last executing test programs: 31m32.046788155s ago: executing program 3 (id=1360): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$getenv(0x4201, 0x0, 0x4, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x3c, 0x4000, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xf5b439e5fa041319, 0xc3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "2b0a4c532395fc7786ead8d57a2231c4"}]}}}}}}}, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffe, 0xffffffff, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x6, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) 31m24.519160565s ago: executing program 3 (id=1378): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000080014000700100008001300080003000800"], 0x44}}, 0x0) fchdir(0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 31m20.87955184s ago: executing program 3 (id=1385): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(0x0, 0x201, 0x402) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 31m19.50967809s ago: executing program 3 (id=1391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000010280)=""/4096, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) poll(&(0x7f0000000000)=[{r5, 0x348}], 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 31m18.020595239s ago: executing program 3 (id=1395): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xe1, &(0x7f00000004c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = request_key(&(0x7f0000000740)='dns_resolver\x00', 0x0, &(0x7f00000007c0)='\x00', 0xffffffffffffffff) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, r6) 31m14.813871924s ago: executing program 3 (id=1399): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x200}, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0) splice(r6, 0x0, r9, 0x0, 0x25a5, 0x4) vmsplice(r7, &(0x7f0000000600)=[{&(0x7f00000000c0)='*', 0x1}, {&(0x7f0000000100)="f0a3", 0x2}], 0x2, 0xd) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 30m58.309083377s ago: executing program 32 (id=1399): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x200}, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0) splice(r6, 0x0, r9, 0x0, 0x25a5, 0x4) vmsplice(r7, &(0x7f0000000600)=[{&(0x7f00000000c0)='*', 0x1}, {&(0x7f0000000100)="f0a3", 0x2}], 0x2, 0xd) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 30m50.893055868s ago: executing program 4 (id=1433): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 30m45.831033102s ago: executing program 4 (id=1447): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x200}, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x25a5, 0x4) vmsplice(r4, &(0x7f0000000600)=[{&(0x7f00000000c0)='*', 0x1}, {&(0x7f0000000100)="f0a3", 0x2}], 0x2, 0xd) 30m42.186082015s ago: executing program 4 (id=1453): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x200}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) splice(r4, 0x0, r7, 0x0, 0x25a5, 0x4) vmsplice(r5, &(0x7f0000000600)=[{&(0x7f00000000c0)='*', 0x1}, {&(0x7f0000000100)="f0a3", 0x2}], 0x2, 0xd) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 30m39.714076113s ago: executing program 4 (id=1458): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r1) r5 = dup(r0) sendmsg$nl_route_sched(r5, 0x0, 0x400c050) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 30m38.75896766s ago: executing program 4 (id=1459): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 30m37.845169591s ago: executing program 4 (id=1462): syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xbd) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, &(0x7f00000001c0)=ANY=[@ANYBLOB="11"], 0x18) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r4, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa91}], 0x7}}], 0x1, 0x0) 30m21.672556399s ago: executing program 33 (id=1462): syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xbd) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, &(0x7f00000001c0)=ANY=[@ANYBLOB="11"], 0x18) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r4, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa91}], 0x7}}], 0x1, 0x0) 4.803293901s ago: executing program 6 (id=5919): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x325, @time={0x10a, 0xff3}, 0x42, {}, 0x2, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000300)={{0x0, 0x7}, 0x0, 0x2000000, 0x5, {0x8, 0x1}, 0x0, 0x7}) tkill(r0, 0x7) 4.802130133s ago: executing program 5 (id=5920): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket$kcm(0x2, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x110, 0x7, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func={0xf, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x30, 0x71, 0x30, 0x2e, 0x61, 0x5f, 0x0]}}, &(0x7f0000000380)=""/231, 0x30, 0xe7}, 0x28) pread64(r2, &(0x7f0000000140)=""/135, 0x87, 0x80) r3 = socket$inet6(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setns(0xffffffffffffffff, 0x24020000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0x0, 0x80800) setgid(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x84000151) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000200)={&(0x7f00000001c0)={0x2, 0xffff, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b', 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0x40}, 0xc004) 4.765111523s ago: executing program 1 (id=5921): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x8, 0x7c}, [@nested={0x9, 0x1, 0x0, 0x1, [@generic="c7720241cb"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000004}, 0x4008030) 4.724364376s ago: executing program 6 (id=5922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 4.655015491s ago: executing program 2 (id=5865): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f00000000c0)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x16, 0x1}]}, @void, @void, @void, @val={0x5, 0x7, {0x80, 0x1a, 0xe, "998d61a9"}}, @val={0x25, 0x3, {0x1, 0x6c}}, @void, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x3, 0x0, {0xe920, 0x5, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x7ff, 0x8}}, @void, @void, @val={0x76, 0x6, {0x1, 0xac, 0x40, 0x7f}}}, 0x61) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) fchmodat(0xffffffffffffffff, 0x0, 0xd) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 4.454976123s ago: executing program 1 (id=5923): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31ab30c00008008000340000000020100000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x1e, 0x4, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000500)={0xc000001b}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000140)={0x40001016}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x4) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES16=0x0], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r11], 0x50}}, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.419797259s ago: executing program 0 (id=5924): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66", 0x53}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.303171942s ago: executing program 0 (id=5925): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 4.251956796s ago: executing program 6 (id=5926): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) fanotify_init(0x10, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x4040005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) r4 = socket$inet_udp(0x2, 0x2, 0x0) lseek(0xffffffffffffffff, 0x8000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x4810) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) 3.966195123s ago: executing program 2 (id=5927): r0 = gettid() mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27) syz_open_dev$usbfs(&(0x7f0000000040), 0x3, 0x2a0000) gettid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000004300)=[{&(0x7f0000000500)="070744fc73bb0aa6f1245d0f39aaa5e8bf95a8032880cf0982d62002ef0c9997bd3d987b2cc456e2c917647288d056f36d5ea4dfd70b130eb3398db23f2552ab4185f08d26a583d8195e9d533d9eb50bcc2384828bd505a6a3b13c5c5e4b9980d44eb84c011e1745487d9d1a4562a15aea66bc705d422f0c28bb079130672c55c1822846408604d851ecae1b44b20382db7c7f451576021ed34e30bb3aa94e9b91514e5207ccdd252fbef42ad3e214dbd1f9e43d89ad4e280100"/197, 0xc5}, {&(0x7f0000000780)="cdbff63c596452c32aa251afb12d7d7878f800f4ead2dec76cfa1cb73c8fa9e58e302957e0eecf1e746f11204ba2addad7903a0c1bcf2f3681ef1df1ef628eb3ddd5b0d5084ae82b6ed949849f8f48259e59cb961f8063072d8fff273c704c09f7da159a20539b32a629f399d3897c3b8f85c5214907deb3aef2b6dc26d653bb3ff060076efa32d3a32dbbc11044f259c6ab4706b402b039810c14929e1fd27650895d80346513a3020d728b78c161e1b616fc9c78b64258ecda3df843f5c7d8f9", 0xc1}, {&(0x7f00000009c0)="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", 0xfa}, {0x0}, {&(0x7f0000002200)="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", 0xb37}, {&(0x7f0000000b00)="e7a9159830205247a257ec818d73b7dbd2db422ec2a4680c7e1f42af50402821d34fe5bf0af8d44fe283fc99e9e0b9b4cb1c135f2bb749c864dca423827beb1d0063869c3f3a75670b48b6e3d139340c9f5cf4662fecfe91ea60c62cffeb2b7df3b4f7ffc4b5a1033c22358bece6b29e8340c06c6dd09853a6dafa5d53bd77dfe7017b6880b976554acce5574b5775d09babf90425a7b82bace858124f1b1208f017d60854af0ccf51c9aa182ce5dbd76f0849878d18f4e023f1ee824eca2bd0120c9942741333557ac6d42a67f40b9841511ee0b1097083abe53546", 0xdc}, {&(0x7f0000004380)="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", 0x718}], 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe05, 0xb2, 0x8, 0x0, 0x0}}, 0x10) socket$inet6(0xa, 0x1, 0x100) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) preadv2(r4, &(0x7f0000000600)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000440)=""/67, 0x43}], 0x2, 0xfffffffd, 0x0, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={0x1}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x325, @time={0x10a, 0xff3}, 0x42, {}, 0x2, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000000300)={{0x0, 0x7}, 0x0, 0x2000000, 0x5, {0x8, 0x1}, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f00000001c0)={{0x2, 0x4}, 'port0\x00', 0x10, 0x80030, 0x7fff, 0x3, 0x4, 0x6, 0x9, 0x0, 0x6, 0x9}) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x76c, 0x294900) tkill(r0, 0x7) 3.801036977s ago: executing program 5 (id=5928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_NEWCHAIN={0xe8, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8394}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb770b79}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7a368220}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x164}, 0x1, 0x0, 0x0, 0xc0c0}, 0x820) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x0, 0xc}) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800104}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000005) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x3, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d4}, 0x40800) r3 = socket$nl_rdma(0x10, 0x3, 0x14) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x65) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'team_slave_0\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000007c0)=0x0) prlimit64(r5, 0xa, 0x0, &(0x7f0000000800)) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f0000000d00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000880)={0x430, 0x3f3, 0x800, 0x70bd29, 0x25dfdbfe, {0x6, 0x2, 0x26, [0x80, 0xa9, 0x9, 0x3, 0xffffffff, 0x3ff, 0x125a3227, 0x0, 0x4, 0x80ae, 0x7ff, 0x4, 0x3, 0x40, 0x5, 0xb, 0x8, 0x5, 0x30c, 0x7, 0x81, 0x8, 0xcb60, 0x5, 0x6, 0x1, 0x1, 0x0, 0x3, 0x3, 0x9c, 0x9, 0x1, 0x400, 0xffff0001, 0x7ff, 0x2, 0x8, 0x9, 0x0, 0x81, 0xde, 0x7, 0x0, 0x6, 0x6, 0x4, 0xfffffffa, 0x7, 0x5, 0x9, 0xfffffff9, 0x9, 0x0, 0x5, 0xb77, 0x2, 0x2, 0x0, 0x4, 0x0, 0x9, 0x10, 0x8], [0x10001, 0x401, 0xb2d, 0x3, 0x2, 0x152, 0xffffffff, 0x1ff, 0x7, 0x400, 0xdcfa, 0x7, 0x4a1, 0x3, 0x675c, 0x8cde, 0x4, 0x1, 0x6, 0x4, 0xe, 0x8000, 0x7, 0x6, 0x7, 0x1, 0xf, 0xd4, 0x3, 0x9, 0x9, 0x1ff, 0x9, 0x1, 0x48f4, 0x2, 0x0, 0x1, 0x6, 0x800000, 0x4042, 0x7, 0x3, 0xe, 0x4, 0x6, 0x9, 0xffffff1f, 0x3ff, 0x1000, 0x9, 0x1, 0x0, 0x8, 0xcbf5, 0x3799, 0x0, 0x3, 0x4, 0xffffd18a, 0x9, 0x1, 0x8de, 0x7], [0xad, 0x4, 0x2dd2af8, 0x7, 0x9, 0x1, 0x8, 0x2, 0xf749, 0xc73c, 0x1, 0x400, 0x8, 0x5, 0xa1a0, 0xfffffffd, 0xffff, 0x101, 0x0, 0xe390, 0xe, 0x7, 0x3, 0xa, 0x40, 0x1, 0x8, 0x8, 0x6, 0xfffffffb, 0x7, 0x3, 0x6, 0x49b, 0xfffffff7, 0x9, 0x7, 0x0, 0x37d, 0x6, 0x10001, 0x376c, 0x9, 0x3, 0x6, 0x1, 0x6, 0xd, 0x1ff, 0x4, 0xd, 0x80, 0x9d, 0x6fe, 0x10000, 0x7, 0x0, 0x17, 0x9, 0x3, 0x10a0000, 0x8, 0x0, 0x400], [0x0, 0x8, 0x7, 0x0, 0x28000, 0x9, 0x80000001, 0x10001, 0x7ff, 0x7c0, 0xfffeffff, 0x4, 0xf5, 0x8, 0xfffffe76, 0xffffffff, 0xfffffffb, 0x2, 0xfffffbff, 0xfb36, 0xa, 0x8, 0x18, 0x7, 0x6, 0xfffff59f, 0xab15, 0x4, 0x3, 0xc15, 0x1ff, 0xbf29, 0x6, 0x4, 0x0, 0x9, 0x8, 0x800, 0x6, 0x3, 0x8, 0x2, 0x2, 0x40000, 0x1, 0x1, 0xa, 0x10000, 0xcabe, 0x10001, 0x2d0, 0x6, 0x0, 0x0, 0x10000, 0x306, 0x0, 0x8000, 0xaf, 0x7, 0xdab, 0x3, 0x4088, 0x9], 0xf, ['\\\x00', '\x00', 'ib\x00', '\x00', 'ib\x00', 'TIPC\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x24040804}, 0x80) bind$alg(r1, &(0x7f0000000d40)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r7 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000dc0)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0x5, 0x2, 0x9, 0x7ff, 0x9]}, &(0x7f0000000e40)=0x78) io_setup(0xb, &(0x7f0000000e80)=0x0) io_cancel(r8, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x7, 0x3, r7, &(0x7f0000000ec0)="cf3bffd02908d644175a91464fb76950e1b771ae5996c638499b2d8b60c238f635d5470afa26a7a30b13218d047b19289773", 0x32, 0x8001, 0x0, 0x2, r1}, &(0x7f0000000f40)) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000f80)={0x1, 0x4, 0x3, 0x0, 0x4}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000fc0)=0x0) timer_create(0x5, &(0x7f0000001000)={0x0, 0x20, 0x1, @tid=r9}, &(0x7f0000001040)) close_range(r1, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0), 0x1, &(0x7f0000001100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '%#*)./%'}}, {@noxattr}, {@msize={'msize', 0x3d, 0x6}}, {@cache_none}, {@cache_mmap}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x4}}, {@uname={'uname', 0x3d, 'filter\x00'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\\\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/!%'}}, {@pcr={'pcr', 0x3d, 0x3f}}]}}) read$usbfs(r1, &(0x7f0000001200)=""/99, 0x63) connect$inet(r7, &(0x7f0000001280)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) syz_usb_connect(0x4, 0x6fd, &(0x7f00000013c0)={{0x12, 0x1, 0x201, 0xdb, 0xc6, 0x2a, 0x40, 0x5c6, 0x9034, 0x54d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6eb, 0x4, 0x5, 0x5, 0x50, 0x6, "", [{{0x9, 0x4, 0x7, 0x0, 0x0, 0xd5, 0xf8, 0x20, 0x9}}, {{0x9, 0x4, 0xcb, 0x4, 0x4, 0xa7, 0x4d, 0x85, 0xff, [@generic={0x90, 0x7, "b4ca10cb5d8648a34b71dab368ca36b52801c1bf8f5e7c949d14582361cf2d7af303628ff0de72596bca30972203b4142df581a1ecb763e6fded29c0950df9405060910a25cded8d4929024c57ae63d51454785a10e331f7892b4b7c9262baa55a05bd4e555801ed8cc9b1fe035f6ce6a2887117944c9e90d9b79902c39324e7882b21f8e3c951f34e64cae0a6f9"}, @generic={0x49, 0x11, "4a9b5e781ba4c5e06cf3c3c8786c54d565d9a4cdd6a244e10eec7a5f30db50836a9473cfe8d2efc7ff2a9185ef86ba1a09c946abcf800b0db4a7d97493fab0ae43d46135247c52"}], [{{0x9, 0x5, 0xb, 0x10, 0x10, 0x1, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x3, 0x1ff, 0x5, 0xb5, 0x6, [@generic={0x53, 0x2, "38a8eb5f81975582158cd7cb6950bde494a167970a30608543759fef44784cbdf8b1a57166b6ea2cf3445e42f8dac9621a9d3bfaa3eb63c35c2a652089304e61ff03f44f08c479dd5a4cf8df9fc2a54b64"}, @generic={0x45, 0x10, "25c84322856f0570eb7d282ab632a3d1d10b5093ef90a5938c3e8b6a7ed34560fcfef22aa44523e07713c8e368b50ad07e8e40319b6bfbc44027f2aac53bc119c45fd2"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x2, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x56}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0xa, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x1c0}, @generic={0x9b, 0x11, "6dc7fc3b0a1743c9fdacaf63fbe4a102441e2c4171ec71204908081adfd7b2df33db30a2c87105eadf359b1fd42012788356bd7c7783aca4d92e7724839dee5d3d77c5f49bd6b23210218e6171e4a6d8d100bb1c255a92c508db54184cd19d2cc9814a287d574f7af0a65ca3e00e27a35b6467de0591e44f22b0b85a2b18b4a8d692b7ab62c73ff8bd7ef05b44c06c93008663e149e68ca129"}]}}]}}, {{0x9, 0x4, 0x10, 0xa5, 0x3, 0xff, 0x9, 0x5, 0xff, [], [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x7f, 0x8, 0xf8, [@generic={0xd0, 0x31, "27a51dbd0ed8f2646005234e0ad687f582c8546f88ba95d670cc638b8f4a66576f1b00c69bf58bf84ff3310e9f9e4ad0e4092acb9d865b9b1f2deee91906c7e219453985790c7c0f00b9f3bf65892834618b70e6ae008e6e272bf7e80ea4c841b3918837368d6540dae5b1398232e538d4d32dbb8a7750327ace9bc411ef1e45a64c6bb80ceee2083928ee5ed887857517775aaa42ec227c31236f3f203a6cf5a40d73a24ccd0997f954979fc2aad6df5a476abfebb2fe167b770501f7d8349216a0f8c073406308394aee4d7e42"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x1, 0xc2, 0xd7, [@generic={0x55, 0x0, "574256b4c2ca1b70821a336e77e71e7a5beb0a6d5696a50b8a0b82a1023cf78022695de50183b89f211fe8addcc4571acb21a45d09557e0eb18a97786b74e9ffec6f971045e3e164ded2f43e35f76d5ec8b851"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x33, 0x22, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7e5}, @generic={0x50, 0xb, "7942ceac3d7acea5c006d3503548fde79698ff1c06610fa3f91b1b08d3830a7e471ba04974f796607f62c521c3d45c65ffa0e1e8ab71e083420fc220ee1b0f7cab541c392d83843475e2e46f50ec"}]}}]}}, {{0x9, 0x4, 0x55, 0xc0, 0xd, 0xa2, 0x55, 0x2c, 0x39, [@hid_hid={0x9, 0x21, 0x5, 0x64, 0x1, {0x22, 0xee1}}], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x6, 0x6, 0x5, [@generic={0x42, 0x3, "dc65b21702390b116e63eae8c998aa6c82f60de1ba478de13c0d799553afb02b0e40ea1ac81edff50c5f892e2699c862a6f7ace2209b9a4f57b1b96b2e78f122"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x10, 0x8, 0xfe, [@generic={0x84, 0x22, "5cc5b592f17954b90e59465de5a0d37518e0197c2283f9715d8c2eeb5475ecd1b09ec7fe20a7492872279717d33dfd3daca4c87dd58306462e635390ea00534e0d44aa2a5e0369bb789d2761c801c1b62e8702710257b2f0ff5934a2cabb0f7d01ba14d854332fdecd7505ec5e33d06a2331ef19b3892b3ef5469dec948c2681c23a"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x7, 0x8, 0xb}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x5, 0x0, 0xc0, [@generic={0x16, 0x17, "24072e5de0918144debb8b827ddb1f1669c2c753"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x10, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8}]}}, {{0x9, 0x5, 0x7, 0x8, 0xbf, 0x2, 0xff, 0x2, [@generic={0x91, 0x22, "e6761c3659d6ca46ad571f60df7acaccce9c49c6087d5176cd75de33d403307b0385dac57c40a817b8c3508e7c9fb252a77d1dc076e7f82c4afad64889f7dc7aeb0a6ca5e7b014098d0417097249fa8cc663abe618dcdfe64e7ca9e249649aefd35a77b2dbb8f3fd9d1a63fd9b690fe6943f9d59fa277c87961b3141d49c5c98d1c2334df6c70954f889ff772b4e9c"}, @generic={0x8b, 0x31, "259d55c748f616fc5c6a029842fcdcf985d6d0f644418b9bb688ac8e0fbfef1e64406143b59dd9c4c5d26b2cd529c37b2036f81cf15305962a157422fad7c62f0b8892ad708043b514ef446df65f385a418fe377375dc25c14cb796dba07ffcc0d834f2a6160a5f5828a29dd3b9ab62ab4b69b41e11606f37a45a636814ab2832f930ffde6ce37c835"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x1, 0x0, 0x4}}, {{0x9, 0x5, 0xc, 0x2, 0x28, 0x67, 0x8, 0x5}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x3, 0x9}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x8a, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xb272}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7}]}}, {{0x9, 0x5, 0x2, 0x8, 0x240, 0x1, 0x3}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x5, 0x9, 0xc}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0xfb, 0x1, 0xac, [@generic={0x50, 0x10, "aa294d002a2cd5f1e8c721bded1bad19f1cef16e976abed6d963e3fedee89f5be3bc2533d23c8449297b3eabc591912ded4eb0a26cc5b75c1760dd619b82dc9043c62cc046b164b256523623be3f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1}]}}]}}]}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000001ac0)={0xa, 0x6, 0x9f1f0e829e07cb5f, 0x7, 0x7f, 0xb, 0xff, 0x5}, 0x5d, &(0x7f0000001b00)={0x5, 0xf, 0x5d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xa6, 0x6, 0x8}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x3ff, 0xf, 0xe}, @generic={0x42, 0x10, 0x3, "3af110fcd47363ea4a4e3de7ca25b600d660a9d135bff5a329e2d687a5dedadb6af14cb4cc876fa125deb788038189f5d045a401142f36b5689e5847647202"}]}, 0x2, [{0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x3001}}]}) 3.678643133s ago: executing program 2 (id=5929): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) timer_create(0x6, &(0x7f0000000340)={0x0, 0x7, 0x4, @thr={&(0x7f0000000100)="a3c93287556b5f02987a4ef5d3aab9b29af21e211581dd7d0d2465e91a645bd7f32ce67e3d98a5be4a8fd587623cfc600cbd11e9ba958ea3", &(0x7f0000000240)="8ca49500a99dd903b89ec7a55183f31b0a4bf672612c2ab2d186e26dda7952305650459eeaf81b9b8143f7e77644f80eba259ff1fd22ebcc4ad4573d07f8b75579a82b76f4292512fff3ebab110aff42459a8a2975bbff851fb21477db1e8c3792c74d707183a878d64e5646fba9284e901ad3ebc83825f96b5442719bfe643df448b85f9254034c6ce5407d"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x80001) fstatfs(r2, &(0x7f0000000140)=""/231) flock(r0, 0x0) socket$kcm(0x29, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000080)=0x9, 0x4) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) syz_open_procfs(r4, &(0x7f00000000c0)='net/stat\x00') syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff000000070581020002000705010200020007058202"], 0x0) 3.539880241s ago: executing program 1 (id=5930): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x407, 0x7ff}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xfff80000, 0x1, 0x3e8, 0x2, 0xfffffffd, 0x20, 0x1, 0x0, 0xffffffff, &(0x7f0000000100)=[0x7], 0x1, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c9000c00feff0500190f0400f5ffcd039b18205e4e8b043003005419d65ff9cad118b19e89fbd636a82527611ddf1b7548bf004212a89c3b3783824127b9f5579cd78d977e8d8db8599817e3bbcba45905a883a1ca341a8d7832009fb6003fe00edf8970254f262f2ad72f14c1b53abc987b7dd177f4a4128128e8d9dea6d27f61f906164bcf3297ee48f3a5"], 0x11) socket(0x11, 0x3, 0x0) 3.194774628s ago: executing program 0 (id=5931): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x11, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) sendmsg$inet(r0, &(0x7f0000001d40)={&(0x7f00000018c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000000000000000000700000001890b04"], 0x20}, 0x0) 3.174190355s ago: executing program 1 (id=5932): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 3.161642513s ago: executing program 6 (id=5933): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x407, 0x7ff}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xfff80000, 0x1, 0x3e8, 0x2, 0xfffffffd, 0x20, 0x1, 0x0, 0xffffffff, &(0x7f0000000100)=[0x7], 0x1, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004a475ed32a4d06291f692b2f8e65f75f3000000040000000800000014100000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xa) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r2 = socket(0x10, 0x3, 0x0) getpgrp(0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) shutdown(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a6000000000000005", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x2048851}, 0x4800) socket$netlink(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x104) fgetxattr(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6f63322e7469ca21b11f051c9bfb40ae6d65727305"], &(0x7f00000000c0), 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c9000c00feff0500190f0400f5ffcd039b18205e4e8b043003005419d65ff9cad118b19e89fbd636a82527611ddf1b7548bf004212a89c3b3783824127b9f5579cd78d977e8d8db8599817e3bbcba45905a883a1ca341a8d7832009fb6003fe00edf8970254f262f2ad72f14c1b53abc987b7dd177f4a4128128e8d9dea6d27f61f906164bcf3297ee48f3a5"], 0x11) 3.109085403s ago: executing program 0 (id=5934): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8804, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x810\x8f\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) fchmodat(0xffffffffffffffff, 0x0, 0xd) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 2.575522626s ago: executing program 5 (id=5938): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket$kcm(0x2, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x110, 0x7, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func={0xf, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x30, 0x71, 0x30, 0x2e, 0x61, 0x5f, 0x0]}}, &(0x7f0000000380)=""/231, 0x30, 0xe7}, 0x28) pread64(r2, &(0x7f0000000140)=""/135, 0x87, 0x80) r3 = socket$inet6(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setns(0xffffffffffffffff, 0x24020000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0x0, 0x80800) setgid(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x84000151) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000200)={&(0x7f00000001c0)={0x2, 0xffff, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b', 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0x40}, 0xc004) 2.490786418s ago: executing program 1 (id=5939): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9, 0xffe0}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x20004804) 2.356899888s ago: executing program 0 (id=5940): memfd_create(&(0x7f0000000600)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\x8bq,\xf7\x96\xb8{\x8e\x90l\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\xbdK\x04\br\x17X\xe3\xfb\xc8\xd42&\x98\xf8\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19\x9d*T\x1d\x84\xbd4\'\xcb\xeb\x98_\br@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\xfd\xa9\xfb\x82]\xe7\x92\xe1w!9\x02*\xa1\xadi\x8a\x9d9\xa2B\xa2K@\xf5\xbd\xf5e(Y\'\xeb\f3\xdd\xb3sK\x13\r\xb7\x18q\xf9\xa4\xac>\xbe$L\x88\xdc\xe7~\x05qz\x9d7\xb66\xc2\xa7hQx\xdf\xfbe\xb7\x05v^\xc2\x9c\x17\xfc`%', 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}], 0x1, 0x23, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xce62, 0x4) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x7, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @call={0x85, 0x0, 0x0, 0x9f}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}], &(0x7f00000001c0)='GPL\x00', 0x2, 0x84, &(0x7f0000000500)=""/132, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x9, 0x4, 0xac}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000800)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000840)=[{0x4, 0x3, 0x1, 0x9a6cb8f7c37648bf}, {0x4, 0x1, 0xb, 0x4}, {0x3, 0x3, 0x6}, {0x4, 0x4, 0xd, 0x9}, {0x5, 0x2, 0x2, 0x3}], 0x10, 0x9}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfe71, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000a00)={r2, r3}, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) 2.156620605s ago: executing program 34 (id=5939): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9, 0xffe0}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x20004804) 1.915979354s ago: executing program 6 (id=5942): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 1.678462734s ago: executing program 2 (id=5943): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x407, 0x7ff}, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xfff80000, 0x1, 0x3e8, 0x2, 0xfffffffd, 0x20, 0x1, 0x0, 0xffffffff, &(0x7f0000000100)=[0x7], 0x1, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c9000c00feff0500190f0400f5ffcd039b18205e4e8b043003005419d65ff9cad118b19e89fbd636a82527611ddf1b7548bf004212a89c3b3783824127b9f5579cd78d977e8d8db8599817e3bbcba45905a883a1ca341a8d7832009fb6003fe00edf8970254f262f2ad72f14c1b53abc987b7dd177f4a4128128e8d9dea6d27f61f906164bcf3297ee48f3a5"], 0x11) socket(0x11, 0x3, 0x0) 1.60491195s ago: executing program 5 (id=5944): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) fanotify_init(0x10, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x4040005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) r4 = socket$inet_udp(0x2, 0x2, 0x0) lseek(0xffffffffffffffff, 0x8000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) 1.550748856s ago: executing program 2 (id=5945): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r6], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000380)={0x9, 0x7fff, 0x0, 0x94, 0x3, "510b16ddda79c83a28c14faa9cc16b976e3330", 0x1, 0xc3}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x5e9602, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000880)="22cf", 0x2, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0x2e}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="0800dc00a7e5000010002d800a000000158e020202020202"], 0x34}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) 1.395282042s ago: executing program 0 (id=5946): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @private1, @loopback={0xff00000000000000}, 0x8, 0x0, 0x0, 0x1}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r6 = dup(r5) ioctl$FS_IOC_SETFLAGS(r6, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000c, 0x28011, r6, 0x2c93d000) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f00000000c0)={0x20, r4, 0x0, 0x0, &(0x7f0000000080)}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r3, @ANYBLOB="da116487", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x40040, 0xb0) write(r7, &(0x7f0000000080)="cf0df04c73b3", 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 259.624884ms ago: executing program 5 (id=5947): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) 0s ago: executing program 2 (id=5948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a400000000009"], 0x140}}, 0x44800) kernel console output (not intermixed with test programs): it(1785474983.387:607): avc: denied { bind } for pid=25912 comm="syz.1.5298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2473.575844][ T30] audit: type=1400 audit(1785474983.387:608): avc: denied { map } for pid=25912 comm="syz.1.5298" path="socket:[88174]" dev="sockfs" ino=88174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2474.289399][ T30] audit: type=1400 audit(1785474983.387:609): avc: denied { read } for pid=25912 comm="syz.1.5298" path="socket:[88174]" dev="sockfs" ino=88174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2474.891960][T25938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2474.930150][T25938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2475.001159][T25938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2475.066466][T25938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2475.107563][T25940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2475.782368][T25938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2475.831762][T25938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2475.859949][T14265] usb 6-1: USB disconnect, device number 101 [ 2475.926106][T25938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2475.966097][T25938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2476.631020][T25957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2476.677321][T25957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2476.898358][ T30] audit: type=1400 audit(1785474987.377:610): avc: denied { create } for pid=25962 comm="syz.1.5311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2477.038784][ T30] audit: type=1400 audit(1785474987.407:611): avc: denied { write } for pid=25962 comm="syz.1.5311" path="socket:[88311]" dev="sockfs" ino=88311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2478.267558][T25980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2478.824606][T25996] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5319'. [ 2478.839184][T25996] overlayfs: failed to resolve './file1': -2 [ 2479.248916][T26001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2479.297442][T26001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2479.790543][T26010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5324'. [ 2479.863502][T26012] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5324'. [ 2480.391725][T13484] Bluetooth: hci5: command 0x0c1a tx timeout [ 2480.521602][T24512] usb 7-1: new low-speed USB device number 96 using dummy_hcd [ 2480.669169][T26018] FAULT_INJECTION: forcing a failure. [ 2480.669169][T26018] name failslab, interval 1, probability 0, space 0, times 0 [ 2480.698616][T26018] CPU: 0 UID: 0 PID: 26018 Comm: syz.1.5326 Not tainted syzkaller #0 PREEMPT(full) [ 2480.698643][T26018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2480.698658][T26018] Call Trace: [ 2480.698665][T26018] [ 2480.698673][T26018] dump_stack_lvl+0x100/0x190 [ 2480.698700][T26018] should_fail_ex.cold+0x5/0xa [ 2480.698716][T26018] should_failslab+0xc2/0x120 [ 2480.698733][T26018] __kmalloc_cache_noprof+0x91/0x6c0 [ 2480.698754][T26018] ? resv_map_alloc+0x46/0x400 [ 2480.698771][T26018] resv_map_alloc+0x46/0x400 [ 2480.698787][T26018] hugetlbfs_get_inode+0x385/0x700 [ 2480.698805][T26018] ? __mutex_unlock_slowpath+0x35d/0x930 [ 2480.698822][T26018] hugetlb_file_setup+0x15b/0x5b0 [ 2480.698841][T26018] ksys_mmap_pgoff+0x242/0x610 [ 2480.698860][T26018] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 2480.698875][T26018] ? fput+0x79/0x100 [ 2480.698889][T26018] ? ksys_write+0x1ac/0x250 [ 2480.698907][T26018] ? __pfx_ksys_write+0x10/0x10 [ 2480.698928][T26018] __x64_sys_mmap+0x125/0x190 [ 2480.698947][T26018] do_syscall_64+0x115/0x870 [ 2480.698961][T26018] ? clear_bhb_loop+0x40/0x90 [ 2480.698976][T26018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2480.698989][T26018] RIP: 0033:0x7feeb439e019 [ 2480.699000][T26018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2480.699012][T26018] RSP: 002b:00007feeb5331028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2480.699025][T26018] RAX: ffffffffffffffda RBX: 00007feeb4625fa0 RCX: 00007feeb439e019 [ 2480.699033][T26018] RDX: 0000000002000007 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 2480.699040][T26018] RBP: 00007feeb5331090 R08: ffffffffffffffff R09: 000000009dc0d000 [ 2480.699048][T26018] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000001 [ 2480.699055][T26018] R13: 00007feeb4626038 R14: 00007feeb4625fa0 R15: 00007ffd8cf3c328 [ 2480.699070][T26018] [ 2481.190719][ T30] audit: type=1400 audit(1785474991.667:612): avc: denied { unmount } for pid=16857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 2481.219810][T24512] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2481.263179][T24512] usb 7-1: config 127 has an invalid interface number: 106 but max is 0 [ 2481.287510][T24512] usb 7-1: config 127 has no interface number 0 [ 2481.311062][T24512] usb 7-1: config 127 interface 106 altsetting 8 endpoint 0xF has invalid maxpacket 128, setting to 8 [ 2481.796249][T24512] usb 7-1: config 127 interface 106 has no altsetting 0 [ 2482.622853][ T30] audit: type=1400 audit(1785474993.087:613): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 2482.676157][T26044] FAULT_INJECTION: forcing a failure. [ 2482.676157][T26044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2482.754146][T26044] CPU: 1 UID: 0 PID: 26044 Comm: syz.1.5334 Not tainted syzkaller #0 PREEMPT(full) [ 2482.754173][T26044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2482.754182][T26044] Call Trace: [ 2482.754188][T26044] [ 2482.754195][T26044] dump_stack_lvl+0x100/0x190 [ 2482.754217][T26044] should_fail_ex.cold+0x5/0xa [ 2482.754233][T26044] _copy_from_iter+0x1f4/0x1690 [ 2482.754253][T26044] ? __pfx__copy_from_iter+0x10/0x10 [ 2482.754270][T26044] ? _parse_integer_limit+0x1ac/0x220 [ 2482.754291][T26044] ? _kstrtoull+0x13c/0x1f0 [ 2482.754307][T26044] ? __pfx__kstrtoull+0x10/0x10 [ 2482.754325][T26044] tun_get_user+0x265/0x3c20 [ 2482.754346][T26044] ? __lock_acquire+0x49f/0x1a40 [ 2482.754365][T26044] ? __pfx_tun_get_user+0x10/0x10 [ 2482.754378][T26044] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2482.754399][T26044] ? find_held_lock+0x2b/0x80 [ 2482.754409][T26044] ? tun_get+0x191/0x370 [ 2482.754432][T26044] ? tun_get+0x191/0x370 [ 2482.754462][T26044] tun_chr_write_iter+0xdc/0x200 [ 2482.754480][T26044] vfs_write+0x6ac/0x1050 [ 2482.754502][T26044] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2482.754516][T26044] ? __pfx_vfs_write+0x10/0x10 [ 2482.754532][T26044] ? find_held_lock+0x2b/0x80 [ 2482.754553][T26044] ksys_write+0x12a/0x250 [ 2482.754577][T26044] ? __pfx_ksys_write+0x10/0x10 [ 2482.754608][T26044] do_syscall_64+0x115/0x870 [ 2482.754627][T26044] ? clear_bhb_loop+0x40/0x90 [ 2482.754645][T26044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2482.754661][T26044] RIP: 0033:0x7feeb439e019 [ 2482.754672][T26044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2482.754683][T26044] RSP: 002b:00007feeb5331028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2482.754695][T26044] RAX: ffffffffffffffda RBX: 00007feeb4625fa0 RCX: 00007feeb439e019 [ 2482.754703][T26044] RDX: 0000000000000088 RSI: 0000200000000140 RDI: 0000000000000003 [ 2482.754713][T26044] RBP: 00007feeb5331090 R08: 0000000000000000 R09: 0000000000000000 [ 2482.754723][T26044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2482.754733][T26044] R13: 00007feeb4626038 R14: 00007feeb4625fa0 R15: 00007ffd8cf3c328 [ 2482.754755][T26044] [ 2483.025752][ T30] audit: type=1400 audit(1785474993.137:614): avc: denied { bind } for pid=26043 comm="syz.1.5334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2483.065866][ T30] audit: type=1400 audit(1785474993.157:615): avc: denied { listen } for pid=26043 comm="syz.1.5334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2483.098334][T24512] usb 7-1: string descriptor 0 read error: -71 [ 2483.108364][T26035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2483.117580][T26035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2483.136255][T24512] usb 7-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8 [ 2483.165866][ T30] audit: type=1400 audit(1785474993.577:616): avc: denied { connect } for pid=26030 comm="syz.0.5330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2483.192706][T24512] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2483.236169][T24512] usb 7-1: can't set config #127, error -71 [ 2483.262178][T24512] usb 7-1: USB disconnect, device number 96 [ 2483.271460][T26046] bond0: entered promiscuous mode [ 2483.276923][T26046] bond_slave_0: entered promiscuous mode [ 2483.297944][T26046] bond_slave_1: entered promiscuous mode [ 2483.318556][T26046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2484.277628][T26060] syz.5.5339 uses obsolete (PF_INET,SOCK_PACKET) [ 2484.307156][T26057] net_ratelimit: 89 callbacks suppressed [ 2484.307187][T26057] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2484.325930][ T30] audit: type=1400 audit(1785474994.807:617): avc: denied { ioctl } for pid=26058 comm="syz.5.5339" path="socket:[89394]" dev="sockfs" ino=89394 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2484.967017][T26083] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5343'. [ 2484.976092][T13484] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2485.001903][ T30] audit: type=1400 audit(1785474995.447:618): avc: denied { shutdown } for pid=26081 comm="syz.1.5343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2485.937993][ T30] audit: type=1400 audit(1785474996.417:619): avc: denied { mount } for pid=26091 comm="syz.2.5346" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2485.964526][ T30] audit: type=1400 audit(1785474996.417:620): avc: denied { write } for pid=26067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2486.685182][T26112] FAULT_INJECTION: forcing a failure. [ 2486.685182][T26112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2486.716926][T26112] CPU: 1 UID: 0 PID: 26112 Comm: syz.6.5347 Not tainted syzkaller #0 PREEMPT(full) [ 2486.716954][T26112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2486.716964][T26112] Call Trace: [ 2486.716971][T26112] [ 2486.716977][T26112] dump_stack_lvl+0x100/0x190 [ 2486.717005][T26112] should_fail_ex.cold+0x5/0xa [ 2486.717029][T26112] _copy_from_user+0x2e/0xd0 [ 2486.717052][T26112] move_addr_to_kernel+0x65/0x170 [ 2486.717080][T26112] __sys_connect+0xb5/0x170 [ 2486.717097][T26112] ? __pfx___sys_connect+0x10/0x10 [ 2486.717112][T26112] ? __fget_files+0x21f/0x3d0 [ 2486.717139][T26112] ? __pfx_ksys_write+0x10/0x10 [ 2486.717168][T26112] __x64_sys_connect+0x72/0xb0 [ 2486.717185][T26112] ? lockdep_hardirqs_on+0x78/0x100 [ 2486.717205][T26112] do_syscall_64+0x115/0x870 [ 2486.717225][T26112] ? clear_bhb_loop+0x40/0x90 [ 2486.717247][T26112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2486.717266][T26112] RIP: 0033:0x7f0ec319e019 [ 2486.717281][T26112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2486.717297][T26112] RSP: 002b:00007f0ec40a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2486.717314][T26112] RAX: ffffffffffffffda RBX: 00007f0ec3426180 RCX: 00007f0ec319e019 [ 2486.717324][T26112] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000005 [ 2486.717334][T26112] RBP: 00007f0ec40a6090 R08: 0000000000000000 R09: 0000000000000000 [ 2486.717345][T26112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2486.717354][T26112] R13: 00007f0ec3426218 R14: 00007f0ec3426180 R15: 00007ffdd2483c18 [ 2486.717378][T26112] [ 2486.719137][T26093] fuse: fd is not a fuse device [ 2486.949858][ T30] audit: type=1400 audit(1785474997.417:621): avc: denied { write } for pid=26120 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2486.999460][ T30] audit: type=1400 audit(1785474997.427:622): avc: denied { connect } for pid=26099 comm="syz.0.5348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2490.276267][ T30] audit: type=1400 audit(1785475000.757:623): avc: denied { write } for pid=26128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2490.446675][T26182] FAULT_INJECTION: forcing a failure. [ 2490.446675][T26182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2490.471394][T26182] CPU: 1 UID: 0 PID: 26182 Comm: syz.5.5366 Not tainted syzkaller #0 PREEMPT(full) [ 2490.471420][T26182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2490.471431][T26182] Call Trace: [ 2490.471437][T26182] [ 2490.471445][T26182] dump_stack_lvl+0x100/0x190 [ 2490.471473][T26182] should_fail_ex.cold+0x5/0xa [ 2490.471499][T26182] _copy_from_user+0x2e/0xd0 [ 2490.471525][T26182] copy_msghdr_from_user+0x9f/0x4c0 [ 2490.471553][T26182] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2490.471579][T26182] ? find_held_lock+0x2b/0x80 [ 2490.471598][T26182] ? __lock_acquire+0x49f/0x1a40 [ 2490.471618][T26182] ? get_pid_task+0x106/0x250 [ 2490.471634][T26182] ___sys_recvmsg+0xdd/0x1a0 [ 2490.471657][T26182] ? __pfx____sys_recvmsg+0x10/0x10 [ 2490.471682][T26182] ? find_held_lock+0x2b/0x80 [ 2490.471706][T26182] __x64_sys_recvmsg+0x19a/0x260 [ 2490.471725][T26182] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 2490.471754][T26182] do_syscall_64+0x115/0x870 [ 2490.471771][T26182] ? clear_bhb_loop+0x40/0x90 [ 2490.471789][T26182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2490.471804][T26182] RIP: 0033:0x7f10f9b9e019 [ 2490.471816][T26182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2490.471830][T26182] RSP: 002b:00007f10faa77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2490.471846][T26182] RAX: ffffffffffffffda RBX: 00007f10f9e26180 RCX: 00007f10f9b9e019 [ 2490.471855][T26182] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007 [ 2490.471864][T26182] RBP: 00007f10faa77090 R08: 0000000000000000 R09: 0000000000000000 [ 2490.471873][T26182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2490.471881][T26182] R13: 00007f10f9e26218 R14: 00007f10f9e26180 R15: 00007ffd80182558 [ 2490.471900][T26182] [ 2491.002656][ T30] audit: type=1400 audit(1785475001.477:624): avc: denied { write } for pid=26179 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2492.240058][T26205] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5375'. [ 2493.531331][ T1579] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2493.556584][T26223] mmap: syz.2.5378 (26223) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2493.728883][ T1579] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2493.760232][ T30] audit: type=1400 audit(1785475004.227:625): avc: denied { write } for pid=26196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2493.792187][ T1579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2493.806017][ T1579] usb 2-1: Product: syz [ 2493.817779][ T1579] usb 2-1: Manufacturer: syz [ 2493.838471][ T1579] usb 2-1: SerialNumber: syz [ 2493.929946][T26235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5384'. [ 2493.970877][T26235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5384'. [ 2494.017725][T26235] netlink: 'syz.0.5384': attribute type 14 has an invalid length. [ 2494.401947][ T30] audit: type=1400 audit(1785475004.877:626): avc: denied { bind } for pid=26239 comm="syz.6.5386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2494.824375][ T30] audit: type=1400 audit(1785475005.307:627): avc: denied { write } for pid=26240 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2495.103634][ T1579] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2495.169990][ T1579] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2495.541525][T14265] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2495.711358][T14265] usb 6-1: Using ep0 maxpacket: 16 [ 2495.740805][T14265] usb 6-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 2495.781740][T14265] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2495.844028][T14265] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2495.886055][T14265] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2495.926857][T14265] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2495.979403][T14265] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2496.010855][T14265] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2496.058243][T14265] usb 6-1: Manufacturer: syz [ 2496.102371][T14265] usb 6-1: config 0 descriptor?? [ 2496.383154][ T1579] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 2496.449490][ T1579] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2496.472777][T14265] rc_core: IR keymap rc-hauppauge not found [ 2496.500264][ T1579] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2496.502782][T14265] Registered IR keymap rc-empty [ 2496.549090][T14265] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2496.571060][ T1579] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 2496.584298][T14265] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2496.638552][ T1579] usb 2-1: USB disconnect, device number 99 [ 2496.642217][T14265] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2496.700368][T14265] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input73 [ 2497.297740][ T30] audit: type=1400 audit(1785475007.267:628): avc: denied { write } for pid=26288 comm="syz.1.5405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2497.297774][T14265] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2497.374996][T14265] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2497.389403][T11529] IPVS: starting estimator thread 0... [ 2497.413286][ T30] audit: type=1400 audit(1785475007.887:629): avc: denied { read write } for pid=26292 comm="syz.6.5407" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2497.421988][T14265] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2497.503539][T26298] IPVS: using max 48 ests per chain, 115200 per kthread [ 2497.731810][T14265] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2497.743798][T26299] IPVS: lc: FWM 3 0x00000003 - no destination available [ 2497.793588][T14265] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2497.813963][ T30] audit: type=1400 audit(1785475007.887:630): avc: denied { ioctl open } for pid=26292 comm="syz.6.5407" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2497.882348][T14265] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2497.969295][T14265] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2498.054511][T14265] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2498.081758][T26310] FAULT_INJECTION: forcing a failure. [ 2498.081758][T26310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2498.121794][T14265] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2498.158167][T26310] CPU: 0 UID: 0 PID: 26310 Comm: syz.1.5410 Not tainted syzkaller #0 PREEMPT(full) [ 2498.158194][T26310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2498.158204][T26310] Call Trace: [ 2498.158211][T26310] [ 2498.158218][T26310] dump_stack_lvl+0x100/0x190 [ 2498.158245][T26310] should_fail_ex.cold+0x5/0xa [ 2498.158269][T26310] _copy_from_iter+0x1f4/0x1690 [ 2498.158298][T26310] ? rcu_is_watching+0x12/0xc0 [ 2498.158326][T26310] ? __pfx__copy_from_iter+0x10/0x10 [ 2498.158348][T26310] ? __kasan_kmalloc+0xaa/0xb0 [ 2498.158371][T26310] ? __kvmalloc_node_noprof+0x36d/0x970 [ 2498.158396][T26310] ? proc_sys_call_handler+0x2c7/0x5a0 [ 2498.158422][T26310] proc_sys_call_handler+0x3ed/0x5a0 [ 2498.158445][T26310] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 2498.158474][T26310] vfs_write+0x6ac/0x1050 [ 2498.158509][T26310] ? __pfx_proc_sys_write+0x10/0x10 [ 2498.158531][T26310] ? __pfx_vfs_write+0x10/0x10 [ 2498.158574][T26310] ksys_write+0x12a/0x250 [ 2498.158601][T26310] ? __pfx_ksys_write+0x10/0x10 [ 2498.158636][T26310] do_syscall_64+0x115/0x870 [ 2498.158657][T26310] ? clear_bhb_loop+0x40/0x90 [ 2498.158678][T26310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2498.158693][T26310] RIP: 0033:0x7feeb439e019 [ 2498.158706][T26310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2498.158719][T26310] RSP: 002b:00007feeb5331028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2498.158733][T26310] RAX: ffffffffffffffda RBX: 00007feeb4625fa0 RCX: 00007feeb439e019 [ 2498.158742][T26310] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 2498.158750][T26310] RBP: 00007feeb5331090 R08: 0000000000000000 R09: 0000000000000000 [ 2498.158758][T26310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2498.158766][T26310] R13: 00007feeb4626038 R14: 00007feeb4625fa0 R15: 00007ffd8cf3c328 [ 2498.158784][T26310] [ 2498.411361][T14265] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2498.432612][T14265] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2498.441814][T14265] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2498.454280][T14265] usb 6-1: USB disconnect, device number 102 [ 2498.762652][ T30] audit: type=1400 audit(1785475009.247:631): avc: denied { getopt } for pid=26316 comm="syz.1.5412" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2499.522717][T11578] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 2499.692135][T11578] usb 7-1: Using ep0 maxpacket: 8 [ 2499.708027][T11578] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2499.722038][T11578] usb 7-1: config 117 has an invalid interface number: 163 but max is 0 [ 2499.730614][T11578] usb 7-1: config 117 has no interface number 0 [ 2499.738997][T11578] usb 7-1: config 117 interface 163 has no altsetting 0 [ 2499.757057][T11578] usb 7-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 2499.776512][T11578] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2499.785774][T11578] usb 7-1: Product: syz [ 2499.791574][T11578] usb 7-1: Manufacturer: syz [ 2499.797381][T11578] usb 7-1: SerialNumber: syz [ 2499.839686][T26341] bond0: left promiscuous mode [ 2499.855287][T26341] bond_slave_0: left promiscuous mode [ 2499.858338][T26343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2499.873061][T26343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2499.883281][T26341] bond_slave_1: left promiscuous mode [ 2499.911975][ T4992] IPVS: starting estimator thread 0... [ 2499.919085][T26343] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2499.929734][ T30] audit: type=1400 audit(1785475010.417:632): avc: denied { setattr } for pid=26342 comm="syz.0.5423" path="socket:[88956]" dev="sockfs" ino=88956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2499.955431][ T1579] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2500.001391][T26345] IPVS: using max 44 ests per chain, 105600 per kthread [ 2500.121404][ T1579] usb 2-1: Using ep0 maxpacket: 32 [ 2500.128992][ T1579] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 2500.137244][ T1579] usb 2-1: config 2 has no interface number 0 [ 2500.143448][T10909] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2500.151188][ T1579] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 2500.161592][ T1579] usb 2-1: config 2 interface 88 has no altsetting 0 [ 2500.170565][ T1579] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 2500.179875][ T1579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 2500.188053][ T1579] usb 2-1: Product: syz [ 2500.192649][ T1579] usb 2-1: Manufacturer: syz [ 2500.197293][ T1579] usb 2-1: SerialNumber: syz [ 2500.206106][T26337] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2500.227476][T11578] f81534a_ctrl 7-1:117.163: probe with driver f81534a_ctrl failed with error -71 [ 2500.259288][T11578] usb 7-1: USB disconnect, device number 97 [ 2500.321522][T10909] usb 6-1: Using ep0 maxpacket: 32 [ 2500.334763][T10909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 28452, setting to 1024 [ 2500.348788][T10909] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2500.359430][T26352] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5425'. [ 2500.361630][T10909] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 2500.378839][T10909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2500.386959][T10909] usb 6-1: Product: syz [ 2500.391176][T10909] usb 6-1: Manufacturer: syz [ 2500.396078][T10909] usb 6-1: SerialNumber: syz [ 2500.414641][T10909] usb 6-1: config 0 descriptor?? [ 2500.428885][T26337] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2500.441480][T26344] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2500.451398][T10909] hub 6-1:0.0: bad descriptor, ignoring hub [ 2500.461192][T10909] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2500.506634][T10909] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input74 [ 2500.754825][ T30] audit: type=1400 audit(1785475011.227:633): avc: denied { write } for pid=26356 comm="syz.0.5427" name="c.1" dev="configfs" ino=86256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2500.826366][T26357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5427'. [ 2500.846855][ T30] audit: type=1400 audit(1785475011.277:634): avc: denied { write } for pid=26356 comm="syz.0.5427" name="c.1" dev="configfs" ino=86256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2502.923712][T14265] usb 6-1: USB disconnect, device number 103 [ 2502.923760][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 2503.207760][T26396] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2503.335021][ T1579] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2503.374917][ T1579] asix 2-1:2.88: probe with driver asix failed with error -71 [ 2503.431062][ T1579] usb 2-1: USB disconnect, device number 100 [ 2503.485150][ T30] audit: type=1400 audit(1785475013.957:635): avc: denied { write } for pid=26399 comm="syz.1.5441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2503.574386][ T30] audit: type=1400 audit(1785475013.997:636): avc: denied { read } for pid=26399 comm="syz.1.5441" lport=5838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2503.868607][ T30] audit: type=1400 audit(1785475014.347:637): avc: denied { map } for pid=26416 comm="syz.5.5448" path="socket:[89999]" dev="sockfs" ino=89999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2503.920902][T26421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2504.171352][T14265] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2504.277550][T26430] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2504.581362][T14265] usb 2-1: Using ep0 maxpacket: 32 [ 2504.590304][T14265] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 2504.598639][T14265] usb 2-1: config 2 has no interface number 0 [ 2504.604898][T14265] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 2504.642631][T14265] usb 2-1: config 2 interface 88 has no altsetting 0 [ 2504.668986][T14265] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 2504.687228][T14265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 2504.727318][T14265] usb 2-1: Product: syz [ 2504.742764][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5455'. [ 2504.755959][T14265] usb 2-1: Manufacturer: syz [ 2504.764327][T26434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5455'. [ 2504.788955][T14265] usb 2-1: SerialNumber: syz [ 2504.818120][T26419] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2505.076939][T26419] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2505.447622][ T30] audit: type=1400 audit(1785475015.927:638): avc: denied { write } for pid=26458 comm="syz.0.5465" name="c.1" dev="configfs" ino=86256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2505.479794][T26460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5465'. [ 2505.498809][ T30] audit: type=1400 audit(1785475015.947:639): avc: denied { write } for pid=26458 comm="syz.0.5465" name="c.1" dev="configfs" ino=86256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2506.328681][ T30] audit: type=1400 audit(1785475016.807:640): avc: denied { write } for pid=26481 comm="syz.5.5471" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2506.501540][ T1579] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 2506.672950][ T1579] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2506.730758][ T1579] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2506.778065][ T1579] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2506.823311][ T1579] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2506.898560][T26480] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2507.015341][ T1579] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2507.033686][T26493] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5473'. [ 2507.108474][T14265] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2507.195307][T14265] asix 2-1:2.88: probe with driver asix failed with error -71 [ 2507.281519][ T30] audit: type=1400 audit(1785475017.757:641): avc: denied { map } for pid=26479 comm="syz.6.5470" path="socket:[91208]" dev="sockfs" ino=91208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2507.281897][T26480] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2507.341144][T14265] usb 2-1: USB disconnect, device number 101 [ 2507.603511][ T30] audit: type=1400 audit(1785475017.757:642): avc: denied { read } for pid=26479 comm="syz.6.5470" path="socket:[91208]" dev="sockfs" ino=91208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2508.280609][ T30] audit: type=1400 audit(1785475017.927:643): avc: denied { setopt } for pid=26497 comm="syz.2.5474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2508.309480][T26506] IPVS: lc: FWM 3 0x00000003 - no destination available [ 2508.338470][T26499] IPVS: set_ctl: invalid protocol: 183 172.20.20.170:20001 [ 2508.396426][ T1579] usb 7-1: USB disconnect, device number 98 [ 2508.445187][T26509] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5476'. [ 2508.608872][T26513] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5477'. [ 2508.738178][ T30] audit: type=1400 audit(1785475019.217:644): avc: denied { create } for pid=26517 comm="syz.2.5479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2508.766446][T26518] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5479'. [ 2508.781489][T13484] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2508.813076][ T30] audit: type=1400 audit(1785475019.247:645): avc: denied { shutdown } for pid=26517 comm="syz.2.5479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2509.248109][T26533] xt_hashlimit: size too large, truncated to 1048576 [ 2509.630050][T26541] FAULT_INJECTION: forcing a failure. [ 2509.630050][T26541] name failslab, interval 1, probability 0, space 0, times 0 [ 2509.702406][T26541] CPU: 0 UID: 0 PID: 26541 Comm: syz.6.5487 Not tainted syzkaller #0 PREEMPT(full) [ 2509.702433][T26541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2509.702445][T26541] Call Trace: [ 2509.702452][T26541] [ 2509.702460][T26541] dump_stack_lvl+0x100/0x190 [ 2509.702488][T26541] should_fail_ex.cold+0x5/0xa [ 2509.702515][T26541] should_failslab+0xc2/0x120 [ 2509.702540][T26541] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 2509.702562][T26541] ? __alloc_skb+0x5b7/0x710 [ 2509.702581][T26541] ? __alloc_skb+0x140/0x710 [ 2509.702604][T26541] __alloc_skb+0x140/0x710 [ 2509.702622][T26541] ? __alloc_skb+0x5b7/0x710 [ 2509.702640][T26541] ? __pfx___alloc_skb+0x10/0x10 [ 2509.702658][T26541] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 2509.702686][T26541] ? sock_has_perm+0x25a/0x2f0 [ 2509.702709][T26541] ? __pfx_sock_has_perm+0x10/0x10 [ 2509.702736][T26541] netlink_alloc_large_skb+0x69/0x150 [ 2509.702756][T26541] netlink_sendmsg+0x680/0xda0 [ 2509.702778][T26541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2509.702798][T26541] ? selinux_socket_sendmsg+0x198/0x2f0 [ 2509.702827][T26541] ____sys_sendmsg+0xa4d/0xbe0 [ 2509.702852][T26541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2509.702872][T26541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2509.702910][T26541] ___sys_sendmsg+0x190/0x1e0 [ 2509.702939][T26541] ? __pfx____sys_sendmsg+0x10/0x10 [ 2509.702965][T26541] ? __lock_acquire+0x49f/0x1a40 [ 2509.702987][T26541] ? get_pid_task+0x106/0x250 [ 2509.703029][T26541] __sys_sendmsg+0x160/0x210 [ 2509.703052][T26541] ? __pfx___sys_sendmsg+0x10/0x10 [ 2509.703088][T26541] do_syscall_64+0x115/0x870 [ 2509.703110][T26541] ? clear_bhb_loop+0x40/0x90 [ 2509.703133][T26541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2509.703158][T26541] RIP: 0033:0x7f0ec319e019 [ 2509.703175][T26541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2509.703192][T26541] RSP: 002b:00007f0ec40e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2509.703211][T26541] RAX: ffffffffffffffda RBX: 00007f0ec3425fa0 RCX: 00007f0ec319e019 [ 2509.703223][T26541] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 2509.703234][T26541] RBP: 00007f0ec40e8090 R08: 0000000000000000 R09: 0000000000000000 [ 2509.703245][T26541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2509.703256][T26541] R13: 00007f0ec3426038 R14: 00007f0ec3425fa0 R15: 00007ffdd2483c18 [ 2509.703280][T26541] [ 2510.570248][T26547] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5488'. [ 2510.608255][T13484] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2511.038945][T26556] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5491'. [ 2511.262422][T26555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2511.278312][T13484] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2512.480729][T26573] 9pnet_fd: p9_fd_create_tcp (26573): problem binding to privport [ 2513.046788][ C1] Unknown status report in ack skb [ 2513.185606][T26581] macvlan2: entered promiscuous mode [ 2513.191095][T26581] bridge0: entered promiscuous mode [ 2513.517003][T26584] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5499'. [ 2513.569806][T13484] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2514.770025][T26589] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2515.270150][T26596] sch_fq: defrate 4294967295 ignored. [ 2515.664649][T26605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2515.715821][T26605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2515.870006][T26608] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5502'. [ 2515.890887][T13484] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2515.994345][T26612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5508'. [ 2516.059457][T26613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5508'. [ 2516.077306][T26613] hsr_slave_0: left promiscuous mode [ 2516.113066][T26613] hsr_slave_1: left promiscuous mode [ 2516.197451][T26615] 9pnet_fd: p9_fd_create_tcp (26615): problem connecting socket to 127.0.0.1 [ 2516.602177][T26619] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 2516.639350][ T30] audit: type=1400 audit(1785475027.117:646): avc: denied { ioctl } for pid=26616 comm="syz.6.5510" path="socket:[91453]" dev="sockfs" ino=91453 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2517.471450][T26636] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5518'. [ 2518.125149][T13484] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2518.169143][T26641] 9pnet_fd: p9_fd_create_tcp (26641): problem connecting socket to 127.0.0.1 [ 2519.020688][T26666] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 2519.110131][T26670] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5530'. [ 2519.130961][T13484] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2519.163410][ T30] audit: type=1400 audit(1785475029.647:647): avc: denied { map } for pid=26671 comm="syz.5.5531" path="socket:[91520]" dev="sockfs" ino=91520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2520.769465][T10909] IPVS: starting estimator thread 0... [ 2520.886754][T26689] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2520.904590][T26685] IPVS: using max 46 ests per chain, 110400 per kthread [ 2521.186768][T26675] ceph: No mds server is up or the cluster is laggy [ 2521.194309][T14265] libceph: connect (1)127.0.0.1:6789 error -101 [ 2521.205585][T14265] libceph: mon0 (1)127.0.0.1:6789 connect error [ 2521.372350][T26692] 9pnet_fd: p9_fd_create_tcp (26692): problem connecting socket to 127.0.0.1 [ 2521.539854][ T30] audit: type=1400 audit(1785475032.017:648): avc: denied { listen } for pid=26698 comm="syz.2.5539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2521.570505][T26701] FAULT_INJECTION: forcing a failure. [ 2521.570505][T26701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2521.598811][T26703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5539'. [ 2521.612843][ T30] audit: type=1400 audit(1785475032.017:649): avc: denied { read } for pid=26698 comm="syz.2.5539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2521.635971][T26701] CPU: 1 UID: 0 PID: 26701 Comm: syz.5.5541 Not tainted syzkaller #0 PREEMPT(full) [ 2521.635998][T26701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2521.636008][T26701] Call Trace: [ 2521.636015][T26701] [ 2521.636022][T26701] dump_stack_lvl+0x100/0x190 [ 2521.636053][T26701] should_fail_ex.cold+0x5/0xa [ 2521.636076][T26701] _copy_from_user+0x2e/0xd0 [ 2521.636102][T26701] ip_mroute_getsockopt+0x3c8/0x540 [ 2521.636125][T26701] ? __pfx_ip_mroute_getsockopt+0x10/0x10 [ 2521.636147][T26701] ? __lock_acquire+0x49f/0x1a40 [ 2521.636180][T26701] do_ip_getsockopt+0x1db/0x2510 [ 2521.636200][T26701] ? __kernel_text_address+0xd/0x30 [ 2521.636221][T26701] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 2521.636245][T26701] ? find_held_lock+0x2b/0x80 [ 2521.636261][T26701] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 2521.636282][T26701] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 2521.636307][T26701] ? avc_has_perm_noaudit+0x145/0x3b0 [ 2521.636331][T26701] ? __lock_acquire+0x49f/0x1a40 [ 2521.636353][T26701] ? __pfx_avc_has_perm+0x10/0x10 [ 2521.636382][T26701] ? find_held_lock+0x2b/0x80 [ 2521.636398][T26701] ? __might_fault+0xc5/0x140 [ 2521.636415][T26701] ? __might_fault+0xc5/0x140 [ 2521.636434][T26701] ip_getsockopt+0xa1/0x1e0 [ 2521.636457][T26701] ? __pfx_ip_getsockopt+0x10/0x10 [ 2521.636481][T26701] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 2521.636511][T26701] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 2521.636543][T26701] raw_getsockopt+0x4d/0x1f0 [ 2521.636565][T26701] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2521.636592][T26701] do_sock_getsockopt+0x50a/0x6e0 [ 2521.636617][T26701] ? __lock_acquire+0x49f/0x1a40 [ 2521.636642][T26701] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2521.636666][T26701] ? rcu_read_lock_any_held+0x6a/0xa0 [ 2521.636689][T26701] ? find_held_lock+0x2b/0x80 [ 2521.636712][T26701] ? __fget_files+0x21f/0x3d0 [ 2521.636735][T26701] __sys_getsockopt+0x148/0x260 [ 2521.636763][T26701] ? __x64_sys_getsockopt+0xbd/0x160 [ 2521.636783][T26701] __x64_sys_getsockopt+0xbd/0x160 [ 2521.636802][T26701] ? do_syscall_64+0x90/0x870 [ 2521.636823][T26701] ? lockdep_hardirqs_on+0x78/0x100 [ 2521.636843][T26701] do_syscall_64+0x115/0x870 [ 2521.636861][T26701] ? clear_bhb_loop+0x40/0x90 [ 2521.636883][T26701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2521.636902][T26701] RIP: 0033:0x7f10f9b9e019 [ 2521.636919][T26701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2521.636936][T26701] RSP: 002b:00007f10faab9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2521.636954][T26701] RAX: ffffffffffffffda RBX: 00007f10f9e25fa0 RCX: 00007f10f9b9e019 [ 2521.636966][T26701] RDX: 00000000000000d0 RSI: 0000000000000000 RDI: 0000000000000003 [ 2521.636976][T26701] RBP: 00007f10faab9090 R08: 0000200000000140 R09: 0000000000000000 [ 2521.636986][T26701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2521.636995][T26701] R13: 00007f10f9e26038 R14: 00007f10f9e25fa0 R15: 00007ffd80182558 [ 2521.637019][T26701] [ 2521.695715][ T30] audit: type=1400 audit(1785475032.127:650): avc: denied { setattr } for pid=26698 comm="syz.2.5539" path="socket:[91624]" dev="sockfs" ino=91624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2521.914727][T26713] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5543'. [ 2521.978874][T26714] Illegal XDP return value 4294967262 on prog (id 408) dev N/A, expect packet loss! [ 2521.985335][T26716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2522.022112][T13484] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2522.078407][ T30] audit: type=1326 audit(1785475032.557:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26710 comm="syz.6.5545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ec319e019 code=0x0 [ 2522.111461][T10909] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2522.210603][ T30] audit: type=1400 audit(1785475032.687:652): avc: denied { ioctl } for pid=26710 comm="syz.6.5545" path="socket:[91644]" dev="sockfs" ino=91644 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2522.263059][T10909] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2522.309954][T10909] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2522.347507][T10909] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2522.365268][T10909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2522.453004][T26711] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2522.488490][T10909] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2522.814079][T26729] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5548'. [ 2522.941471][ T30] audit: type=1400 audit(1785475033.427:653): avc: denied { create } for pid=26709 comm="syz.1.5544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 2523.178338][T14265] usb 2-1: USB disconnect, device number 102 [ 2523.249434][T26742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5552'. [ 2523.286315][ T30] audit: type=1400 audit(1785475033.767:654): avc: denied { create } for pid=26737 comm="syz.5.5551" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2523.286454][T26744] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000006' [ 2523.390858][ T30] audit: type=1400 audit(1785475033.767:655): avc: denied { mounton } for pid=26737 comm="syz.5.5551" path="/206/file0" dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2523.419298][ T30] audit: type=1400 audit(1785475033.907:656): avc: denied { write } for pid=26737 comm="syz.5.5551" name="file0" dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2523.447131][ T30] audit: type=1400 audit(1785475033.907:657): avc: denied { open } for pid=26737 comm="syz.5.5551" path="/206/file0" dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2523.501975][T26746] 9pnet_fd: p9_fd_create_tcp (26746): problem connecting socket to 127.0.0.1 [ 2523.524552][T26744] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 2523.524552][T26744] The task syz.5.5551 (26744) triggered the difference, watch for misbehavior. [ 2524.852781][ T30] audit: type=1400 audit(1785475035.327:658): avc: denied { unlink } for pid=22551 comm="syz-executor" name="file0" dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2524.977256][T26766] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5559'. [ 2525.000190][ T30] audit: type=1400 audit(1785475035.477:659): avc: denied { read } for pid=26767 comm="syz.0.5558" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2525.858669][T26785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5563'. [ 2525.986576][T26786] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5564'. [ 2526.049457][T13484] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2526.151525][T26785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5563'. [ 2527.285151][T26798] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2527.742379][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2527.742394][ T30] audit: type=1400 audit(1785475038.217:662): avc: denied { read } for pid=26800 comm="syz.5.5569" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2528.567053][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.576756][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.127618][T26822] 9pnet_fd: p9_fd_create_tcp (26822): problem binding to privport [ 2529.553427][T26828] netlink: 'syz.0.5578': attribute type 1 has an invalid length. [ 2529.641512][T26829] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5577'. [ 2530.969495][T26852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2531.065356][T26856] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5588'. [ 2531.111671][ T4992] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 2531.119514][T10909] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2531.871720][ T4992] usb 7-1: Using ep0 maxpacket: 16 [ 2531.877255][T10909] usb 2-1: Using ep0 maxpacket: 32 [ 2531.884820][T26867] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5591'. [ 2531.901793][T10909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2531.914654][T10909] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2531.926675][ T4992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2531.992758][T10909] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2532.002874][ T4992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2532.013015][T10909] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2532.026390][ T4992] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2532.040202][T26871] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5593'. [ 2532.051922][ T4992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.064949][T10909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2532.091720][T10909] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2532.103138][ T4992] usb 7-1: config 0 descriptor?? [ 2532.115392][T10909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.159388][T10909] usb 2-1: config 0 descriptor?? [ 2533.379690][T26849] loop2: detected capacity change from 0 to 7 [ 2533.692995][T26849] Dev loop2: unable to read RDB block 7 [ 2533.758969][T26849] loop2: unable to read partition table [ 2533.869652][T26849] loop2: partition table beyond EOD, truncated [ 2533.939045][T10909] usbhid 2-1:0.0: can't add hid device: -71 [ 2534.063893][T26849] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2534.118045][T10909] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2534.486947][T10909] usb 2-1: USB disconnect, device number 103 [ 2534.556015][ T4992] corsair 0003:1B1C:1B02.0021: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 2535.171820][ T4992] corsair 0003:1B1C:1B02.0021: Failed to get K90 initial state (error 0). [ 2535.362981][ T4978] Dev loop2: unable to read RDB block 7 [ 2535.472443][ T4978] loop2: unable to read partition table [ 2535.478730][ T4978] loop2: partition table beyond EOD, truncated [ 2535.487813][ T4992] usb 7-1: USB disconnect, device number 99 [ 2535.797966][T26915] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2536.085495][T26920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2537.907939][ T30] audit: type=1400 audit(1785475048.387:663): avc: denied { write } for pid=26943 comm="syz.1.5611" name="functions" dev="configfs" ino=86247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2537.980106][ T30] audit: type=1400 audit(1785475048.427:664): avc: denied { write } for pid=26943 comm="syz.1.5611" name="c.1" dev="configfs" ino=86256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2538.027635][T26947] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5612'. [ 2538.054053][ T30] audit: type=1400 audit(1785475048.427:665): avc: denied { write } for pid=26943 comm="syz.1.5611" name="c.1" dev="configfs" ino=86256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2539.423262][T26971] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2539.871177][T26974] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2541.253633][T26988] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5624'. [ 2542.213455][T27005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2542.233836][T27005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2542.271669][T14265] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2542.272163][T27005] loop2: detected capacity change from 0 to 7 [ 2542.298096][T27005] Dev loop2: unable to read RDB block 7 [ 2542.304057][T27005] loop2: unable to read partition table [ 2542.319142][T27005] loop2: partition table beyond EOD, truncated [ 2542.583366][T27005] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2542.651617][T14265] usb 6-1: Using ep0 maxpacket: 16 [ 2542.683887][T14265] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2542.705185][T27012] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5632'. [ 2542.719944][T14265] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2542.755496][T14265] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2542.779949][T14265] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.806603][T14265] usb 6-1: config 0 descriptor?? [ 2542.826554][T27016] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2542.951578][T11529] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 2542.956196][T27020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5636'. [ 2543.003634][T27024] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5637'. [ 2543.124109][T11529] usb 7-1: Using ep0 maxpacket: 16 [ 2543.137806][T11529] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2543.149616][T11529] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2543.160933][T11529] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2543.173676][T11529] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2543.335652][T27001] loop2: detected capacity change from 0 to 7 [ 2543.352376][T27001] Dev loop2: unable to read RDB block 7 [ 2543.358742][T11529] usb 7-1: config 0 descriptor?? [ 2543.363468][T27001] loop2: unable to read partition table [ 2543.370181][T27001] loop2: partition table beyond EOD, truncated [ 2543.380463][T27001] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2543.914908][T14265] usbhid 6-1:0.0: can't add hid device: -71 [ 2543.923628][T14265] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2544.091033][T27014] loop2: detected capacity change from 0 to 7 [ 2544.103927][T14265] usb 6-1: USB disconnect, device number 104 [ 2544.123176][T27014] Dev loop2: unable to read RDB block 7 [ 2544.138483][T27014] loop2: unable to read partition table [ 2544.164189][T27014] loop2: partition table beyond EOD, truncated [ 2544.171111][ T30] audit: type=1400 audit(1785475054.647:666): avc: denied { create } for pid=27036 comm="syz.1.5642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2544.174394][T11529] corsair 0003:1B1C:1B02.0022: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 2544.218958][T27014] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2544.459624][T11529] corsair 0003:1B1C:1B02.0022: Failed to get K90 initial state (error 0). [ 2545.626976][T11529] usb 7-1: USB disconnect, device number 100 [ 2545.673163][T27053] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5645'. [ 2545.828245][T27058] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5647'. [ 2546.144977][ T30] audit: type=1400 audit(1785475056.627:667): avc: denied { accept } for pid=27068 comm="syz.0.5651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2546.165981][ T30] audit: type=1400 audit(1785475056.627:668): avc: denied { ioctl } for pid=27068 comm="syz.0.5651" path="socket:[92839]" dev="sockfs" ino=92839 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2546.233813][T27069] binder: 27068:27069 ioctl c018620b 200000000140 returned -14 [ 2546.245024][ T30] audit: type=1400 audit(1785475056.727:669): avc: denied { setopt } for pid=27068 comm="syz.0.5651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2546.378005][T27073] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5653'. [ 2547.161577][T27084] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5656'. [ 2547.291620][T13484] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2547.786945][T27090] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5657'. [ 2547.804260][T27086] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2548.113710][T27104] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5663'. [ 2548.123827][T27101] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5661'. [ 2548.124486][T27105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2548.146331][T13484] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2548.158375][T27105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2548.208599][T27105] loop2: detected capacity change from 0 to 7 [ 2548.226710][T27105] Dev loop2: unable to read RDB block 7 [ 2548.240272][T27111] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2548.246080][T27105] loop2: unable to read partition table [ 2548.347908][T27105] loop2: partition table beyond EOD, truncated [ 2548.362902][T27105] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2549.769104][T27129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5671'. [ 2550.606221][ T30] audit: type=1400 audit(1785475061.077:670): avc: denied { firmware_load } for pid=27133 comm="syz.5.5673" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 2550.720129][T27150] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5677'. [ 2551.525640][T27167] netlink: 'syz.6.5684': attribute type 1 has an invalid length. [ 2552.472740][T27181] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 2552.552764][T13299] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2552.732111][T13299] usb 6-1: Using ep0 maxpacket: 16 [ 2552.732135][T13484] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2552.797510][T13299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2552.932658][T13299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2552.981004][T13299] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2553.022802][T13299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2553.059811][T13299] usb 6-1: config 0 descriptor?? [ 2553.135921][T27200] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5697'. [ 2553.890187][T27174] loop2: detected capacity change from 0 to 7 [ 2553.904489][T27174] Dev loop2: unable to read RDB block 7 [ 2553.925217][T27174] loop2: unable to read partition table [ 2553.944126][T27174] loop2: partition table beyond EOD, truncated [ 2553.968749][T27174] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2553.982481][T13299] corsair 0003:1B1C:1B02.0023: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 2555.022622][T13299] corsair 0003:1B1C:1B02.0023: Failed to get K90 initial state (error 0). [ 2555.284455][T13299] usb 6-1: USB disconnect, device number 105 [ 2555.353816][T27217] misc userio: The device must be registered before sending interrupts [ 2555.468092][T27210] fido_id[27210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2556.466773][T27235] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5709'. [ 2556.477875][T13484] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2557.856181][T11529] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 2558.113065][T11529] usb 6-1: Using ep0 maxpacket: 16 [ 2558.245298][T11529] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2558.262339][T11529] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2558.273286][T11529] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2558.283477][T11529] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.566243][T11529] usb 6-1: config 0 descriptor?? [ 2558.657998][T27264] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2559.005290][T27248] loop2: detected capacity change from 0 to 7 [ 2559.050536][T27248] Dev loop2: unable to read RDB block 7 [ 2559.067976][T27248] loop2: unable to read partition table [ 2559.081522][T27248] loop2: partition table beyond EOD, truncated [ 2559.527658][T27248] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2559.556923][T11529] usbhid 6-1:0.0: can't add hid device: -71 [ 2559.572581][T11529] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2559.586714][T27279] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5724'. [ 2559.610341][T13484] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2559.620246][T11529] usb 6-1: USB disconnect, device number 106 [ 2559.679728][T27282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5723'. [ 2559.822974][T27282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5723'. [ 2559.833318][T27282] hsr_slave_0: left promiscuous mode [ 2559.840095][T27282] hsr_slave_1: left promiscuous mode [ 2559.849297][T27287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5726'. [ 2559.889512][T27287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5726'. [ 2559.900702][T27287] hsr_slave_0: left promiscuous mode [ 2559.907730][T27287] hsr_slave_1: left promiscuous mode [ 2560.261454][ T4992] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 2560.451318][ T4992] usb 7-1: Using ep0 maxpacket: 32 [ 2560.464349][ T4992] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 2560.472849][ T4992] usb 7-1: config 2 has no interface number 0 [ 2560.479303][ T4992] usb 7-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 2560.490348][ T4992] usb 7-1: config 2 interface 88 has no altsetting 0 [ 2560.518541][ T4992] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 2560.528599][ T4992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 2560.538861][ T4992] usb 7-1: Product: syz [ 2560.550438][ T4992] usb 7-1: Manufacturer: syz [ 2560.564102][ T4992] usb 7-1: SerialNumber: syz [ 2560.586211][T27294] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2561.886281][T27294] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2561.944002][T13484] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2563.646828][ T4992] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2563.693728][ T4992] asix 7-1:2.88: probe with driver asix failed with error -71 [ 2563.720237][ T4992] usb 7-1: USB disconnect, device number 101 [ 2565.156504][T27354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5745'. [ 2565.258697][T27358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5745'. [ 2565.401314][T11578] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 2565.561607][T11578] usb 7-1: Using ep0 maxpacket: 16 [ 2565.573699][T11578] usb 7-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 2565.592343][T11578] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2565.616212][T11578] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2565.629020][T11578] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2565.644682][T11578] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2565.671092][T11578] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2565.710998][T11578] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2565.782425][T11578] usb 7-1: Manufacturer: syz [ 2565.798911][T27374] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5752'. [ 2565.894484][T13484] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2565.920138][T11578] usb 7-1: config 0 descriptor?? [ 2566.251957][T27382] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2566.473066][T11578] rc_core: IR keymap rc-hauppauge not found [ 2566.473088][T11578] Registered IR keymap rc-empty [ 2566.473190][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2566.491897][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2566.513086][T11578] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 2566.516876][T11578] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input81 [ 2566.529613][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2566.541387][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2566.568556][T27387] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5757'. [ 2566.572407][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2566.685913][T27387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5757'. [ 2566.692561][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2566.702668][T27387] hsr_slave_0: left promiscuous mode [ 2566.714592][T27387] hsr_slave_1: left promiscuous mode [ 2566.722862][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2566.737501][T27391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2566.771364][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2566.779136][T27391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2566.811654][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2566.831366][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2566.851714][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2566.871924][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2566.905939][T11578] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2566.917361][T11578] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2566.939882][T11578] usb 7-1: USB disconnect, device number 102 [ 2569.421373][T11578] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 2569.762734][T11578] usb 7-1: Using ep0 maxpacket: 16 [ 2569.819226][T11578] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2569.880293][T11578] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2569.930688][T11578] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2570.013574][T11578] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2570.050212][T11578] usb 7-1: config 0 descriptor?? [ 2570.063977][T11529] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2570.161428][T13299] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2570.231321][T11529] usb 6-1: Using ep0 maxpacket: 16 [ 2570.238094][T11529] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2570.249268][T11529] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2570.259104][T11529] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2570.342034][T11529] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2570.372883][T11529] usb 6-1: config 0 descriptor?? [ 2570.389673][T13299] usb 2-1: Using ep0 maxpacket: 16 [ 2570.405710][T13299] usb 2-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 2570.423320][T13299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2570.435610][T27449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2570.445192][T13299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2570.457061][T27449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2570.467882][T13299] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2570.478836][T13299] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2570.493253][T13299] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2570.507928][T13299] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2570.516632][T27449] loop2: detected capacity change from 0 to 7 [ 2570.528267][T27449] Dev loop2: unable to read RDB block 7 [ 2570.534003][T27449] loop2: unable to read partition table [ 2570.539900][T27449] loop2: partition table beyond EOD, truncated [ 2570.546836][T13299] usb 2-1: Manufacturer: syz [ 2570.546953][T27449] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2570.572209][T13484] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2570.581835][T13299] usb 2-1: config 0 descriptor?? [ 2570.643697][T11578] corsair 0003:1B1C:1B02.0024: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 2570.795742][T11578] corsair 0003:1B1C:1B02.0024: Failed to get K90 initial state (error -71). [ 2570.809317][T11578] usb 7-1: USB disconnect, device number 103 [ 2570.818363][T27436] loop2: detected capacity change from 0 to 7 [ 2570.844967][T27436] Dev loop2: unable to read RDB block 7 [ 2570.859984][T27436] loop2: unable to read partition table [ 2570.869455][T27436] loop2: partition table beyond EOD, truncated [ 2570.876001][T27436] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2570.891101][T11529] corsair 0003:1B1C:1B02.0025: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 2570.901299][T13299] rc_core: IR keymap rc-hauppauge not found [ 2570.919929][T13299] Registered IR keymap rc-empty [ 2570.931546][T13299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2570.973295][T13299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2571.002550][T13299] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2571.018867][T13299] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input82 [ 2571.040958][T13299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2571.061447][T13299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2571.081392][T13299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2571.091662][T11529] corsair 0003:1B1C:1B02.0025: Failed to get K90 initial state (error 0). [ 2571.123049][T13299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2571.154121][T13299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2571.181377][T13299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2571.201354][T13299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2571.221740][T13299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2571.241447][T13299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2571.342729][T11529] usb 6-1: USB disconnect, device number 107 [ 2571.358869][T13299] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2571.384372][T13299] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2571.394260][T13299] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2571.432461][T13299] usb 2-1: USB disconnect, device number 104 [ 2572.591817][T27482] netlink: 'syz.2.5790': attribute type 1 has an invalid length. [ 2573.109575][T27494] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5794'. [ 2573.578299][T27503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5797'. [ 2573.699126][T27508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5797'. [ 2574.489901][T27529] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5805'. [ 2574.829017][T27544] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5811'. [ 2574.881349][T13299] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 2575.031344][T13299] usb 6-1: Using ep0 maxpacket: 32 [ 2575.049045][T13299] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 2575.059379][T13299] usb 6-1: config 2 has no interface number 0 [ 2575.228475][T13299] usb 6-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 2575.338543][T13299] usb 6-1: config 2 interface 88 has no altsetting 0 [ 2575.356939][T13299] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 2575.380453][T13299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 2575.406253][T13299] usb 6-1: Product: syz [ 2575.413540][T13299] usb 6-1: Manufacturer: syz [ 2575.420495][T13299] usb 6-1: SerialNumber: syz [ 2575.436877][T27537] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2575.671029][T27537] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2576.204497][T27568] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5818'. [ 2576.501966][T13299] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2576.524693][T13299] asix 6-1:2.88: probe with driver asix failed with error -71 [ 2576.571057][T13299] usb 6-1: USB disconnect, device number 108 [ 2576.849591][ T30] audit: type=1400 audit(1785475087.287:671): avc: denied { bind } for pid=27560 comm="syz.6.5817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2576.909528][T27570] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5819'. [ 2577.401165][T27578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5826'. [ 2577.495198][T27585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5826'. [ 2578.033138][T27597] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2578.382631][T27600] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5829'. [ 2578.699779][T27609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2578.700520][T27610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2578.709385][T27609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2578.871265][T24512] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2579.041318][T24512] usb 2-1: Using ep0 maxpacket: 16 [ 2579.047804][T24512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2579.058837][T24512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2579.068631][T24512] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2579.078222][T24512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2579.087806][T24512] usb 2-1: config 0 descriptor?? [ 2579.226940][T13484] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2579.500350][T27625] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2579.725804][T27604] loop2: detected capacity change from 0 to 7 [ 2579.728894][T27604] Dev loop2: unable to read RDB block 7 [ 2579.728933][T27604] loop2: unable to read partition table [ 2579.729116][T27604] loop2: partition table beyond EOD, truncated [ 2579.729135][T27604] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2579.737474][T24512] usbhid 2-1:0.0: can't add hid device: -71 [ 2579.737573][T24512] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2579.741343][T24512] usb 2-1: USB disconnect, device number 105 [ 2579.964595][T27631] Cannot find del_set index 0 as target [ 2580.293303][T27635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5842'. [ 2580.518146][T27641] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2580.756623][ T30] audit: type=1400 audit(1785475091.237:672): avc: denied { write } for pid=27645 comm="syz.6.5845" name="c.1" dev="configfs" ino=86256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2580.811290][ T30] audit: type=1400 audit(1785475091.237:673): avc: denied { write } for pid=27645 comm="syz.6.5845" name="c.1" dev="configfs" ino=86256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2581.510518][T13484] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2581.571341][T21141] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2581.594376][T27661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2581.734141][T27664] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2582.006442][T21141] usb 2-1: Using ep0 maxpacket: 32 [ 2582.032165][T21141] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 2582.045414][T21141] usb 2-1: config 2 has no interface number 0 [ 2582.052435][T21141] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 2582.062721][T21141] usb 2-1: config 2 interface 88 has no altsetting 0 [ 2582.071837][T21141] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 2582.080935][T21141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 2582.089279][T21141] usb 2-1: Product: syz [ 2582.095332][T21141] usb 2-1: Manufacturer: syz [ 2582.100026][T21141] usb 2-1: SerialNumber: syz [ 2582.541541][T27653] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2582.691488][T27672] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 2582.710855][T27674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5855'. [ 2582.767273][T27653] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2582.829464][ T30] audit: type=1400 audit(1785475093.307:674): avc: denied { write } for pid=27679 comm="syz.6.5856" name="c.1" dev="configfs" ino=86256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2582.856028][ T30] audit: type=1400 audit(1785475093.307:675): avc: denied { write } for pid=27679 comm="syz.6.5856" name="c.1" dev="configfs" ino=86256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2582.868699][T27678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5855'. [ 2583.286724][T27689] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2583.441596][T27696] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2583.975555][T27706] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2583.990918][T21141] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2584.116329][T21141] asix 2-1:2.88: probe with driver asix failed with error -71 [ 2584.123935][T27705] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2584.130026][T21141] usb 2-1: USB disconnect, device number 106 [ 2584.279921][T27714] misc userio: Invalid payload size [ 2584.763061][T25802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2584.772409][T25802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2584.780301][T25802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2584.806997][T25802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2584.818253][T25802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2584.989122][T27726] SET target dimension over the limit! [ 2585.091571][T27735] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5871'. [ 2585.388734][T27744] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2585.741622][T27749] netlink: 'syz.6.5874': attribute type 1 has an invalid length. [ 2585.888828][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2585.931823][T21141] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2586.032445][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2586.111284][T21141] usb 6-1: Using ep0 maxpacket: 16 [ 2586.120113][T21141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2586.144250][T21141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2586.173860][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2586.186035][T21141] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2586.201316][T11578] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 2586.213111][T21141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2586.243774][T21141] usb 6-1: config 0 descriptor?? [ 2586.245488][ T4992] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2586.292838][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2586.361372][T11578] usb 7-1: Using ep0 maxpacket: 16 [ 2586.378701][T11578] usb 7-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 2586.397219][T11578] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2586.412788][T27718] bridge0: port 1(bridge_slave_0) entered blocking state [ 2586.420191][T11578] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2586.430013][T27718] bridge0: port 1(bridge_slave_0) entered disabled state [ 2586.437188][ T4992] usb 2-1: Using ep0 maxpacket: 32 [ 2586.442615][T27718] bridge_slave_0: entered allmulticast mode [ 2586.448741][T11578] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2586.463163][T27718] bridge_slave_0: entered promiscuous mode [ 2586.463215][ T4992] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 2586.477601][T11578] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2586.490742][ T4992] usb 2-1: config 2 has no interface number 0 [ 2586.497135][ T4992] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 2586.509081][T27718] bridge0: port 2(bridge_slave_1) entered blocking state [ 2586.509122][ T4992] usb 2-1: config 2 interface 88 has no altsetting 0 [ 2586.523587][T11578] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2586.525592][T27718] bridge0: port 2(bridge_slave_1) entered disabled state [ 2586.532709][T11578] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2586.532733][T11578] usb 7-1: Manufacturer: syz [ 2586.534677][T11578] usb 7-1: config 0 descriptor?? [ 2586.540710][T27718] bridge_slave_1: entered allmulticast mode [ 2586.551303][ T4992] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 2586.555755][T27718] bridge_slave_1: entered promiscuous mode [ 2586.559859][ T4992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 2586.588933][ T4992] usb 2-1: Product: syz [ 2586.594088][ T4992] usb 2-1: Manufacturer: syz [ 2586.600942][ T4992] usb 2-1: SerialNumber: syz [ 2586.618121][T27760] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2586.660162][T27718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2586.673838][T27718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2586.748311][T21141] corsair 0003:1B1C:1B02.0026: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 2586.841825][ T57] bridge_slave_1: left allmulticast mode [ 2586.850959][T27760] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2586.857732][ T57] bridge_slave_1: left promiscuous mode [ 2586.871332][T13484] Bluetooth: hci0: command tx timeout [ 2586.876240][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 2586.900684][T21141] corsair 0003:1B1C:1B02.0026: Failed to get K90 initial state (error -71). [ 2586.921501][T11578] rc_core: IR keymap rc-hauppauge not found [ 2586.927452][T11578] Registered IR keymap rc-empty [ 2586.933797][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2586.942452][T21141] usb 6-1: USB disconnect, device number 109 [ 2586.955563][ T57] bridge_slave_0: left allmulticast mode [ 2586.967222][ T57] bridge_slave_0: left promiscuous mode [ 2586.974832][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2586.982202][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 2587.012994][T11578] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 2587.046244][T11578] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input87 [ 2587.092147][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2587.109421][ T30] audit: type=1400 audit(1785475097.587:676): avc: denied { write } for pid=27774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2587.141557][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2587.174644][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2587.221619][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2587.232145][ T30] audit: type=1400 audit(1785475097.717:677): avc: denied { write } for pid=27790 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2587.262843][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2587.273088][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2587.286516][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2587.297273][ T57] bond0 (unregistering): Released all slaves [ 2587.304818][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2587.329237][T27718] team0: Port device team_slave_0 added [ 2587.338684][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2587.354508][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2587.364984][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2587.382193][T27718] team0: Port device team_slave_1 added [ 2587.432850][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2587.503200][T11578] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 2587.553526][T11578] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2587.609425][T27718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2587.629416][T11578] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2587.656613][T27718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2587.697053][T11578] usb 7-1: USB disconnect, device number 104 [ 2587.746774][T27718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2587.852776][T27810] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2587.910032][T27718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2587.910132][T27718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2587.910200][T27718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2588.351151][T27718] hsr_slave_0: entered promiscuous mode [ 2588.366891][T27718] hsr_slave_1: entered promiscuous mode [ 2588.376111][T27815] netlink: 'syz.5.5886': attribute type 1 has an invalid length. [ 2588.462136][ T30] audit: type=1400 audit(1785475098.937:678): avc: denied { write } for pid=27795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2588.753051][T27831] Cannot find del_set index 0 as target [ 2588.898713][ T30] audit: type=1400 audit(1785475099.377:679): avc: denied { write } for pid=27828 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2588.953073][T13484] Bluetooth: hci0: command tx timeout [ 2589.059283][ T57] team0 (unregistering): Port device team_slave_1 removed [ 2589.091529][ T57] team0 (unregistering): Port device team_slave_0 removed [ 2589.299117][ T4992] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2589.299501][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2589.310280][ T4992] asix 2-1:2.88: probe with driver asix failed with error -71 [ 2589.439311][ T4992] usb 2-1: USB disconnect, device number 107 [ 2589.514565][T27843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2589.547353][T27843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2589.997299][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.006509][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.161597][T27865] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2590.266760][T27866] netlink: 'syz.1.5898': attribute type 1 has an invalid length. [ 2590.373241][ T30] audit: type=1400 audit(1785475100.847:680): avc: denied { write } for pid=27844 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2590.473711][T27870] FAULT_INJECTION: forcing a failure. [ 2590.473711][T27870] name failslab, interval 1, probability 0, space 0, times 0 [ 2590.537914][ T30] audit: type=1400 audit(1785475101.017:681): avc: denied { write } for pid=27868 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2590.568845][T27870] CPU: 0 UID: 0 PID: 27870 Comm: syz.1.5900 Not tainted syzkaller #0 PREEMPT(full) [ 2590.568871][T27870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2590.568881][T27870] Call Trace: [ 2590.568887][T27870] [ 2590.568893][T27870] dump_stack_lvl+0x100/0x190 [ 2590.568918][T27870] should_fail_ex.cold+0x5/0xa [ 2590.568940][T27870] should_failslab+0xc2/0x120 [ 2590.568962][T27870] __kmalloc_cache_noprof+0x91/0x6c0 [ 2590.568988][T27870] ? __lock_acquire+0x49f/0x1a40 [ 2590.569011][T27870] ? ip6_setup_cork+0x9dd/0x14c0 [ 2590.569034][T27870] ip6_setup_cork+0x9dd/0x14c0 [ 2590.569058][T27870] ip6_append_data+0x1aa/0x410 [ 2590.569075][T27870] ? __pfx_raw6_getfrag+0x10/0x10 [ 2590.569103][T27870] rawv6_sendmsg+0x169c/0x4420 [ 2590.569120][T27870] ? find_held_lock+0x2b/0x80 [ 2590.569143][T27870] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 2590.569166][T27870] ? __lock_acquire+0x49f/0x1a40 [ 2590.569194][T27870] ? __pfx_sock_has_perm+0x10/0x10 [ 2590.569230][T27870] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 2590.569248][T27870] ? inet_sendmsg+0x11c/0x140 [ 2590.569267][T27870] inet_sendmsg+0x11c/0x140 [ 2590.569287][T27870] ____sys_sendmsg+0x9c9/0xbe0 [ 2590.569310][T27870] ? __pfx_inet_sendmsg+0x10/0x10 [ 2590.569332][T27870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2590.569360][T27870] ? __pfx__kstrtoull+0x10/0x10 [ 2590.569381][T27870] ___sys_sendmsg+0x190/0x1e0 [ 2590.569408][T27870] ? __pfx____sys_sendmsg+0x10/0x10 [ 2590.569444][T27870] ? find_held_lock+0x2b/0x80 [ 2590.569475][T27870] __sys_sendmmsg+0x20c/0x440 [ 2590.569498][T27870] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2590.569517][T27870] ? ksys_write+0x190/0x250 [ 2590.569561][T27870] ? fput+0x79/0x100 [ 2590.569579][T27870] ? ksys_write+0x1ac/0x250 [ 2590.569602][T27870] ? __pfx_ksys_write+0x10/0x10 [ 2590.569631][T27870] __x64_sys_sendmmsg+0x9c/0x100 [ 2590.569650][T27870] ? lockdep_hardirqs_on+0x78/0x100 [ 2590.569669][T27870] do_syscall_64+0x115/0x870 [ 2590.569687][T27870] ? clear_bhb_loop+0x40/0x90 [ 2590.569719][T27870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2590.569736][T27870] RIP: 0033:0x7feeb439e019 [ 2590.569750][T27870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2590.569765][T27870] RSP: 002b:00007feeb5331028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2590.569782][T27870] RAX: ffffffffffffffda RBX: 00007feeb4625fa0 RCX: 00007feeb439e019 [ 2590.569793][T27870] RDX: 0000000000000001 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 2590.569802][T27870] RBP: 00007feeb5331090 R08: 0000000000000000 R09: 0000000000000000 [ 2590.569812][T27870] R10: 0000000000040880 R11: 0000000000000246 R12: 0000000000000001 [ 2590.569821][T27870] R13: 00007feeb4626038 R14: 00007feeb4625fa0 R15: 00007ffd8cf3c328 [ 2590.569844][T27870] [ 2590.985245][T27877] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5899'. [ 2591.006163][T13484] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 2591.036884][T13484] Bluetooth: hci0: command tx timeout [ 2591.506048][T13484] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2591.631529][T13299] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2591.831311][T13299] usb 6-1: Using ep0 maxpacket: 16 [ 2591.843972][T13299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2591.895595][T13299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2591.928739][T13299] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2591.948296][T13299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2591.972997][T13299] usb 6-1: config 0 descriptor?? [ 2592.081343][T21141] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 2592.096893][T27718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2592.109866][ T30] audit: type=1400 audit(1785475102.587:682): avc: denied { append } for pid=27881 comm="syz.0.5903" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2592.114343][T27718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2592.142765][T24512] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2592.148761][T27718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2592.170689][T27718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2592.194800][T27718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2592.216751][T27718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2592.241492][T21141] usb 7-1: Using ep0 maxpacket: 32 [ 2592.251133][T21141] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 2592.269630][T21141] usb 7-1: config 2 has no interface number 0 [ 2592.287015][T21141] usb 7-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 2592.288272][T27718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2592.304904][T24512] usb 2-1: Using ep0 maxpacket: 16 [ 2592.323245][T24512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2592.341972][T21141] usb 7-1: config 2 interface 88 has no altsetting 0 [ 2592.346098][T27718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2592.349873][T24512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2592.374272][T24512] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2592.384805][T21141] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 2592.395574][T21141] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 2592.404466][T24512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.413069][T13299] corsair 0003:1B1C:1B02.0027: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 2592.413715][T21141] usb 7-1: Product: syz [ 2592.430438][ T30] audit: type=1400 audit(1785475102.897:683): avc: denied { write } for pid=27896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2592.459020][T21141] usb 7-1: Manufacturer: syz [ 2592.466049][T21141] usb 7-1: SerialNumber: syz [ 2592.489491][T24512] usb 2-1: config 0 descriptor?? [ 2592.514440][T27893] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2592.610514][T13299] corsair 0003:1B1C:1B02.0027: Failed to get K90 initial state (error -71). [ 2592.627458][T27718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2592.642686][T13299] usb 6-1: USB disconnect, device number 110 [ 2592.673858][ T30] audit: type=1400 audit(1785475103.137:684): avc: denied { write } for pid=27915 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2592.706298][T27718] 8021q: adding VLAN 0 to HW filter on device team0 [ 2592.739689][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 2592.746926][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2592.759986][T27893] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2592.787183][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 2592.794385][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2592.938363][T24512] corsair 0003:1B1C:1B02.0028: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 2593.113611][T13484] Bluetooth: hci0: command tx timeout [ 2593.135361][T24512] corsair 0003:1B1C:1B02.0028: Failed to get K90 initial state (error -71). [ 2593.165961][T24512] usb 2-1: USB disconnect, device number 108 [ 2593.398201][ T30] audit: type=1400 audit(1785475103.877:685): avc: denied { write } for pid=27917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2593.481290][ T4992] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2593.582404][ T30] audit: type=1400 audit(1785475104.067:686): avc: denied { write } for pid=27943 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2593.641327][ T4992] usb 6-1: Using ep0 maxpacket: 16 [ 2593.655638][ T4992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2593.670749][ T4992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2593.684444][ T4992] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2593.693939][ T4992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2593.714430][ T4992] usb 6-1: config 0 descriptor?? [ 2593.884014][T27718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2593.960080][ T30] audit: type=1400 audit(1785475104.437:687): avc: denied { write } for pid=27951 comm="syz.1.5912" name="c.1" dev="configfs" ino=86256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2594.037286][ T30] audit: type=1400 audit(1785475104.437:688): avc: denied { write } for pid=27951 comm="syz.1.5912" name="c.1" dev="configfs" ino=86256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2594.041631][T27718] veth0_vlan: entered promiscuous mode [ 2594.100917][T21141] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2594.118759][T27718] veth1_vlan: entered promiscuous mode [ 2594.125200][T21141] asix 7-1:2.88: probe with driver asix failed with error -71 [ 2594.125815][T27960] SET target dimension over the limit! [ 2594.155037][T27959] FAULT_INJECTION: forcing a failure. [ 2594.155037][T27959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2594.157056][T21141] usb 7-1: USB disconnect, device number 105 [ 2594.185482][T27959] CPU: 0 UID: 0 PID: 27959 Comm: syz.1.5913 Not tainted syzkaller #0 PREEMPT(full) [ 2594.185509][T27959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2594.185520][T27959] Call Trace: [ 2594.185526][T27959] [ 2594.185533][T27959] dump_stack_lvl+0x100/0x190 [ 2594.185561][T27959] should_fail_ex.cold+0x5/0xa [ 2594.185585][T27959] _copy_to_user+0x32/0xd0 [ 2594.185612][T27959] simple_read_from_buffer+0xcb/0x170 [ 2594.185635][T27959] proc_fail_nth_read+0x1af/0x230 [ 2594.185663][T27959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2594.185692][T27959] ? rw_verify_area+0xce/0x6d0 [ 2594.185723][T27959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2594.185770][T27959] vfs_read+0x1e4/0xb40 [ 2594.185798][T27959] ? __pfx_vfs_read+0x10/0x10 [ 2594.185822][T27959] ? __fget_files+0x215/0x3d0 [ 2594.185846][T27959] ? __fget_files+0x21f/0x3d0 [ 2594.185876][T27959] ksys_read+0x12a/0x250 [ 2594.185899][T27959] ? __pfx_ksys_read+0x10/0x10 [ 2594.185932][T27959] do_syscall_64+0x115/0x870 [ 2594.185952][T27959] ? clear_bhb_loop+0x40/0x90 [ 2594.185971][T27959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2594.185987][T27959] RIP: 0033:0x7feeb435e84e [ 2594.186004][T27959] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2594.186021][T27959] RSP: 002b:00007feeb5330fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2594.186049][T27959] RAX: ffffffffffffffda RBX: 00007feeb53316c0 RCX: 00007feeb435e84e [ 2594.186061][T27959] RDX: 000000000000000f RSI: 00007feeb53310a0 RDI: 0000000000000004 [ 2594.186071][T27959] RBP: 00007feeb5331090 R08: 0000000000000000 R09: 0000000000000000 [ 2594.186082][T27959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2594.186092][T27959] R13: 00007feeb4626038 R14: 00007feeb4625fa0 R15: 00007ffd8cf3c328 [ 2594.186115][T27959] [ 2594.385486][T27718] veth0_macvtap: entered promiscuous mode [ 2594.410178][T27718] veth1_macvtap: entered promiscuous mode [ 2594.500497][T27718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2594.517140][ T4992] corsair 0003:1B1C:1B02.0029: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 2594.556080][T27718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2594.633958][ T1164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2594.660527][ T4992] corsair 0003:1B1C:1B02.0029: Failed to get K90 initial state (error -71). [ 2594.672746][ T1164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2594.704692][ T4992] usb 6-1: USB disconnect, device number 111 [ 2594.717474][ T30] audit: type=1400 audit(1785475105.197:689): avc: denied { write } for pid=27947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2594.782900][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2594.794375][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2594.805449][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2594.810830][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2594.875380][ T30] audit: type=1400 audit(1785475105.357:690): avc: denied { write } for pid=27971 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2594.940845][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2594.992754][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2595.039815][T27977] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5915'. [ 2595.104462][T13484] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2595.441579][T13484] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2595.958562][T27995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2596.322120][ T30] audit: type=1400 audit(1785475106.797:691): avc: denied { write } for pid=27983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2596.364684][T28013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2596.376190][T28013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2596.386503][T28012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5923'. [ 2596.410610][T28012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5923'. [ 2596.464848][T28017] SET target dimension over the limit! [ 2596.509471][ T30] audit: type=1400 audit(1785475106.987:692): avc: denied { write } for pid=28016 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2596.822667][ T30] audit: type=1400 audit(1785475107.307:693): avc: denied { ioctl } for pid=28024 comm="syz.5.5928" path="socket:[96749]" dev="sockfs" ino=96749 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2596.902670][ T30] audit: type=1400 audit(1785475107.337:694): avc: denied { getopt } for pid=28024 comm="syz.5.5928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2596.949089][ T30] audit: type=1400 audit(1785475107.357:695): avc: denied { connect } for pid=28024 comm="syz.5.5928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2597.121784][T13484] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2597.251650][T21141] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2597.709377][T21141] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2597.754857][T28037] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5933'. [ 2597.783625][T21141] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2597.823437][T21141] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2597.855150][T21141] usb 3-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 2597.873104][T13484] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2597.879789][T21141] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2597.893245][T21141] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2597.909681][T28042] netlink: 240 bytes leftover after parsing attributes in process `syz.5.5936'. [ 2597.924869][T21141] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2597.935699][T21141] usb 3-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 2597.951588][T21141] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2597.961028][T21141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2598.005188][T28045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2598.015669][T21141] usb 3-1: Product: syz [ 2598.019864][T21141] usb 3-1: Manufacturer: syz [ 2598.032466][T21141] usb 3-1: SerialNumber: syz [ 2598.049223][T21141] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 2598.060608][T21141] ti_usb_3410_5052 3-1:2.0: missing endpoints [ 2598.239454][T16984] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2598.268793][ T4992] usb 3-1: USB disconnect, device number 103 [ 2598.459641][T16984] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2598.522709][T25802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2598.532004][T25802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2598.544089][T25802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2598.556702][T25802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2598.565640][T25802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2598.625850][T16984] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2598.738254][T16984] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2598.922110][ T4992] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 2599.072114][ T4992] usb 7-1: Using ep0 maxpacket: 32 [ 2599.143025][ T4992] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 2599.185632][ T4992] usb 7-1: config 2 has no interface number 0 [ 2599.207051][T28076] Cannot find del_set index 0 as target [ 2599.235202][ T4992] usb 7-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 2599.249689][ T4992] usb 7-1: config 2 interface 88 has no altsetting 0 [ 2599.260722][ T4992] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 2599.275202][ T4992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 2599.283323][ T4992] usb 7-1: Product: syz [ 2599.287574][ T4992] usb 7-1: Manufacturer: syz [ 2599.292283][ T4992] usb 7-1: SerialNumber: syz [ 2599.313595][T28060] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2599.466084][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2599.466118][ T30] audit: type=1400 audit(1785475109.947:697): avc: denied { execute } for pid=28078 comm="syz.0.5946" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2599.514057][T16984] bridge_slave_1: left allmulticast mode [ 2599.546423][T16984] bridge_slave_1: left promiscuous mode [ 2599.586665][T16984] bridge0: port 2(bridge_slave_1) entered disabled state [ 2599.586731][T28060] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2599.632881][T16984] bridge_slave_0: left allmulticast mode [ 2599.658749][T16984] bridge_slave_0: left promiscuous mode [ 2599.687497][T16984] bridge0: port 1(bridge_slave_0) entered disabled state [ 2599.870727][ T30] audit: type=1400 audit(1785475110.347:698): avc: denied { write } for pid=28079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2600.121676][T28083] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4eaf7 [ 2600.124042][T28091] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880262f4960 pfn:0x262f4 [ 2600.130820][T28087] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4eaf6 [ 2600.142663][T28092] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888075e40e10 pfn:0x75e40 [ 2600.151401][T28088] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4eaf5 [ 2600.195944][T28083] memcg:ffff888075a8c200 [ 2600.231053][T28091] memcg:ffff888075a8c200 [ 2600.255823][T28083] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 2600.273158][T28092] memcg:ffff888075a8c200 [ 2600.285095][T28091] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 2600.304935][T28087] memcg:ffff888075a8c200 [ 2600.309897][T28092] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 2600.311876][T28083] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 2600.328860][T28088] memcg:ffff888075a8c200 [ 2600.336404][T28091] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 2600.337303][T28087] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 2600.349085][T28092] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 2600.356823][T28088] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 2600.410087][T28091] raw: ffff8880262f4960 0000000000000000 00000001ffffffff ffff888075a8c200 [ 2600.427100][ T30] audit: type=1400 audit(1785475110.877:699): avc: denied { write } for pid=28099 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2600.457075][T28083] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff888075a8c200 [ 2600.469602][T28088] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 2600.478812][T28087] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 2600.491039][T28083] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 2600.511879][T28088] raw: ffffffffffffffff 0000000000000000 00000001ffffffff ffff888075a8c200 [ 2600.520613][T28087] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff888075a8c200 [ 2600.529592][T28083] page_owner tracks the page as allocated [ 2600.569872][T28088] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 2600.584185][T28092] raw: ffff888075e40e10 0000000000000000 00000001ffffffff ffff888075a8c200 [ 2600.585291][T28087] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 2600.603553][ T30] audit: type=1400 audit(1785475111.027:700): avc: denied { read } for pid=4960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2600.640866][T28083] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 28083, tgid 28078 (syz.0.5946), ts 2600121650043, free_ts 2592724272424 [ 2600.673386][T13484] Bluetooth: hci1: command tx timeout [ 2600.673594][T28088] page_owner tracks the page as allocated [ 2600.686175][T28087] page_owner tracks the page as allocated [ 2600.695110][T28091] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 2600.712387][T28088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 28088, tgid 28078 (syz.0.5946), ts 2600151376563, free_ts 2592724249701 [ 2600.734125][ T30] audit: type=1400 audit(1785475111.027:701): avc: denied { search } for pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2600.755846][T28092] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 2600.766447][T28087] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 28087, tgid 28078 (syz.0.5946), ts 2600130797463, free_ts 2592724260208 [ 2600.771452][T28091] page_owner tracks the page as allocated [ 2600.814245][T28091] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 28091, tgid 28078 (syz.0.5946), ts 2600124021759, free_ts 2600114700959 [ 2600.835178][T28083] post_alloc_hook+0xfd/0x120 [ 2600.835221][T28083] get_page_from_freelist+0xf48/0x3530 [ 2600.835239][T28083] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 2600.835257][T28083] alloc_pages_mpol+0x1fb/0x540 [ 2600.835279][T28083] folio_alloc_noprof+0x22/0x250 [ 2600.861291][T25179] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2600.864672][T28092] page_owner tracks the page as allocated [ 2600.880686][T28088] post_alloc_hook+0xfd/0x120 [ 2600.890376][ T30] audit: type=1400 audit(1785475111.027:702): avc: denied { write search } for pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2600.912714][T28105] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5948'. [ 2600.921848][T28088] get_page_from_freelist+0xf48/0x3530 [ 2600.928154][T28087] post_alloc_hook+0xfd/0x120 [ 2600.934257][T28083] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 2600.940664][T28088] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 2600.947029][T28087] get_page_from_freelist+0xf48/0x3530 [ 2600.953828][T28083] filemap_alloc_folio_noprof+0x5e/0x80 [ 2600.954376][T28092] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 28092, tgid 28078 (syz.0.5946), ts 2600142180637, free_ts 2600114608897 [ 2600.959466][T28087] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 2600.986465][T28088] alloc_pages_mpol+0x1fb/0x540 [ 2600.995215][T28088] folio_alloc_noprof+0x22/0x250 [ 2601.002114][T28083] page_cache_ra_order+0x539/0xed0 [ 2601.008450][ T30] audit: type=1400 audit(1785475111.027:703): avc: denied { add_name } for pid=4960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2601.029322][T25179] usb 6-1: Using ep0 maxpacket: 16 [ 2601.033188][T28091] post_alloc_hook+0xfd/0x120 [ 2601.036527][T28083] filemap_fault+0x1943/0x3130 [ 2601.045845][T28088] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 2601.049460][T28091] get_page_from_freelist+0xf48/0x3530 [ 2601.060546][T28088] filemap_alloc_folio_noprof+0x5e/0x80 [ 2601.066397][T28083] __do_fault+0x10b/0x440 [ 2601.066676][T28092] post_alloc_hook+0xfd/0x120 [ 2601.076214][T25179] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2601.081744][T28091] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 2601.093115][T28083] do_fault+0xa99/0x1750 [ 2601.098559][T28092] get_page_from_freelist+0xf48/0x3530 [ 2601.099358][T28088] page_cache_ra_order+0x539/0xed0 [ 2601.110895][T25179] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2601.115413][T28092] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 2601.120827][T28083] __handle_mm_fault+0x187d/0x2a00 [ 2601.131960][T28087] alloc_pages_mpol+0x1fb/0x540 [ 2601.133799][T28091] alloc_pages_mpol+0x1fb/0x540 [ 2601.136901][ T30] audit: type=1400 audit(1785475111.027:704): avc: denied { create } for pid=4960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2601.152195][T28091] folio_alloc_noprof+0x22/0x250 [ 2601.162596][T28087] folio_alloc_noprof+0x22/0x250 [ 2601.169068][T28092] alloc_pages_mpol+0x1fb/0x540 [ 2601.172297][T28088] filemap_fault+0x1943/0x3130 [ 2601.182149][T25179] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2601.188332][T28092] folio_alloc_noprof+0x22/0x250 [ 2601.191236][T28083] handle_mm_fault+0x37b/0xa30 [ 2601.191267][T28083] __get_user_pages+0x1178/0x32a0 [ 2601.191290][T28083] populate_vma_page_range+0x267/0x3f0 [ 2601.191312][T28083] __mm_populate+0x107/0x3a0 [ 2601.217971][T28087] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 2601.224439][T28088] __do_fault+0x10b/0x440 [ 2601.224789][T28091] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 2601.228891][T25179] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2601.243442][T28088] do_fault+0xa99/0x1750 [ 2601.243789][ T30] audit: type=1400 audit(1785475111.027:705): avc: denied { append open } for pid=4960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2601.247730][T28087] filemap_alloc_folio_noprof+0x5e/0x80 [ 2601.276498][T28088] __handle_mm_fault+0x187d/0x2a00 [ 2601.280587][T28092] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 2601.282183][T28088] handle_mm_fault+0x37b/0xa30 [ 2601.294960][T28083] page last free pid 27882 tgid 27881 stack trace: [ 2601.301295][T28092] filemap_alloc_folio_noprof+0x5e/0x80 [ 2601.304463][T25179] usb 6-1: config 0 descriptor?? [ 2601.313170][T28088] do_user_addr_fault+0x74c/0x12f0 [ 2601.317033][T28091] filemap_alloc_folio_noprof+0x5e/0x80 [ 2601.318464][T28083] __free_frozen_pages+0x79f/0x1090 [ 2601.331566][T28088] exc_page_fault+0x6f/0xd0 [ 2601.336180][T28087] page_cache_ra_order+0x539/0xed0 [ 2601.339338][T28092] page_cache_ra_order+0x539/0xed0 [ 2601.347488][T28088] asm_exc_page_fault+0x26/0x30 [ 2601.349800][T28091] page_cache_ra_order+0x539/0xed0 [ 2601.353250][T28083] __folio_put+0x3b4/0x5f0 [ 2601.362180][T28087] filemap_fault+0x1943/0x3130 [ 2601.366933][T28092] filemap_fault+0x1943/0x3130 [ 2601.367095][T28088] page last free pid 27882 tgid 27881 stack trace: [ 2601.378473][T28087] __do_fault+0x10b/0x440 [ 2601.381355][T28091] filemap_fault+0x1943/0x3130 [ 2601.382900][T28083] anon_pipe_put_page+0x230/0x300 [ 2601.393603][T28087] do_fault+0xa99/0x1750 [ 2601.395069][ T30] audit: type=1400 audit(1785475111.027:706): avc: denied { getattr } for pid=4960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2601.397909][T28088] __free_frozen_pages+0x79f/0x1090 [ 2601.430798][T28092] __do_fault+0x10b/0x440 [ 2601.430944][T28087] __handle_mm_fault+0x187d/0x2a00 [ 2601.435296][T28091] __do_fault+0x10b/0x440 [ 2601.435319][T28091] do_fault+0xa99/0x1750 [ 2601.435341][T28091] __handle_mm_fault+0x187d/0x2a00 [ 2601.435368][T28091] handle_mm_fault+0x37b/0xa30 [ 2601.435394][T28091] do_user_addr_fault+0x74c/0x12f0 [ 2601.435422][T28091] exc_page_fault+0x6f/0xd0 [ 2601.454291][T28083] free_pipe_info+0x1f1/0x3f0 [ 2601.473824][T28092] do_fault+0xa99/0x1750 [ 2601.476339][T28087] handle_mm_fault+0x37b/0xa30 [ 2601.478185][T28092] __handle_mm_fault+0x187d/0x2a00 [ 2601.483219][T28087] do_user_addr_fault+0x74c/0x12f0 [ 2601.493363][T28083] pipe_release+0x27a/0x2c0 [ 2601.497912][T28087] exc_page_fault+0x6f/0xd0 [ 2601.505343][T28088] __folio_put+0x3b4/0x5f0 [ 2601.505403][T28092] handle_mm_fault+0x37b/0xa30 [ 2601.509839][T28083] __fput+0x3ff/0xb50 [ 2601.509862][T28083] task_work_run+0x150/0x240 [ 2601.523860][T28087] asm_exc_page_fault+0x26/0x30 [ 2601.525191][T28091] asm_exc_page_fault+0x26/0x30 [ 2601.528775][T28088] anon_pipe_put_page+0x230/0x300 [ 2601.539870][T28092] do_user_addr_fault+0x5a3/0x12f0 [ 2601.547677][T28087] page last free pid 27882 tgid 27881 stack trace: [ 2601.554466][T28091] page last free pid 28059 tgid 28059 stack trace: [ 2601.560999][T28092] exc_page_fault+0x6f/0xd0 [ 2601.566347][T28083] exit_to_user_mode_loop+0x1d8/0x6f0 [ 2601.571930][T28088] free_pipe_info+0x1f1/0x3f0 [ 2601.576671][T28087] __free_frozen_pages+0x79f/0x1090 [ 2601.583627][T28092] asm_exc_page_fault+0x26/0x30 [ 2601.588542][T28091] __free_frozen_pages+0x79f/0x1090 [ 2601.594224][T28088] pipe_release+0x27a/0x2c0 [ 2601.598783][T28083] do_syscall_64+0x666/0x870 [ 2601.603935][T28092] page last free pid 28059 tgid 28059 stack trace: [ 2601.611319][T28087] __folio_put+0x3b4/0x5f0 [ 2601.615922][T28091] qlist_free_all+0x47/0xf0 [ 2601.620466][T28088] __fput+0x3ff/0xb50 [ 2601.624552][T28083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2601.630548][T28087] anon_pipe_put_page+0x230/0x300 [ 2601.635650][T28091] kasan_quarantine_reduce+0x1a0/0x1f0 [ 2601.641335][T28092] __free_frozen_pages+0x79f/0x1090 [ 2601.646574][T28088] task_work_run+0x150/0x240 [ 2601.651628][T28083] ------------[ cut here ]------------ [ 2601.657096][T28083] kernel BUG at mm/filemap.c:858! [ 2601.662276][T28087] free_pipe_info+0x1f1/0x3f0 [ 2601.667108][T28091] __kasan_slab_alloc+0x69/0x90 [ 2601.672556][T28088] exit_to_user_mode_loop+0x1d8/0x6f0 [ 2601.678035][T28092] qlist_free_all+0x47/0xf0 [ 2601.681288][T28087] pipe_release+0x27a/0x2c0 [ 2601.682618][T28092] kasan_quarantine_reduce+0x1a0/0x1f0 [ 2601.687357][T28087] __fput+0x3ff/0xb50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2601.692854][T28088] do_syscall_64+0x666/0x870 [ 2601.709739][T28091] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 2601.717064][T28087] task_work_run+0x150/0x240 [ 2601.721364][T28083] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 2601.728070][T28083] CPU: 1 UID: 0 PID: 28083 Comm: syz.0.5946 Not tainted syzkaller #0 PREEMPT(full) [ 2601.737413][T28083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2601.747451][T28083] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 2601.753424][T28083] Code: 45 c1 ff 48 c7 c6 e0 a3 dd 8b 4c 89 ef e8 f6 ed 12 00 90 0f 0b e8 ce 45 c1 ff 48 c7 c6 40 a4 dd 8b 4c 89 ef e8 df ed 12 00 90 <0f> 0b e8 b7 45 c1 ff 48 c7 c6 c0 a4 dd 8b 4c 89 ef e8 c8 ed 12 00 [ 2601.772895][T28092] __kasan_slab_alloc+0x69/0x90 [ 2601.773013][T28083] RSP: 0018:ffffc9000316f3f8 EFLAGS: 00010246 [ 2601.780114][T28092] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 2601.783877][T28083] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900170ad000 [ 2601.783891][T28083] RDX: 0000000000080000 RSI: ffffffff825c09a8 RDI: ffff8880614c84c4 [ 2601.783902][T28083] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 2601.783913][T28083] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 2601.821126][T28083] R13: ffffea00013abdc0 R14: 000000000002c93c R15: 0000000000000000 [ 2601.829079][T28083] FS: 00007fa7703a46c0(0000) GS:ffff888123eda000(0000) knlGS:0000000000000000 [ 2601.837992][T28083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2601.844558][T28083] CR2: 00007ffc71a86d4c CR3: 0000000032e7f000 CR4: 00000000003526f0 [ 2601.852511][T28083] Call Trace: [ 2601.855768][T28083] [ 2601.858682][T28083] ? __pfx___filemap_add_folio+0x10/0x10 [ 2601.864313][T28083] filemap_add_folio+0x1d3/0x630 [ 2601.869237][T28083] ? __lock_acquire+0x49f/0x1a40 [ 2601.874176][T28083] ? __pfx_filemap_add_folio+0x10/0x10 [ 2601.879620][T28083] ? __pfx___css_rstat_updated+0x10/0x10 [ 2601.885238][T28083] page_cache_ra_order+0x602/0xed0 [ 2601.890345][T28083] filemap_fault+0x1943/0x3130 [ 2601.895086][T28083] ? __pfx_filemap_fault+0x10/0x10 [ 2601.900179][T28083] ? find_held_lock+0x2b/0x80 [ 2601.904834][T28083] __do_fault+0x10b/0x440 [ 2601.909321][T28083] do_fault+0xa99/0x1750 [ 2601.913553][T28083] __handle_mm_fault+0x187d/0x2a00 [ 2601.918663][T28083] ? mt_find+0x45e/0x8e0 [ 2601.922891][T28083] ? __pfx___handle_mm_fault+0x10/0x10 [ 2601.928339][T28083] ? __pfx_mt_find+0x10/0x10 [ 2601.932929][T28083] handle_mm_fault+0x37b/0xa30 [ 2601.937682][T28083] __get_user_pages+0x1178/0x32a0 [ 2601.942695][T28083] ? __pfx___get_user_pages+0x10/0x10 [ 2601.948055][T28083] populate_vma_page_range+0x267/0x3f0 [ 2601.953500][T28083] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2601.959463][T28083] ? __pfx_find_vma_intersection+0x10/0x10 [ 2601.965252][T28083] ? do_mmap+0x93f/0x12f0 [ 2601.969566][T28083] __mm_populate+0x107/0x3a0 [ 2601.974139][T28083] ? __pfx___mm_populate+0x10/0x10 [ 2601.979238][T28083] ? up_write+0x2e5/0x5c0 [ 2601.983558][T28083] vm_mmap_pgoff+0x37f/0x470 [ 2601.988133][T28083] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2601.993229][T28083] ? __fget_files+0x215/0x3d0 [ 2601.997891][T28083] ? __fget_files+0x21f/0x3d0 [ 2602.002551][T28083] ksys_mmap_pgoff+0x3cb/0x610 [ 2602.007559][T28083] ? __x64_sys_futex+0x358/0x4d0 [ 2602.012485][T28083] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 2602.017755][T28083] ? xfd_validate_state+0x129/0x190 [ 2602.022959][T28083] __x64_sys_mmap+0x125/0x190 [ 2602.027627][T28083] do_syscall_64+0x115/0x870 [ 2602.032214][T28083] ? clear_bhb_loop+0x40/0x90 [ 2602.036898][T28083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2602.042797][T28083] RIP: 0033:0x7fa76f59e019 [ 2602.047212][T28083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2602.066803][T28083] RSP: 002b:00007fa7703a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2602.075200][T28083] RAX: ffffffffffffffda RBX: 00007fa76f826090 RCX: 00007fa76f59e019 [ 2602.083152][T28083] RDX: 000000000300000c RSI: 0000000000b36000 RDI: 0000200000000000 [ 2602.091098][T28083] RBP: 00007fa76f63500c R08: 0000000000000006 R09: 000000002c93d000 [ 2602.099057][T28083] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 2602.107010][T28083] R13: 00007fa76f826128 R14: 00007fa76f826090 R15: 00007fff30c139e8 [ 2602.114965][T28083] [ 2602.117965][T28083] Modules linked in: [ 2602.122798][T28083] ---[ end trace 0000000000000000 ]--- [ 2602.129479][T28091] vm_area_dup+0x27/0x8e0 [ 2602.134685][T28088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2602.140659][T28091] __split_vma+0x18c/0xda0 [ 2602.167492][T28091] vma_modify+0x1cf4/0x25c0 [ 2602.173677][T28088] ------------[ cut here ]------------ [ 2602.179147][T28088] kernel BUG at mm/filemap.c:858! [ 2602.188785][T28091] vma_modify_flags+0x257/0x3d0 [ 2602.197026][T28091] mprotect_fixup+0x27a/0xe30 [ 2602.201818][T28088] Oops: invalid opcode: 0000 [#2] SMP KASAN NOPTI [ 2602.208232][T28088] CPU: 1 UID: 0 PID: 28088 Comm: syz.0.5946 Tainted: G D syzkaller #0 PREEMPT(full) [ 2602.219151][T28088] Tainted: [D]=DIE [ 2602.222844][T28088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2602.232879][T28088] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 2602.238852][T28088] Code: 45 c1 ff 48 c7 c6 e0 a3 dd 8b 4c 89 ef e8 f6 ed 12 00 90 0f 0b e8 ce 45 c1 ff 48 c7 c6 40 a4 dd 8b 4c 89 ef e8 df ed 12 00 90 <0f> 0b e8 b7 45 c1 ff 48 c7 c6 c0 a4 dd 8b 4c 89 ef e8 c8 ed 12 00 [ 2602.258439][T28088] RSP: 0018:ffffc90003acf610 EFLAGS: 00010246 [ 2602.264489][T28088] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900198b5000 [ 2602.272440][T28088] RDX: 0000000000080000 RSI: ffffffff825c09a8 RDI: ffff88803614aa04 [ 2602.280388][T28088] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff224501a [ 2602.288336][T28088] R10: 0000000000000000 R11: 1ffff11005dd609a R12: 0000000000000002 [ 2602.296285][T28088] R13: ffffea00013abd40 R14: 000000000002c93c R15: 0000000000000000 [ 2602.304235][T28088] FS: 00007fa76d3f46c0(0000) GS:ffff888123eda000(0000) knlGS:0000000000000000 [ 2602.313145][T28088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2602.319709][T28088] CR2: 00007ffc71a86d4c CR3: 0000000032e7f000 CR4: 00000000003526f0 [ 2602.327663][T28088] Call Trace: [ 2602.330923][T28088] [ 2602.333836][T28088] ? __pfx___filemap_add_folio+0x10/0x10 [ 2602.339462][T28088] filemap_add_folio+0x1d3/0x630 [ 2602.344386][T28088] ? __lock_acquire+0x49f/0x1a40 [ 2602.349305][T28088] ? __pfx_filemap_add_folio+0x10/0x10 [ 2602.354751][T28088] ? __pfx___css_rstat_updated+0x10/0x10 [ 2602.360370][T28088] page_cache_ra_order+0x602/0xed0 [ 2602.365469][T28088] filemap_fault+0x1943/0x3130 [ 2602.370211][T28088] ? __pfx_filemap_fault+0x10/0x10 [ 2602.375303][T28088] ? find_held_lock+0x2b/0x80 [ 2602.379960][T28088] __do_fault+0x10b/0x440 [ 2602.384271][T28088] do_fault+0xa99/0x1750 [ 2602.388497][T28088] __handle_mm_fault+0x187d/0x2a00 [ 2602.393597][T28088] ? mt_find+0x45e/0x8e0 [ 2602.397825][T28088] ? __pfx___handle_mm_fault+0x10/0x10 [ 2602.403270][T28088] ? __pfx_mt_find+0x10/0x10 [ 2602.407845][T28088] ? find_vma+0xbf/0x140 [ 2602.412068][T28088] ? __pfx_find_vma+0x10/0x10 [ 2602.416727][T28088] handle_mm_fault+0x37b/0xa30 [ 2602.421487][T28088] do_user_addr_fault+0x74c/0x12f0 [ 2602.426590][T28088] exc_page_fault+0x6f/0xd0 [ 2602.431077][T28088] asm_exc_page_fault+0x26/0x30 [ 2602.435908][T28088] RIP: 0010:strnlen_user+0x55/0x190 [ 2602.441088][T28088] Code: fc 4d 85 ff 0f 8e 49 01 00 00 e8 d6 22 b7 fc 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 0f 01 cb 49 89 dd 49 83 e5 f8 <4d> 8b 75 00 e8 b2 22 b7 fc 48 8b 4c 24 10 83 e3 07 b8 01 00 00 00 [ 2602.460674][T28088] RSP: 0018:ffffc90003acfde8 EFLAGS: 00050202 [ 2602.466724][T28088] RAX: 00007ffffffff000 RBX: 0000200000000140 RCX: ffffc900198b5000 [ 2602.474674][T28088] RDX: 0000000000080000 RSI: ffffffff85533e2a RDI: ffff88803614a540 [ 2602.482622][T28088] RBP: 0000000000001000 R08: 0000000000000007 R09: 0000000000000000 [ 2602.490568][T28088] R10: 0000000000001000 R11: 0000000000000000 R12: fffffffffffffff2 [ 2602.498516][T28088] R13: 0000200000000140 R14: 1ffff92000759fce R15: 0000000000001000 [ 2602.506470][T28088] ? strnlen_user+0x3a/0x190 [ 2602.511044][T28088] ? strnlen_user+0x3a/0x190 [ 2602.515619][T28088] strndup_user+0x27/0xe0 [ 2602.519929][T28088] __x64_sys_mount+0x136/0x310 [ 2602.524677][T28088] ? __pfx___x64_sys_mount+0x10/0x10 [ 2602.529943][T28088] ? kcov_ioctl+0x17a/0x750 [ 2602.534428][T28088] do_syscall_64+0x115/0x870 [ 2602.538998][T28088] ? clear_bhb_loop+0x40/0x90 [ 2602.543663][T28088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2602.549533][T28088] RIP: 0033:0x7fa76f59e019 [ 2602.553930][T28088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2602.573515][T28088] RSP: 002b:00007fa76d3f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2602.581910][T28088] RAX: ffffffffffffffda RBX: 00007fa76f826270 RCX: 00007fa76f59e019 [ 2602.589859][T28088] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 2602.597809][T28088] RBP: 00007fa76f63500c R08: 0000000000000000 R09: 0000000000000000 [ 2602.605758][T28088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2602.613708][T28088] R13: 00007fa76f826308 R14: 00007fa76f826270 R15: 00007fff30c139e8 [ 2602.621661][T28088] [ 2602.624656][T28088] Modules linked in: [ 2602.629165][T28088] ---[ end trace 0000000000000000 ]--- [ 2602.635409][T28091] do_mprotect_pkey+0xa4b/0xef0 [ 2602.640894][T28087] exit_to_user_mode_loop+0x1d8/0x6f0 [ 2602.648395][T28091] __x64_sys_mprotect+0x78/0xc0 [ 2602.648586][T28083] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 2602.653311][T28087] do_syscall_64+0x666/0x870 [ 2602.659252][T28083] Code: 45 c1 ff 48 c7 c6 e0 a3 dd 8b 4c 89 ef e8 f6 ed 12 00 90 0f 0b e8 ce 45 c1 ff 48 c7 c6 40 a4 dd 8b 4c 89 ef e8 df ed 12 00 90 <0f> 0b e8 b7 45 c1 ff 48 c7 c6 c0 a4 dd 8b 4c 89 ef e8 c8 ed 12 00 [ 2602.659271][T28083] RSP: 0018:ffffc9000316f3f8 EFLAGS: 00010246 [ 2602.663856][T28091] do_syscall_64+0x115/0x870 [ 2602.684865][T28092] vm_area_dup+0x27/0x8e0 [ 2602.691147][T28087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2602.694719][T28083] [ 2602.698509][T28087] ------------[ cut here ]------------ [ 2602.704304][T28092] __split_vma+0x18c/0xda0 [ 2602.706613][T28087] kernel BUG at mm/filemap.c:858! [ 2602.712111][T28083] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900170ad000 [ 2602.712126][T28083] RDX: 0000000000080000 RSI: ffffffff825c09a8 RDI: ffff8880614c84c4 [ 2602.712139][T28083] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 2602.717037][T28091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2602.721556][T28092] vma_modify+0x1cf4/0x25c0 [ 2602.730245][T28087] Oops: invalid opcode: 0000 [#3] SMP KASAN NOPTI [ 2602.737683][T28083] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 2602.745407][T28087] CPU: 1 UID: 0 PID: 28087 Comm: syz.0.5946 Tainted: G D syzkaller #0 PREEMPT(full) [ 2602.745432][T28087] Tainted: [D]=DIE [ 2602.745438][T28087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2602.745448][T28087] RIP: 0010:__filemap_add_folio+0xfc2/0x12a0 [ 2602.745483][T28087] Code: 45 c1 ff 48 c7 c6 e0 a3 dd 8b 4c 89 ef e8 f6 ed 12 00 90 0f 0b e8 ce 45 c1 ff 48 c7 c6 40 a4 dd 8b 4c 89 ef e8 df ed 12 00 90 <0f> 0b e8 b7 45 c1 ff 48 c7 c6 c0 a4 dd 8b 4c 89 ef e8 c8 ed 12 00 [ 2602.745499][T28087] RSP: 0018:ffffc90003adf320 EFLAGS: 00010246 [ 2602.745515][T28087] RAX: 0000000000080000 RBX: 0000000000112cc0 RCX: ffffc900180b1000 [ 2602.745526][T28087] RDX: 0000000000080000 RSI: ffffffff825c09a8 RDI: ffff88802eeb04c4 [ 2602.745544][T28087] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff224501a [ 2602.745556][T28087] R10: 0000000000000000 R11: 1ffff1100fab99ea R12: 0000000000000002 [ 2602.745567][T28087] R13: ffffea00013abd80 R14: 000000000002c93c R15: 0000000000000000 [ 2602.745580][T28087] FS: 00007fa7703836c0(0000) GS:ffff888123eda000(0000) knlGS:0000000000000000 [ 2602.751513][T28092] vma_modify_flags+0x257/0x3d0 [ 2602.755919][T28087] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2602.755933][T28087] CR2: 00007ffc71a86d4c CR3: 0000000032e7f000 CR4: 00000000003526f0 [ 2602.762328][T28083] R13: ffffea00013abdc0 R14: 000000000002c93c R15: 0000000000000000 [ 2602.770271][T28087] Call Trace: [ 2602.770279][T28087] [ 2602.781336][T28092] mprotect_fixup+0x27a/0xe30 [ 2602.784861][T28087] ? __pfx___filemap_add_folio+0x10/0x10 [ 2602.794998][T28092] do_mprotect_pkey+0xa4b/0xef0 [ 2602.800857][T28087] filemap_add_folio+0x1d3/0x630 [ 2602.820458][T28083] FS: 00007fa7703a46c0(0000) GS:ffff888123dda000(0000) knlGS:0000000000000000 [ 2602.826468][T28087] ? __lock_acquire+0x49f/0x1a40 [ 2602.942772][T28087] ? __pfx_filemap_add_folio+0x10/0x10 [ 2602.948224][T28087] ? __pfx___css_rstat_updated+0x10/0x10 [ 2602.953841][T28087] page_cache_ra_order+0x602/0xed0 [ 2602.958942][T28087] filemap_fault+0x1943/0x3130 [ 2602.963688][T28087] ? __pfx_filemap_fault+0x10/0x10 [ 2602.968780][T28087] ? find_held_lock+0x2b/0x80 [ 2602.973436][T28087] __do_fault+0x10b/0x440 [ 2602.977762][T28087] do_fault+0xa99/0x1750 [ 2602.982002][T28087] __handle_mm_fault+0x187d/0x2a00 [ 2602.987103][T28087] ? mt_find+0x45e/0x8e0 [ 2602.991363][T28087] ? __pfx___handle_mm_fault+0x10/0x10 [ 2602.996834][T28087] ? __pfx_mt_find+0x10/0x10 [ 2603.001422][T28087] ? find_vma+0xbf/0x140 [ 2603.005653][T28087] ? __pfx_find_vma+0x10/0x10 [ 2603.010312][T28087] handle_mm_fault+0x37b/0xa30 [ 2603.015068][T28087] do_user_addr_fault+0x74c/0x12f0 [ 2603.020172][T28087] exc_page_fault+0x6f/0xd0 [ 2603.024660][T28087] asm_exc_page_fault+0x26/0x30 [ 2603.029492][T28087] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 2603.035285][T28087] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 9e 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 2603.054875][T28087] RSP: 0018:ffffc90003adfaf0 EFLAGS: 00050206 [ 2603.060925][T28087] RAX: 0000000000000001 RBX: 0000200000000280 RCX: 0000000000000038 [ 2603.068877][T28087] RDX: 0000000000000001 RSI: 0000200000000280 RDI: ffffc90003adfb48 [ 2603.076827][T28087] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff5200075bf6f [ 2603.084780][T28087] R10: ffffc90003adfb7f R11: 0000000000000000 R12: 0000000000000000 [ 2603.092729][T28087] R13: ffffc90003adfb48 R14: 0000200000000280 R15: dffffc0000000000 [ 2603.100700][T28087] _copy_from_user+0x98/0xd0 [ 2603.105289][T28087] copy_msghdr_from_user+0x9f/0x4c0 [ 2603.110477][T28087] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2603.116276][T28087] ___sys_sendmsg+0x106/0x1e0 [ 2603.120943][T28087] ? __pfx____sys_sendmsg+0x10/0x10 [ 2603.126128][T28087] ? __lock_acquire+0x49f/0x1a40 [ 2603.131058][T28087] __sys_sendmsg+0x160/0x210 [ 2603.135632][T28087] ? __pfx___sys_sendmsg+0x10/0x10 [ 2603.140729][T28087] do_syscall_64+0x115/0x870 [ 2603.145301][T28087] ? clear_bhb_loop+0x40/0x90 [ 2603.149960][T28087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2603.155833][T28087] RIP: 0033:0x7fa76f59e019 [ 2603.160228][T28087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2603.179817][T28087] RSP: 002b:00007fa770383028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2603.188211][T28087] RAX: ffffffffffffffda RBX: 00007fa76f826180 RCX: 00007fa76f59e019 [ 2603.196163][T28087] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 2603.204117][T28087] RBP: 00007fa76f63500c R08: 0000000000000000 R09: 0000000000000000 [ 2603.212069][T28087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2603.220019][T28087] R13: 00007fa76f826218 R14: 00007fa76f826180 R15: 00007fff30c139e8 [ 2603.227973][T28087] [ 2603.230970][T28087] Modules linked in: [ 2603.235057][T28083] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2603.235539][T28087] ---[ end trace 0000000000000000 ]--- [ 2603.241729][T28083] CR2: 000000110c3c13aa CR3: 0000000032e7f000 CR4: 00000000003526f0 [ 2603.241746][T28083] Kernel panic - not syncing: Fatal exception [ 2603.241957][T28083] Kernel Offset: disabled