] usb 3-1: device descriptor read/8, error -71 [ 218.234302][ T8533] overlay: Unknown parameter '/' [ 218.242501][ T8533] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 218.398999][ T30] audit: type=1400 audit(1777204797.120:935): avc: denied { mount } for pid=8523 comm="syz.3.625" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 218.902444][ T5738] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 218.910286][ T24] video4linux radio48: keene_cmd_main failed (-110) [ 218.922158][ T30] audit: type=1400 audit(1777204797.790:936): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 218.977776][ T24] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 219.029623][ T5738] usb 3-1: device descriptor read/8, error -71 [ 219.039480][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 219.171384][ T5820] usb 1-1: USB disconnect, device number 30 [ 219.190519][ T5738] usb usb3-port1: unable to enumerate USB device [ 219.749831][ T5738] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 219.800095][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 219.854844][ T30] audit: type=1400 audit(1777204798.740:937): avc: denied { connect } for pid=8566 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.882200][ T8564] mac80211_hwsim hwsim10 : renamed from wlan1 (while UP) [ 221.265160][ T30] audit: type=1400 audit(1777204800.150:938): avc: denied { map } for pid=8595 comm="syz.0.642" path="socket:[23555]" dev="sockfs" ino=23555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 221.469740][ T30] audit: type=1400 audit(1777204800.350:939): avc: denied { map } for pid=8602 comm="syz.2.644" path="/proc/459/pagemap" dev="proc" ino=23600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 221.499114][ T5820] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 222.083350][ T5345] IPVS: starting estimator thread 0... [ 222.087708][ T8617] netlink: 440 bytes leftover after parsing attributes in process `syz.0.646'. [ 222.090595][ T5820] usb 4-1: unable to get BOS descriptor or descriptor too short [ 222.106140][ T5820] usb 4-1: not running at top speed; connect to a high speed hub [ 222.115112][ T5820] usb 4-1: config 5 has an invalid interface number: 149 but max is 0 [ 222.120404][ T30] audit: type=1400 audit(1777204801.000:940): avc: denied { write } for pid=8616 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 222.124852][ T5820] usb 4-1: config 5 has no interface number 0 [ 222.157201][ T5820] usb 4-1: config 5 interface 149 has no altsetting 0 [ 222.170614][ T5820] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=c5.9e [ 222.180006][ T8620] IPVS: using max 47 ests per chain, 112800 per kthread [ 222.187179][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.196326][ T5820] usb 4-1: Product: syz [ 222.200604][ T5820] usb 4-1: Manufacturer: syz [ 222.205574][ T5820] usb 4-1: SerialNumber: syz [ 222.660667][ T5820] usb_ehset_test 4-1:5.149: probe with driver usb_ehset_test failed with error -32 [ 222.704246][ T8627] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 222.745530][ T5820] usb 4-1: USB disconnect, device number 25 [ 222.835203][ T8627] bond1: entered promiscuous mode [ 222.855487][ T8627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.886639][ T8631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.908644][ T8631] bond1: (slave sit2): The slave device specified does not support setting the MAC address [ 222.918901][ T8631] bond1: (slave sit2): Setting fail_over_mac to active for active-backup mode [ 222.933293][ T8631] bond1: (slave sit2): making interface the new active one [ 222.940835][ T8631] sit2: entered promiscuous mode [ 222.958219][ T8631] bond1: (slave sit2): Enslaving as an active interface with an up link [ 223.194892][ T8653] overlayfs: failed to resolve './bus': -2 [ 223.210823][ T8655] netlink: 27 bytes leftover after parsing attributes in process `syz.1.655'. [ 223.245481][ T30] audit: type=1400 audit(1777204802.130:941): avc: denied { setopt } for pid=8651 comm="syz.1.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 223.278605][ T5716] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 223.437729][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 223.606131][ T5716] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 223.688095][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.730686][ T5716] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.950995][ T5716] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.966573][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.987816][ T5716] usb 3-1: Product: syz [ 223.995817][ T5716] usb 3-1: Manufacturer: syz [ 224.012375][ T5716] usb 3-1: SerialNumber: syz [ 224.043144][ T5716] usb 3-1: 0:2 : does not exist [ 225.046160][ T8645] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 225.076493][ T8645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.139136][ T5716] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 225.251420][ T5716] usb 3-1: USB disconnect, device number 31 [ 225.278259][ T30] audit: type=1400 audit(1777204804.170:942): avc: denied { listen } for pid=8708 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.323705][ T30] audit: type=1400 audit(1777204804.190:943): avc: denied { ioctl } for pid=8708 comm="syz.0.666" path="socket:[23788]" dev="sockfs" ino=23788 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 225.627314][ T30] audit: type=1400 audit(1777204804.510:944): avc: denied { getopt } for pid=8720 comm="syz.1.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 225.718702][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 226.107884][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 226.253304][ T24] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.276912][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 226.283739][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 226.293993][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.308802][ T24] usb 1-1: config 0 descriptor?? [ 226.707307][ T30] audit: type=1400 audit(1777204805.590:945): avc: denied { create } for pid=8740 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 227.667414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 227.858940][ T24] wacom 0003:056A:00CE.0008: unknown main item tag 0x0 [ 227.923575][ T24] wacom 0003:056A:00CE.0008: unknown main item tag 0x0 [ 227.966393][ T24] wacom 0003:056A:00CE.0008: unknown main item tag 0x0 [ 228.004754][ T24] wacom 0003:056A:00CE.0008: unknown main item tag 0x0 [ 228.127228][ T24] wacom 0003:056A:00CE.0008: unknown main item tag 0x0 [ 228.163281][ T24] wacom 0003:056A:00CE.0008: unknown main item tag 0x0 [ 228.188471][ T24] wacom 0003:056A:00CE.0008: unknown main item tag 0x0 [ 228.195682][ T24] wacom 0003:056A:00CE.0008: unknown main item tag 0x0 [ 228.206487][ T24] wacom 0003:056A:00CE.0008: unknown main item tag 0x0 [ 228.213641][ T24] wacom 0003:056A:00CE.0008: unknown main item tag 0x0 [ 228.230977][ T24] usb 1-1: USB disconnect, device number 31 [ 228.600480][ T30] audit: type=1400 audit(1777204807.490:946): avc: denied { getopt } for pid=8759 comm="syz.1.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.666835][ T30] audit: type=1400 audit(1777204807.540:947): avc: denied { map } for pid=8766 comm="syz.2.679" path="socket:[23859]" dev="sockfs" ino=23859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 228.742027][ T30] audit: type=1326 audit(1777204807.630:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8766 comm="syz.2.679" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48adf9cdd9 code=0x0 [ 229.177623][ T5702] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 229.342988][ T5702] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 229.358675][ T5702] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 229.369203][ T5702] usb 1-1: config 220 has no interface number 2 [ 229.375520][ T5702] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 229.392937][ T5702] usb 1-1: config 220 interface 0 has no altsetting 0 [ 229.400263][ T30] audit: type=1400 audit(1777204808.280:949): avc: denied { ioctl } for pid=8789 comm="syz.4.686" path="socket:[23886]" dev="sockfs" ino=23886 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 229.424819][ T5702] usb 1-1: config 220 interface 76 has no altsetting 0 [ 229.432034][ T5702] usb 1-1: config 220 interface 1 has no altsetting 0 [ 229.440688][ T5702] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 229.451196][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.460120][ T5702] usb 1-1: Product: syz [ 229.464300][ T5702] usb 1-1: Manufacturer: syz [ 229.468960][ T5702] usb 1-1: SerialNumber: syz [ 229.517630][ T5716] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 229.534134][ T8794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.587778][ T5723] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 229.628505][ T30] audit: type=1400 audit(1777204808.510:950): avc: denied { getopt } for pid=8795 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 229.678029][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 229.686753][ T8799] netlink: 'syz.4.690': attribute type 4 has an invalid length. [ 229.690166][ T5702] usb 1-1: selecting invalid altsetting 0 [ 229.706340][ T5716] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 229.710405][ T8799] netlink: 'syz.4.690': attribute type 4 has an invalid length. [ 229.715416][ T5702] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 229.729944][ T5716] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.740460][ T5716] usb 4-1: config 1 has no interface number 0 [ 229.746567][ T5702] uvcvideo 1-1:220.0: No valid video chain found. [ 229.753239][ T5716] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 229.767355][ T5716] usb 4-1: config 1 interface 105 has no altsetting 0 [ 229.771199][ T5723] usb 2-1: unable to get BOS descriptor or descriptor too short [ 229.777569][ T5702] usb 1-1: selecting invalid altsetting 0 [ 229.790579][ T5723] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.796778][ T5702] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 229.810465][ T5716] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 229.814673][ T5723] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.819555][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 229.819576][ T5716] usb 4-1: Product: syz [ 229.819591][ T5716] usb 4-1: Manufacturer: syz [ 229.849282][ T5702] usb 1-1: USB disconnect, device number 32 [ 229.852534][ T5723] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 229.858866][ T5716] usb 4-1: SerialNumber: syz [ 229.865939][ T5612] udevd[5612]: setting owner of /dev/bus/usb/001/032 to uid=0, gid=0 failed: No such file or directory [ 229.880669][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.927606][ T5723] usb 2-1: Product: syz [ 229.937527][ T5723] usb 2-1: Manufacturer: syz [ 229.945824][ T5723] usb 2-1: SerialNumber: syz [ 229.969773][ T5723] usb 2-1: 0:1 : does not exist [ 230.478930][ T8792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9249 sclass=netlink_route_socket pid=8792 comm=syz.1.687 [ 230.575484][ T8811] EXT4-fs (nbd3): unable to read superblock [ 231.021219][ T8832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.698'. [ 231.031671][ T30] audit: type=1400 audit(1777204809.910:951): avc: denied { nlmsg_read } for pid=8829 comm="syz.2.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 231.063630][ T5345] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 231.159631][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 231.237495][ T5345] usb 1-1: device descriptor read/64, error -71 [ 231.477497][ T5345] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 231.618348][ T5345] usb 1-1: device descriptor read/64, error -71 [ 231.634881][ T8839] netlink: zone id is out of range [ 231.646164][ T8839] netlink: zone id is out of range [ 231.658754][ T8839] netlink: zone id is out of range [ 231.669660][ T8839] netlink: zone id is out of range [ 231.681420][ T8839] netlink: zone id is out of range [ 231.694726][ T8839] netlink: zone id is out of range [ 231.705508][ T8839] netlink: zone id is out of range [ 231.712856][ T8839] netlink: zone id is out of range [ 231.718971][ T8839] netlink: zone id is out of range [ 231.724168][ T8839] netlink: zone id is out of range [ 231.729848][ T5345] usb usb1-port1: attempt power cycle [ 231.755222][ T30] audit: type=1400 audit(1777204810.640:952): avc: denied { write } for pid=8838 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 232.087513][ T5345] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 232.128560][ T5345] usb 1-1: device descriptor read/8, error -71 [ 232.256419][ T30] audit: type=1326 audit(1777204811.140:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.4.703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafa9d9cdd9 code=0x0 [ 232.356872][ T5702] usb 2-1: USB disconnect, device number 21 [ 232.401323][ T5345] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 232.438241][ T5345] usb 1-1: device descriptor read/8, error -71 [ 232.568839][ T5345] usb usb1-port1: unable to enumerate USB device [ 232.635535][ T5716] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 232.685196][ T5716] usb 4-1: USB disconnect, device number 26 [ 232.842000][ T5723] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 233.527495][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 233.537489][ T5723] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.552168][ T5723] usb 5-1: config 0 has no interface number 0 [ 233.565074][ T5723] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 233.580030][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.596918][ T5723] usb 5-1: Product: syz [ 233.604797][ T5723] usb 5-1: Manufacturer: syz [ 233.612787][ T5723] usb 5-1: SerialNumber: syz [ 233.632042][ T5723] usb 5-1: config 0 descriptor?? [ 233.654687][ T5723] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 233.663660][ T5723] usb 5-1: selecting invalid altsetting 1 [ 233.670358][ T5723] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 233.688889][ T5723] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 233.699359][ T5723] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 233.708416][ T5723] usb 5-1: media controller created [ 233.722967][ T5723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.888255][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 233.940820][ T30] audit: type=1400 audit(1777204812.830:954): avc: denied { ioctl } for pid=8870 comm="syz.0.709" path="socket:[23434]" dev="sockfs" ino=23434 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.042697][ T8878] Bluetooth: MGMT ver 1.23 [ 234.049569][ T5723] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 234.057348][ T8878] Bluetooth: hci0: too big key_count value 8526 [ 234.069679][ T24] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 234.179232][ T30] audit: type=1400 audit(1777204813.020:955): avc: denied { setopt } for pid=8875 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 234.521412][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.530116][ T24] usb 2-1: Product: syz [ 234.535247][ T24] usb 2-1: Manufacturer: syz [ 234.540118][ T24] usb 2-1: SerialNumber: syz [ 234.548665][ T30] audit: type=1400 audit(1777204813.430:956): avc: granted { setsecparam } for pid=8847 comm="syz.4.703" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 234.577976][ T24] usb 2-1: config 0 descriptor?? [ 234.608220][ T5723] usb 5-1: USB disconnect, device number 24 [ 234.660259][ T5622] Bluetooth: hci5: urb ffff888020690a00 submission failed (2) [ 234.800414][ T24] usb 2-1: USB disconnect, device number 22 [ 234.807537][ T5716] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 234.898881][ T30] audit: type=1400 audit(1777204813.790:957): avc: denied { write } for pid=8882 comm="syz.0.712" lport=52980 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 234.924332][ T30] audit: type=1400 audit(1777204813.810:958): avc: denied { setopt } for pid=8882 comm="syz.0.712" lport=52980 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 234.943832][ T8883] netlink: 'syz.0.712': attribute type 5 has an invalid length. [ 234.959463][ T5716] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 234.967773][ T5716] usb 4-1: config 1 has no interface number 0 [ 234.982461][ T5716] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 234.997785][ T5716] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 235.008069][ T5716] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.023657][ T5716] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 235.033202][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.042758][ T5716] usb 4-1: Product: syz [ 235.046988][ T5716] usb 4-1: Manufacturer: syz [ 235.051801][ T5716] usb 4-1: SerialNumber: syz [ 235.061103][ T8878] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 235.308888][ T8878] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 236.146690][ T5716] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 236.162638][ C0] sierra_net 4-1:1.7 wwan0: : unexpected notification bd! [ 236.170326][ C0] sierra_net 4-1:1.7 wwan0: : unexpected notification 88! [ 236.178048][ C0] sierra_net 4-1:1.7 wwan0: : unexpected notification 51! [ 236.274981][ T8906] input: syz0 as /devices/virtual/input/input13 [ 236.313716][ T8906] netlink: 140 bytes leftover after parsing attributes in process `syz.0.717'. [ 236.410409][ T5716] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 236.443239][ T30] audit: type=1400 audit(1777204815.320:959): avc: denied { name_connect } for pid=8911 comm="syz.2.722" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 236.467489][ T5716] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 236.487829][ T5702] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 236.499161][ T5716] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 236.522548][ T5716] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 236.552267][ T5716] usb 4-1: USB disconnect, device number 27 [ 236.581396][ T5716] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 236.647540][ T5702] usb 5-1: device descriptor read/64, error -71 [ 236.740304][ T5716] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 236.889100][ T5702] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 237.258757][ T5702] usb 5-1: device descriptor read/64, error -71 [ 237.369845][ T5702] usb usb5-port1: attempt power cycle [ 237.427582][ T5716] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 237.556722][ T8933] 9p: Bad value for 'port' [ 237.657504][ T5716] usb 1-1: Using ep0 maxpacket: 8 [ 237.666097][ T5716] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 237.679813][ T5716] usb 1-1: config 179 has no interface number 0 [ 237.686165][ T5716] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 237.698881][ T5716] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 237.711402][ T5716] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 237.724605][ T5716] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 237.739498][ T5716] usb 1-1: config 179 interface 65 has no altsetting 0 [ 237.746473][ T5716] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 237.756080][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.777540][ T5702] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 237.899404][ T5702] usb 5-1: device descriptor read/8, error -71 [ 238.399540][ T8939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.727'. [ 238.457545][ T5702] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 238.828409][ T5702] usb 5-1: device descriptor read/8, error -71 [ 239.472394][ T5702] usb usb5-port1: unable to enumerate USB device [ 239.521724][ T24] usb 1-1: USB disconnect, device number 37 [ 239.848237][ T5820] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 239.965527][ T8959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.732'. [ 240.110042][ T5820] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 240.140988][ T5820] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 240.160884][ T5820] usb 2-1: config 220 has no interface number 2 [ 240.189063][ T5820] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 240.229846][ T5820] usb 2-1: config 220 interface 0 has no altsetting 0 [ 240.248151][ T5820] usb 2-1: config 220 interface 76 has no altsetting 0 [ 240.260859][ T5820] usb 2-1: config 220 interface 1 has no altsetting 0 [ 240.277509][ T5820] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 240.291745][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.302222][ T5820] usb 2-1: Product: syz [ 240.307104][ T5820] usb 2-1: Manufacturer: syz [ 240.314259][ T5820] usb 2-1: SerialNumber: syz [ 240.410374][ T8964] 9p: Bad value for 'rfdno' [ 240.609017][ T5820] usb 2-1: selecting invalid altsetting 0 [ 240.616134][ T5820] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 240.623754][ T5820] uvcvideo 2-1:220.0: No valid video chain found. [ 240.635645][ T5820] usb 2-1: selecting invalid altsetting 0 [ 240.641697][ T5820] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 240.704531][ T5820] usb 2-1: USB disconnect, device number 23 [ 241.359477][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 241.454730][ T8968] netlink: 72 bytes leftover after parsing attributes in process `syz.2.735'. [ 241.902936][ T30] audit: type=1400 audit(1777204820.790:960): avc: denied { bind } for pid=8974 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 242.036452][ T30] audit: type=1400 audit(1777204820.810:961): avc: denied { wake_alarm } for pid=8974 comm="syz.0.737" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 245.441201][ T30] audit: type=1400 audit(1777204824.330:962): avc: denied { getopt } for pid=9012 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 245.475185][ T9002] tmpfs: Bad value for 'nr_blocks' [ 245.867494][ T5820] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 245.998061][ T9027] netlink: 'syz.2.748': attribute type 2 has an invalid length. [ 246.031407][ T5820] usb 2-1: config 2 has an invalid interface number: 39 but max is 0 [ 246.050091][ T5820] usb 2-1: config 2 has no interface number 0 [ 246.066822][ T5820] usb 2-1: config 2 interface 39 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 8 [ 246.097631][ T5820] usb 2-1: config 2 interface 39 has no altsetting 0 [ 246.170675][ T5820] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0119, bcdDevice=e4.9a [ 246.182319][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.201325][ T5820] usb 2-1: Product: syz [ 246.208971][ T5820] usb 2-1: Manufacturer: syz [ 246.221965][ T5820] usb 2-1: SerialNumber: syz [ 246.245915][ T9021] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 246.589084][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 246.960939][ T24] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 246.984364][ T24] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 247.024379][ T24] usb 1-1: config 220 has no interface number 2 [ 247.037522][ T5702] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 247.045273][ T24] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 247.089618][ T24] usb 1-1: config 220 interface 0 has no altsetting 0 [ 247.113047][ T24] usb 1-1: config 220 interface 76 has no altsetting 0 [ 247.133548][ T24] usb 1-1: config 220 interface 1 has no altsetting 0 [ 247.159518][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 247.177430][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.199566][ T24] usb 1-1: Product: syz [ 247.212058][ T24] usb 1-1: Manufacturer: syz [ 247.217634][ T5702] usb 4-1: Using ep0 maxpacket: 32 [ 247.224486][ T24] usb 1-1: SerialNumber: syz [ 247.249025][ T5702] usb 4-1: unable to get BOS descriptor or descriptor too short [ 247.283580][ T5702] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.297589][ T5345] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 247.317528][ T5702] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.335906][ T5702] usb 4-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 247.358299][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.375137][ T5702] usb 4-1: Product: syz [ 247.386300][ T5702] usb 4-1: Manufacturer: syz [ 247.402944][ T5702] usb 4-1: SerialNumber: syz [ 247.412840][ T30] audit: type=1400 audit(1777204826.300:963): avc: denied { create } for pid=9038 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 247.470288][ T24] usb 1-1: selecting invalid altsetting 0 [ 247.477810][ T5345] usb 3-1: Using ep0 maxpacket: 32 [ 247.486921][ T30] audit: type=1400 audit(1777204826.370:964): avc: denied { sys_admin } for pid=9038 comm="syz.4.752" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 247.489637][ T5345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.523015][ T24] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 247.551842][ T5345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.561122][ T24] uvcvideo 1-1:220.0: No valid video chain found. [ 247.561888][ T5345] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 247.581420][ T5820] kvaser_usb 2-1:2.39: error -ENODEV: Cannot get usb endpoint(s) [ 247.594849][ T5820] usb 2-1: USB disconnect, device number 24 [ 247.611109][ T5345] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 247.620532][ T5345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.659006][ T30] audit: type=1400 audit(1777204826.430:965): avc: denied { ioctl } for pid=9008 comm="syz.1.745" path="socket:[24765]" dev="sockfs" ino=24765 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 247.684273][ T24] usb 1-1: selecting invalid altsetting 0 [ 247.701631][ T24] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 247.726156][ T5345] usb 3-1: config 0 descriptor?? [ 247.743439][ T24] usb 1-1: USB disconnect, device number 38 [ 248.134787][ T9052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.754'. [ 248.406285][ T5345] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0009/input/input15 [ 248.555964][ T9052] netlink: 'syz.4.754': attribute type 10 has an invalid length. [ 248.687722][ T5345] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0009/input/input16 [ 248.813798][ T5345] kye 0003:0458:5011.0009: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 249.217554][ T5345] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 249.230068][ T30] audit: type=1400 audit(1777204828.120:966): avc: denied { ioctl } for pid=9066 comm="syz.0.758" path="/dev/sg0" dev="devtmpfs" ino=809 ioctlcmd=0x2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 249.340569][ T9069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.758'. [ 249.348783][ T9046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.397149][ T9068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.758'. [ 249.430155][ T5345] usb 2-1: Using ep0 maxpacket: 16 [ 249.444188][ T5345] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 249.473783][ T5345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.510606][ T5345] usb 2-1: Product: syz [ 249.557776][ T5345] usb 2-1: Manufacturer: syz [ 249.573244][ T5345] usb 2-1: SerialNumber: syz [ 249.718794][ T5702] usb 4-1: unit 0 not found! [ 249.785891][ T5702] usb 4-1: unit 255 not found! [ 249.921308][ T5345] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 249.935758][ T5702] usb 4-1: USB disconnect, device number 28 [ 249.983286][ T5345] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 249.998254][ T5345] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 250.009114][ T5345] usb 2-1: media controller created [ 250.026583][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.091131][ T5345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.148451][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.154961][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.277678][ T5702] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 250.300340][ T9078] binder: BINDER_SET_CONTEXT_MGR already set [ 250.312440][ T9078] binder: 9064:9078 ioctl 4018620d 200000004a80 returned -16 [ 250.400051][ T5345] zl10353_read_register: readreg error (reg=127, ret==-32) [ 250.433423][ T24] usb 3-1: USB disconnect, device number 32 [ 250.458038][ T5702] usb 4-1: Using ep0 maxpacket: 16 [ 250.479402][ T5702] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.506201][ T5702] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 250.528584][ T5345] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 250.547720][ T5702] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.568541][ T5702] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.580209][ T5702] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 250.599097][ T5345] usb 2-1: USB disconnect, device number 25 [ 250.655402][ T5702] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.689927][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 250.726693][ T5702] usb 4-1: SerialNumber: syz [ 251.236669][ T30] audit: type=1400 audit(1777204830.120:967): avc: denied { execute } for pid=9089 comm="syz.0.764" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 251.370555][ T24] usb 4-1: USB disconnect, device number 29 [ 251.382345][ T30] audit: type=1400 audit(1777204830.270:968): avc: denied { map } for pid=9089 comm="syz.0.764" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 251.766628][ T5738] IPVS: starting estimator thread 0... [ 251.774152][ T9097] net_ratelimit: 820 callbacks suppressed [ 251.774167][ T9097] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 251.880235][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 251.898183][ T9103] IPVS: using max 42 ests per chain, 100800 per kthread [ 252.230951][ T9116] Context (ID=0x0) not attached to queue pair (handle=0x4db:0x0) [ 252.324592][ T9118] i2c i2c-0: Invalid block write size 255 [ 253.385318][ T30] audit: type=1400 audit(1777204832.270:969): avc: denied { kexec_image_load } for pid=9124 comm="syz.3.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 253.905041][ T30] audit: type=1400 audit(1777204832.790:970): avc: denied { execstack } for pid=9174 comm="syz.4.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 253.928775][ T9176] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 253.987525][ T9176] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 255.094422][ T30] audit: type=1400 audit(1777204833.980:971): avc: denied { setattr } for pid=9209 comm="syz.4.792" name="udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.146884][ T30] audit: type=1400 audit(1777204834.010:972): avc: denied { append } for pid=9209 comm="syz.4.792" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 255.206461][ T30] audit: type=1400 audit(1777204834.010:973): avc: denied { ioctl } for pid=9209 comm="syz.4.792" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 255.583033][ T9214] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 255.672683][ T9212] IPVS: You probably need to specify IP address on multicast interface. [ 255.687612][ T9212] IPVS: Error connecting to the multicast addr [ 255.842679][ T30] audit: type=1400 audit(1777204834.730:974): avc: denied { accept } for pid=9217 comm="syz.1.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.004437][ T9223] netlink: 'syz.2.795': attribute type 5 has an invalid length. [ 256.132612][ T30] audit: type=1400 audit(1777204835.020:975): avc: denied { connect } for pid=9224 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 257.697598][ T5820] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 257.747940][ T803] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 257.857674][ T5820] usb 3-1: Using ep0 maxpacket: 16 [ 257.877258][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 257.909026][ T803] usb 1-1: Using ep0 maxpacket: 8 [ 257.911646][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34349, setting to 1024 [ 257.940208][ T5820] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 257.973929][ T5820] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 257.993406][ T803] usb 1-1: config 30 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 258.008462][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.016513][ T803] usb 1-1: config 30 interface 0 has no altsetting 0 [ 258.027751][ T803] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 258.037618][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.054021][ T5820] usb 3-1: config 0 descriptor?? [ 258.058988][ T803] usb 1-1: Product: syz [ 258.059007][ T803] usb 1-1: Manufacturer: syz [ 258.059021][ T803] usb 1-1: SerialNumber: syz [ 258.083827][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.802'. [ 258.103928][ T803] snd_usb_toneport 1-1:30.0: Line 6 TonePort UX2 found [ 258.229131][ T5345] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 258.388726][ T5345] usb 5-1: Using ep0 maxpacket: 8 [ 258.402766][ T5345] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.445499][ T5345] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 258.461394][ T5345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.477484][ T9233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.498896][ T9233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.509635][ T9256] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 258.521319][ T5345] usb 5-1: Product: syz [ 258.532796][ T5345] usb 5-1: Manufacturer: syz [ 258.532928][ T9256] SELinux: failed to load policy [ 258.546996][ T803] snd_usb_toneport 1-1:30.0: cannot get proper max packet size [ 258.557754][ T803] snd_usb_toneport 1-1:30.0: Line 6 TonePort UX2 now disconnected [ 258.567152][ T5345] usb 5-1: SerialNumber: syz [ 258.579055][ T803] snd_usb_toneport 1-1:30.0: probe with driver snd_usb_toneport failed with error -22 [ 258.598324][ T5345] usb 5-1: config 0 descriptor?? [ 258.727594][ T5345] msi2500 5-1:0.0: Registered as swradio24 [ 258.741869][ T5345] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 258.790455][ T803] usb 1-1: USB disconnect, device number 39 [ 258.843618][ T9269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65308 sclass=netlink_route_socket pid=9269 comm=syz.3.807 [ 258.874085][ T5345] usb 5-1: USB disconnect, device number 29 [ 259.247480][ T803] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 259.397712][ T803] usb 4-1: Using ep0 maxpacket: 16 [ 259.419156][ T803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.434034][ T803] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 259.454217][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.471731][ T803] usb 4-1: config 0 descriptor?? [ 259.707811][ T30] audit: type=1326 audit(1777204838.590:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9282 comm="syz.0.810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f044579cdd9 code=0x0 [ 259.897166][ T803] hid_parser_main: 32 callbacks suppressed [ 259.897185][ T803] pantherlord 0003:0E8F:0003.000A: unknown main item tag 0x0 [ 259.932542][ T803] pantherlord 0003:0E8F:0003.000A: unknown main item tag 0x0 [ 259.955183][ T803] pantherlord 0003:0E8F:0003.000A: unknown main item tag 0x0 [ 259.972825][ T803] pantherlord 0003:0E8F:0003.000A: unknown main item tag 0x0 [ 259.991815][ T803] pantherlord 0003:0E8F:0003.000A: unknown main item tag 0x0 [ 260.015543][ T803] pantherlord 0003:0E8F:0003.000A: unknown main item tag 0x0 [ 260.037299][ T803] pantherlord 0003:0E8F:0003.000A: unknown main item tag 0x0 [ 260.049195][ T803] pantherlord 0003:0E8F:0003.000A: unknown main item tag 0x0 [ 260.069103][ T803] pantherlord 0003:0E8F:0003.000A: unknown main item tag 0x0 [ 260.088947][ T803] pantherlord 0003:0E8F:0003.000A: unknown main item tag 0x0 [ 260.129715][ T803] pantherlord 0003:0E8F:0003.000A: hidraw0: USB HID v0.0b Device [HID 0e8f:0003] on usb-dummy_hcd.3-1/input0 [ 260.150286][ T803] pantherlord 0003:0E8F:0003.000A: no output reports found [ 260.486988][ T5820] usb 3-1: USB disconnect, device number 33 [ 260.753585][ T9278] nbd0: detected capacity change from 0 to 128 [ 260.839093][ T5608] block nbd0: Receive control failed (result -32) [ 260.839521][ T5622] block nbd0: Receive control failed (result -32) [ 260.852033][ T5820] usb 4-1: USB disconnect, device number 30 [ 260.859728][ T5612] [ 260.862036][ T5612] ====================================================== [ 260.869027][ T5612] WARNING: possible circular locking dependency detected [ 260.876034][ T5612] syzkaller #0 Tainted: G L [ 260.878367][ T9304] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 260.881992][ T5612] ------------------------------------------------------ [ 260.882001][ T5612] udevd/5612 is trying to acquire lock: [ 260.882011][ T5612] ffff888026a0c668 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x428/0x1080 [ 260.911842][ T5612] [ 260.911842][ T5612] but task is already holding lock: [ 260.919172][ T5612] ffff888087710178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 260.927660][ T5612] [ 260.927660][ T5612] which lock already depends on the new lock. [ 260.927660][ T5612] [ 260.938037][ T5612] [ 260.938037][ T5612] the existing dependency chain (in reverse order) is: [ 260.947018][ T5612] [ 260.947018][ T5612] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 260.954190][ T5612] __mutex_lock+0x1a4/0x1b10 [ 260.959275][ T5612] nbd_queue_rq+0xba/0x1080 [ 260.964266][ T5612] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 260.970303][ T5612] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 260.977127][ T5612] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 260.983599][ T5612] blk_mq_run_hw_queue+0x23c/0x670 [ 260.989204][ T5612] blk_mq_dispatch_list+0x51d/0x1360 [ 260.994979][ T5612] blk_mq_flush_plug_list+0x130/0x600 [ 261.000839][ T5612] __blk_flush_plug+0x2c4/0x4b0 [ 261.006183][ T5612] __submit_bio+0x584/0x6c0 [ 261.011183][ T5612] submit_bio_noacct_nocheck+0x543/0xbf0 [ 261.017311][ T5612] submit_bio_noacct+0xd18/0x2000 [ 261.022834][ T5612] submit_bh_wbc+0x681/0x890 [ 261.027919][ T5612] block_read_full_folio+0x4c8/0x8e0 [ 261.033695][ T5612] filemap_read_folio+0xfc/0x3b0 [ 261.039125][ T5612] do_read_cache_folio+0x2d7/0x6b0 [ 261.044742][ T5612] read_part_sector+0xd1/0x370 [ 261.050015][ T5612] adfspart_check_ICS+0x91/0x7d0 [ 261.055446][ T5612] bdev_disk_changed+0x7a3/0x1250 [ 261.060963][ T5612] blkdev_get_whole+0x187/0x290 [ 261.066307][ T5612] bdev_open+0x2c7/0xe40 [ 261.071053][ T5612] blkdev_open+0x34e/0x4f0 [ 261.075958][ T5612] do_dentry_open+0x6d8/0x1660 [ 261.081211][ T5612] vfs_open+0x82/0x3f0 [ 261.085773][ T5612] path_openat+0x208c/0x31a0 [ 261.090861][ T5612] do_file_open+0x20e/0x430 [ 261.095860][ T5612] do_sys_openat2+0x10d/0x1e0 [ 261.101048][ T5612] __x64_sys_openat+0x12d/0x210 [ 261.106401][ T5612] do_syscall_64+0x10b/0xf80 [ 261.111490][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.117878][ T5612] [ 261.117878][ T5612] -> #5 (set->srcu){.+.+}-{0:0}: [ 261.124978][ T5612] __synchronize_srcu+0xa2/0x300 [ 261.130418][ T5612] blk_mq_quiesce_queue+0x149/0x1c0 [ 261.136113][ T5612] elevator_switch+0x17b/0x7e0 [ 261.141373][ T5612] elevator_change+0x352/0x530 [ 261.146642][ T5612] elevator_set_default+0x29e/0x360 [ 261.152349][ T5612] blk_register_queue+0x48e/0x630 [ 261.157878][ T5612] __add_disk+0x73f/0xe40 [ 261.162703][ T5612] add_disk_fwnode+0x118/0x5c0 [ 261.167961][ T5612] nbd_dev_add+0x77a/0xb10 [ 261.172882][ T5612] nbd_init+0x291/0x2b0 [ 261.177540][ T5612] do_one_initcall+0x121/0x750 [ 261.182813][ T5612] kernel_init_freeable+0x6ea/0x7b0 [ 261.188517][ T5612] kernel_init+0x1f/0x1e0 [ 261.193343][ T5612] ret_from_fork+0x72b/0xd50 [ 261.198429][ T5612] ret_from_fork_asm+0x1a/0x30 [ 261.203702][ T5612] [ 261.203702][ T5612] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 261.211486][ T5612] __mutex_lock+0x1a4/0x1b10 [ 261.216567][ T5612] elevator_change+0x1bc/0x530 [ 261.221825][ T5612] elevator_set_none+0x92/0xf0 [ 261.227082][ T5612] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 261.233379][ T5612] nbd_start_device+0x1a6/0xbd0 [ 261.238718][ T5612] nbd_genl_connect+0xff2/0x1a40 [ 261.244144][ T5612] genl_family_rcv_msg_doit+0x214/0x300 [ 261.250187][ T5612] genl_rcv_msg+0x560/0x800 [ 261.255184][ T5612] netlink_rcv_skb+0x159/0x420 [ 261.260437][ T5612] genl_rcv+0x28/0x40 [ 261.264914][ T5612] netlink_unicast+0x585/0x850 [ 261.270170][ T5612] netlink_sendmsg+0x8b0/0xda0 [ 261.275424][ T5612] ____sys_sendmsg+0x9e1/0xb70 [ 261.280680][ T5612] ___sys_sendmsg+0x190/0x1e0 [ 261.285847][ T5612] __sys_sendmsg+0x170/0x220 [ 261.290930][ T5612] do_syscall_64+0x10b/0xf80 [ 261.296016][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.302418][ T5612] [ 261.302418][ T5612] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 261.310996][ T5612] blk_alloc_queue+0x610/0x790 [ 261.316271][ T5612] blk_mq_alloc_queue+0x174/0x290 [ 261.321804][ T5612] __blk_mq_alloc_disk+0x29/0x120 [ 261.327323][ T5612] nbd_dev_add+0x492/0xb10 [ 261.332250][ T5612] nbd_init+0x291/0x2b0 [ 261.336914][ T5612] do_one_initcall+0x121/0x750 [ 261.342181][ T5612] kernel_init_freeable+0x6ea/0x7b0 [ 261.347878][ T5612] kernel_init+0x1f/0x1e0 [ 261.352715][ T5612] ret_from_fork+0x72b/0xd50 [ 261.357798][ T5612] ret_from_fork_asm+0x1a/0x30 [ 261.363057][ T5612] [ 261.363057][ T5612] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 261.370232][ T5612] fs_reclaim_acquire+0xc4/0x100 [ 261.375668][ T5612] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 261.381985][ T5612] __alloc_skb+0x140/0x710 [ 261.386898][ T5612] tcp_stream_alloc_skb+0x34/0x660 [ 261.392506][ T5612] tcp_sendmsg_locked+0x13cd/0x4500 [ 261.398199][ T5612] tcp_sendmsg+0x2e/0x50 [ 261.402946][ T5612] inet_sendmsg+0xb9/0x140 [ 261.407856][ T5612] sock_write_iter+0x4ea/0x5a0 [ 261.413126][ T5612] vfs_write+0x6ac/0x1070 [ 261.417947][ T5612] ksys_write+0x1f8/0x250 [ 261.422771][ T5612] do_syscall_64+0x10b/0xf80 [ 261.427855][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.434242][ T5612] [ 261.434242][ T5612] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 261.441854][ T5612] lock_sock_nested+0x41/0xf0 [ 261.447025][ T5612] inet_shutdown+0x67/0x410 [ 261.452025][ T5612] nbd_mark_nsock_dead+0xae/0x5c0 [ 261.457548][ T5612] sock_shutdown+0x16b/0x200 [ 261.462633][ T5612] nbd_config_put+0x1eb/0x750 [ 261.467807][ T5612] nbd_release+0xb7/0x190 [ 261.472632][ T5612] blkdev_put_whole+0xb0/0xf0 [ 261.477805][ T5612] bdev_release+0x47f/0x6d0 [ 261.482814][ T5612] blkdev_release+0x15/0x20 [ 261.487813][ T5612] __fput+0x3ff/0xb50 [ 261.492290][ T5612] task_work_run+0x150/0x240 [ 261.497375][ T5612] do_exit+0x8d2/0x2a60 [ 261.502035][ T5612] do_group_exit+0xd5/0x2a0 [ 261.507029][ T5612] get_signal+0x1ec7/0x21e0 [ 261.512029][ T5612] arch_do_signal_or_restart+0x91/0x7a0 [ 261.518085][ T5612] exit_to_user_mode_loop+0x86/0x4a0 [ 261.523868][ T5612] do_syscall_64+0x706/0xf80 [ 261.528963][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.535348][ T5612] [ 261.535348][ T5612] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 261.542964][ T5612] __lock_acquire+0x14b8/0x2630 [ 261.548313][ T5612] lock_acquire+0x1b1/0x370 [ 261.553329][ T5612] __mutex_lock+0x1a4/0x1b10 [ 261.558424][ T5612] nbd_queue_rq+0x428/0x1080 [ 261.563513][ T5612] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 261.569732][ T5612] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 261.576579][ T5612] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 261.583065][ T5612] blk_mq_run_hw_queue+0x23c/0x670 [ 261.588679][ T5612] blk_mq_dispatch_list+0x51d/0x1360 [ 261.594469][ T5612] blk_mq_flush_plug_list+0x130/0x600 [ 261.600359][ T5612] __blk_flush_plug+0x2c4/0x4b0 [ 261.605715][ T5612] __submit_bio+0x584/0x6c0 [ 261.610721][ T5612] submit_bio_noacct_nocheck+0x543/0xbf0 [ 261.616859][ T5612] submit_bio_noacct+0xd18/0x2000 [ 261.622390][ T5612] submit_bh_wbc+0x681/0x890 [ 261.627489][ T5612] block_read_full_folio+0x4c8/0x8e0 [ 261.633273][ T5612] filemap_read_folio+0xfc/0x3b0 [ 261.638713][ T5612] do_read_cache_folio+0x2d7/0x6b0 [ 261.644328][ T5612] read_part_sector+0xd1/0x370 [ 261.649598][ T5612] adfspart_check_ICS+0x91/0x7d0 [ 261.655041][ T5612] bdev_disk_changed+0x7a3/0x1250 [ 261.660572][ T5612] blkdev_get_whole+0x187/0x290 [ 261.665927][ T5612] bdev_open+0x2c7/0xe40 [ 261.670674][ T5612] blkdev_open+0x34e/0x4f0 [ 261.675587][ T5612] do_dentry_open+0x6d8/0x1660 [ 261.680854][ T5612] vfs_open+0x82/0x3f0 [ 261.685426][ T5612] path_openat+0x208c/0x31a0 [ 261.690533][ T5612] do_file_open+0x20e/0x430 [ 261.695547][ T5612] do_sys_openat2+0x10d/0x1e0 [ 261.700729][ T5612] __x64_sys_openat+0x12d/0x210 [ 261.706084][ T5612] do_syscall_64+0x10b/0xf80 [ 261.711177][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.717569][ T5612] [ 261.717569][ T5612] other info that might help us debug this: [ 261.717569][ T5612] [ 261.727786][ T5612] Chain exists of: [ 261.727786][ T5612] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 261.727786][ T5612] [ 261.739840][ T5612] Possible unsafe locking scenario: [ 261.739840][ T5612] [ 261.747263][ T5612] CPU0 CPU1 [ 261.752605][ T5612] ---- ---- [ 261.757945][ T5612] lock(&cmd->lock); [ 261.761907][ T5612] lock(set->srcu); [ 261.768298][ T5612] lock(&cmd->lock); [ 261.774775][ T5612] lock(&nsock->tx_lock); [ 261.779168][ T5612] [ 261.779168][ T5612] *** DEADLOCK *** [ 261.779168][ T5612] [ 261.787286][ T5612] 3 locks held by udevd/5612: [ 261.791935][ T5612] #0: ffff888028912350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 261.801226][ T5612] #1: ffff88802887db98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22e/0x670 [ 261.810689][ T5612] #2: ffff888087710178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 261.819720][ T5612] [ 261.819720][ T5612] stack backtrace: [ 261.825604][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 261.825623][ T5612] Tainted: [L]=SOFTLOCKUP [ 261.825627][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.825636][ T5612] Call Trace: [ 261.825640][ T5612] [ 261.825645][ T5612] dump_stack_lvl+0x100/0x190 [ 261.825662][ T5612] print_circular_bug.cold+0x178/0x1c7 [ 261.825684][ T5612] check_noncircular+0x146/0x160 [ 261.825703][ T5612] __lock_acquire+0x14b8/0x2630 [ 261.825723][ T5612] lock_acquire+0x1b1/0x370 [ 261.825738][ T5612] ? nbd_queue_rq+0x428/0x1080 [ 261.825751][ T5612] ? __pfx___might_resched+0x10/0x10 [ 261.825770][ T5612] ? preempt_schedule_thunk+0x16/0x30 [ 261.825783][ T5612] __mutex_lock+0x1a4/0x1b10 [ 261.825798][ T5612] ? nbd_queue_rq+0x428/0x1080 [ 261.825810][ T5612] ? nbd_queue_rq+0x428/0x1080 [ 261.825821][ T5612] ? is_bpf_text_address+0x8a/0x1a0 [ 261.825838][ T5612] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 261.825852][ T5612] ? rcu_is_watching+0x12/0xc0 [ 261.825873][ T5612] ? __pfx___mutex_lock+0x10/0x10 [ 261.825887][ T5612] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 261.825901][ T5612] ? is_bpf_text_address+0x94/0x1a0 [ 261.825917][ T5612] ? kernel_text_address+0x8d/0x100 [ 261.825935][ T5612] ? arch_stack_walk+0xa6/0xf0 [ 261.825956][ T5612] ? nbd_queue_rq+0x428/0x1080 [ 261.825967][ T5612] nbd_queue_rq+0x428/0x1080 [ 261.825979][ T5612] ? stack_trace_save+0x8e/0xc0 [ 261.825994][ T5612] ? __pfx_nbd_queue_rq+0x10/0x10 [ 261.826006][ T5612] ? add_lock_to_list+0x99/0x110 [ 261.826020][ T5612] ? lockdep_unlock+0x5a/0xc0 [ 261.826031][ T5612] ? __lock_acquire+0xd73/0x2630 [ 261.826048][ T5612] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 261.826065][ T5612] ? sbitmap_get+0x1d7/0x360 [ 261.826080][ T5612] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 261.826093][ T5612] ? __blk_mq_alloc_driver_tag+0x27a/0x7a0 [ 261.826115][ T5612] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 261.826138][ T5612] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 261.826162][ T5612] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 261.826182][ T5612] blk_mq_run_hw_queue+0x23c/0x670 [ 261.826201][ T5612] ? blk_mq_run_hw_queue+0x22e/0x670 [ 261.826219][ T5612] blk_mq_dispatch_list+0x51d/0x1360 [ 261.826233][ T5612] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 261.826253][ T5612] ? blk_add_trace_plug+0xf5/0x290 [ 261.826275][ T5612] blk_mq_flush_plug_list+0x130/0x600 [ 261.826287][ T5612] ? trace_block_plug+0x70/0x220 [ 261.826302][ T5612] ? blk_add_rq_to_plug+0x30a/0x540 [ 261.826313][ T5612] ? __pfx_wbt_track+0x10/0x10 [ 261.826340][ T5612] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 261.826357][ T5612] ? blk_mq_submit_bio+0x9aa/0x2dd0 [ 261.826371][ T5612] __blk_flush_plug+0x2c4/0x4b0 [ 261.826391][ T5612] ? __pfx___blk_flush_plug+0x10/0x10 [ 261.826412][ T5612] __submit_bio+0x584/0x6c0 [ 261.826431][ T5612] ? __pfx___submit_bio+0x10/0x10 [ 261.826453][ T5612] ? submit_bio_noacct_nocheck+0x543/0xbf0 [ 261.826473][ T5612] submit_bio_noacct_nocheck+0x543/0xbf0 [ 261.826494][ T5612] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 261.826515][ T5612] ? __pfx___might_resched+0x10/0x10 [ 261.826534][ T5612] submit_bio_noacct+0xd18/0x2000 [ 261.826555][ T5612] submit_bh_wbc+0x681/0x890 [ 261.826577][ T5612] block_read_full_folio+0x4c8/0x8e0 [ 261.826592][ T5612] ? __pfx_blkdev_get_block+0x10/0x10 [ 261.826613][ T5612] ? __pfx_blkdev_read_folio+0x10/0x10 [ 261.826632][ T5612] filemap_read_folio+0xfc/0x3b0 [ 261.826651][ T5612] ? __pfx_filemap_read_folio+0x10/0x10 [ 261.826671][ T5612] do_read_cache_folio+0x2d7/0x6b0 [ 261.826692][ T5612] ? __pfx_blkdev_read_folio+0x10/0x10 [ 261.826712][ T5612] read_part_sector+0xd1/0x370 [ 261.826729][ T5612] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 261.826748][ T5612] adfspart_check_ICS+0x91/0x7d0 [ 261.826767][ T5612] ? __pfx_seq_buf_printf+0x10/0x10 [ 261.826780][ T5612] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 261.826800][ T5612] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 261.826819][ T5612] bdev_disk_changed+0x7a3/0x1250 [ 261.826838][ T5612] ? nbd_open+0x320/0x700 [ 261.826850][ T5612] ? __pfx_bdev_disk_changed+0x10/0x10 [ 261.826870][ T5612] blkdev_get_whole+0x187/0x290 [ 261.826888][ T5612] bdev_open+0x2c7/0xe40 [ 261.826908][ T5612] blkdev_open+0x34e/0x4f0 [ 261.826920][ T5612] do_dentry_open+0x6d8/0x1660 [ 261.826934][ T5612] ? __pfx_blkdev_open+0x10/0x10 [ 261.826948][ T5612] vfs_open+0x82/0x3f0 [ 261.826965][ T5612] path_openat+0x208c/0x31a0 [ 261.826984][ T5612] ? __pfx_path_openat+0x10/0x10 [ 261.827003][ T5612] do_file_open+0x20e/0x430 [ 261.827019][ T5612] ? __pfx_do_file_open+0x10/0x10 [ 261.827041][ T5612] ? alloc_fd+0x476/0x790 [ 261.827058][ T5612] ? do_getname+0x191/0x390 [ 261.827078][ T5612] do_sys_openat2+0x10d/0x1e0 [ 261.827096][ T5612] ? __pfx_do_sys_openat2+0x10/0x10 [ 261.827114][ T5612] ? __sys_recvmsg+0x18c/0x220 [ 261.827134][ T5612] ? __pfx___sys_recvmsg+0x10/0x10 [ 261.827153][ T5612] __x64_sys_openat+0x12d/0x210 [ 261.827172][ T5612] ? __pfx___x64_sys_openat+0x10/0x10 [ 261.827192][ T5612] ? rcu_is_watching+0x12/0xc0 [ 261.827212][ T5612] do_syscall_64+0x10b/0xf80 [ 261.827226][ T5612] ? clear_bhb_loop+0x40/0x90 [ 261.827240][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.827253][ T5612] RIP: 0033:0x7f98206a7407 [ 261.827264][ T5612] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 261.827277][ T5612] RSP: 002b:00007ffe2a8da9f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 261.827289][ T5612] RAX: ffffffffffffffda RBX: 00007f9820d73880 RCX: 00007f98206a7407 [ 261.827298][ T5612] RDX: 00000000000a0800 RSI: 000055b8f658e710 RDI: ffffffffffffff9c [ 261.827306][ T5612] RBP: 000055b8f63532c0 R08: 0000000000000000 R09: 0000000000000000 [ 261.827313][ T5612] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b8f65950c0 [ 261.827321][ T5612] R13: 000055b8f658e8d0 R14: 0000000000000000 R15: 000055b8f65950c0 [ 261.827333][ T5612] [ 262.489614][ T5612] block nbd0: Dead connection, failed to find a fallback [ 262.552853][ T5612] block nbd0: shutting down sockets [ 262.572949][ T5612] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.618839][ T5612] Buffer I/O error on dev nbd0, logical block 0, async page read [ 262.634079][ T5612] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.667781][ T5612] Buffer I/O error on dev nbd0, logical block 0, async page read [ 262.698298][ T5612] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.729087][ T5612] Buffer I/O error on dev nbd0, logical block 0, async page read [ 262.747528][ T5612] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.757970][ T5612] Buffer I/O error on dev nbd0, logical block 0, async page read [ 262.777481][ T5612] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.797435][ T5612] Buffer I/O error on dev nbd0, logical block 0, async page read [ 262.807513][ T5612] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.827444][ T5612] Buffer I/O error on dev nbd0, logical block 0, async page read [ 262.847506][ T5612] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.867805][ T5612] Buffer I/O error on dev nbd0, logical block 0, async page read [ 262.875628][ T5612] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.895055][ T5612] Buffer I/O error on dev nbd0, logical block 0, async page read [ 262.917468][ T5612] ldm_validate_partition_table(): Disk read failed. [ 262.924099][ T5612] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.948158][ T5612] Buffer I/O error on dev nbd0, logical block 0, async page read [ 262.958953][ T5612] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.977417][ T5612] Buffer I/O error on dev nbd0, logical block 0, async page read [ 262.997567][ T5612] Dev nbd0: unable to read RDB block 0 [ 263.004651][ T5612] nbd0: unable to read partition table [ 263.018844][ T5612] ldm_validate_partition_table(): Disk read failed. [ 263.025552][ T5612] Dev nbd0: unable to read RDB block 0 [ 263.047769][ T5612] nbd0: unable to read partition table