last executing test programs: 28.662074653s ago: executing program 1 (id=301): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x104) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000002bc0), 0x1, 0x0) write$selinux_validatetrans(r1, 0x0, 0xfdea) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r2], 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r7 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r7, 0x0, r8, 0x0, 0x7ffff000, 0x0) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="770c28bd7000dbdf250100000010000205000000800800010002000000040001808796daebcbbb7c9fe1eac68f4e7a5b40e1aeb1330c4e4fbbc322be257900a6d6865232e29afd838ea28dfe7acd5d"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c000) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000000)=0x2049, 0x4) sendto$packet(r10, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'syztnl2\x00', r6, 0x10, 0x10, 0x0, 0x6, {{0x13, 0x4, 0x3, 0x1b, 0x4c, 0x67, 0x0, 0xc4, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x33}, {[@ssrr={0x89, 0xb, 0x19, [@empty, @multicast1]}, @timestamp={0x44, 0x14, 0x25, 0x0, 0x0, [0x3, 0x2, 0x207, 0x4]}, @noop, @cipso={0x86, 0x17, 0x0, [{0x0, 0x11, "4475644728156e85939f95f547eace"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x2404c034) 27.464697402s ago: executing program 1 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (fail_nth: 9) 26.927013908s ago: executing program 1 (id=310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x163080, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1fdc83, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'bridge0\x00', 0x400}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pidfd_send_signal(r2, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x9173c536cf5667e5}) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x1, 0x2, 0x8b, 0xc, 0x5, 0x80000000}) close(r2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f00000000c0)=0xa, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000080)=0xb64, 0x4) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvmmsg(r5, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x75}], 0x1, 0x2100, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40141, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc76}, &(0x7f0000000140)=0x40) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x64, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090252000101000000090400001602020000052406000005240000000d240f010300000000000000000e2407000000090006000b00000009058103400000010009058202000200ff0609050302"], 0x0) fcntl$setlease(r8, 0x400, 0x0) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xc8, 0x0, 0xc000000) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) 25.607613523s ago: executing program 1 (id=315): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000180)={&(0x7f0000000140)=""/23, 0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 25.586735894s ago: executing program 1 (id=316): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fc00100}]}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000007c0)={0x209d, 0x5, 0x2008, 0x7ffffff9}, 0x10) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r2, 0x0, 0x1) write(r1, &(0x7f0000000100)="1800000016005f0214fffffffffffff8070008000e000000739d9af122d27e48735575", 0x23) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000002340)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001000010025bd700000000000ec0000000c0000000000000000000000d9000e"], 0xfc}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r0, 0x5}) 25.536602156s ago: executing program 1 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xeaff) 25.498725228s ago: executing program 32 (id=317): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xeaff) 18.028736464s ago: executing program 4 (id=361): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000bc0)={'veth1_macvtap\x00', {0x2, 0x4e24, @multicast1}}) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$cdc_ecm(0x6, 0x11d, &(0x7f0000000880)={{0x12, 0x1, 0x650, 0x2, 0x0, 0x0, 0x60, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10b, 0x1, 0x1, 0x1, 0x50, 0x3, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x9, 0x24, 0x6, 0x0, 0x0, "0fc5367a"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3ff, 0x6, 0x65}, [@country_functional={0xc, 0x24, 0x7, 0x3, 0x8001, [0xfffa, 0x7, 0xe]}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0x81, 0x0, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mdlm_detail={0x8f, 0x24, 0x13, 0x9, "95a0461a8d0c771dcf65a95fee923a6da08112adabf5122b46ff0d8d579a919cd28b3cf1ad1d997ab480aa2ed704e35fd99989345e6454322013fd5054e416d85b68e04298b7e4413607efeca725cb096233a00a63f5fa6bf3d8ec12096530260c6ee75e20f338b4778db075272b2bf6b790ec12e3b45cb3395d2d10dad06f5c3c955e981ee480fe759fa8"}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x40, 0x68, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x6, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x600, 0x2, 0x8a, 0x5}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xa1, 0x8, 0x99, 0xff, 0x8}, 0x51, &(0x7f0000000080)={0x5, 0xf, 0x51, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x3, 0x10, 0x6, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x1, 0xf000, 0x9, [0xff0000, 0xc0f0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x1, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0xf, 0xf0f, 0x5, [0xffff, 0x3f, 0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x4, 0x3, 0x9, 0x3}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x444}}, {0x9e, &(0x7f0000000380)=@string={0x9e, 0x3, "72fef5398649bd714bbb8e3c838a0885c2274ac12126120330010e67d02f71a4e55a8acb9303f2690de4758a892a35463653a4fd1b0e5dca0e33691f2b5fe9bf6f92be9907b61ecc9f3babc8c837f74b2570e8411f3923ed65d97547a193dcb4ff9c7a0c6969fed853109cf84af3150a60c264922ce31867bbae2dd28ec9178f1509cdf14f5a1738d9dca52948dd4610a657633a28becf4632be24b7"}}, {0xba, &(0x7f0000000440)=@string={0xba, 0x3, "88573caf8885deb2a88543b5341f41423df4489f3e691984153ed0d9c9842cb96120a66820e0dc5bb558e4533d9e1c24035ccfb371d833668a34145fd3ecd25821f9eef788cac3f4106450d87feb05dc9d097a6d0d28496e0b5efb01481527947533ea16ee51038dde6e96f50668fcb502df6fc3c00a780ce4fee7c8a220f2a2052524b7081d900f14b06502f9321154a72994602502016d3dd5e108f705ff92514847941bca8d6a897dc271f2be0bb13bb16ef15dbfa47e"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x29, &(0x7f0000000500)=@string={0x29, 0x3, "27e8db22c70a4c2d85796d2c005a3c41636cab9bce812ed31730c2d34556af8889bee3c81fcb19"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3801}}]}) syz_open_dev$hiddev(&(0x7f0000000840), 0x5, 0x4100) syz_usb_control_io$printer(r2, &(0x7f0000000340)={0x14, &(0x7f0000000240)={0x20, 0x8, 0x7e, {0x7e, 0x7, "d9f126eada4d474cad9f962064934b24c00161a655a03ff1b48d7db7c5901167f241e1bd6ff42449e37c0aa634ea5e68bc6f2a277f53f587efe3e13c547070d1b13c45d0eec8c221e1af873f806851616083fd075e3741b4b67ecc619a770662d4f1e91efb17f914c1099adb12dbabb40197804c116b8680629c8217"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x0, 0x2e, 0x3d, "84fa67e3942f86c35023a74cceaada60bf818af4b6ce0e2722c68ccb8b27ce00a514e23da5313ab43f58f582626d60d75dfc376e8654a7d6a38260428e"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a80)={0x0, 0x8, 0x1}, &(0x7f0000000ac0)={0x20, 0x0, 0x1c, {0x1a, "871854b27854bbf1279243dfeab33ee67cadf24b6a2b2c5502b0"}}, &(0x7f0000000b00)={0x20, 0x1, 0x1, 0xb5}, &(0x7f0000000b40)={0x20, 0x0, 0x1, 0x88}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0xfffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x2]}}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000700)={0x14, &(0x7f0000000640)={0x20, 0x30, 0x3d, {0x3d, 0x22, "bdcf091bae0242e92df2354ee35b52052c4e2b43598fa4f0cb31f3ad0c3e84592c69331a944e52e570af6b5f836f1028e6cf855a9c8a6ea18651f4"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, &(0x7f0000000740)={0x0, 0x16, 0x38, "df89836e057811a29a68e542cb2d7c40d416f0bf0c21d718a9e0674bac7308a05102200fb25d14625df379bdd4f9fbb5fd5b7fb446f50b61"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}}) 16.381612315s ago: executing program 4 (id=373): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') dup(0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 15.28022571s ago: executing program 0 (id=383): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 15.26160136s ago: executing program 0 (id=384): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f0000002200)="229bf24e68ad05fd604709ba489445728dea4c3f6b7f55c710c99ecf8820a4dd103cedeafdb7d3fc2bb769e474aa376580898e60ab68404d7299633e75b378b8b9e175577633f80a720aed8bb0403d4b2528c363c83d95810bbb270ae3145f51288660defaf7b9a33875192fabc41951597c5aa24320079a4be13300771036232fa7b6f36645e7f068da75cc9f0abc891f30443a71cbc563995e67f76917df612f2a3f398838cce69ec31eea6a53018d2dcbe7c8732bfb9f818dbd22cbcdaa34a1191fd8789709277d6444804cca02fffcdc0b3bf2f8bae5ce2c925ec0e9834d4a27bf3dc587db33c521580b8a4b1651006ea77fad15d32a9b3e4892253e56d3c174163421687b5175098ca5a74cd181256c6dd3bc1f76d7e476d1145d6b09c73a86ce1bde6f4a33d45b23b213a246ff0bb298324fc8351a0bd5554c4b8aefd29fbebc36d26495a68c90c7938cfd292e960a2acf1edc9adb939f01824981ee02776e269c0317150c1d84bb962e908a9004d19b39ea4516d26e34d26605c767a94305f7357dd3ba0e38830e183a7cd6be3f2dae7adddcf285fb11016cd4dfd656ebad9c22c0ee88c546f432ab657a28419f2bf698b750dcea8fe61bc830287ce56faba9886968076ec4111f12a638c23fc5ec0910f0acd880dff921dded1e6ea5f372249a3dd1e7801a6d193402d1bd89a33094a8b8a4ff32aff9bf0dec416e958afef99c95824118f3a79b8afead633641eac4a56a1599619d129c3ddac322c5713d91c964e27ee2f27b3c4feba1a8d6df016c4a62feea89be12316f3408a9deab67bf42f23dc887c1fb68d9133958dd05a6e3b3450fbf4cf31b33ca4851594cca8958937c23d9fa229d594a168ef47cecc4ad911c58de25d5bb5443b6d36e9bcdf1bc98f0be41428ad81847113d2ce833d266a39dbd202da89cc183ccb23490a0b48425aed5e66490e89db1ad122afc7faf10645f556f94816dff16c0c5cc51c8ff09f19071f3145fa815c78d4a7ad562ca4deda97103524ff8129723dd5bf2e77bdf7056d79d415a54c6c0e7a9a88ed538ac9665033481de8264824ce133ecb4e36a1de0858b9df5cde42960eecf9b6171c76cc89122c2a6b0c96758a8e2045061c33c3c733c17c5e193e907ddc21fa27d7883c11ec74c0f85d9fd386eeff3fe9f3f32d13d31afaa171dbbba4a5aa94d53e66d58c56864c5098e8d186a0c19521bdb051cc060345680c0da1619d27eb9375d15b2f2fbbd70f3b1b7b520562f02bbdf8b01678cb280f96e67e6fdd3794d66240b6126d84d18df2563d1000fcca6ef0838083264adbe6f2f4e81f6e1cb9aca84a20148b17903916ae6339b14a26aa64b147b75628d183c042da64a56d0226338f436a7436248310f1b8ef5f3bddb5affcac063803cd55d104c13f99c9a1f96f5bd4c485c99525cc19aa0be00933b715a6d85eec87b75112dc9fd7422d218ab7b216dbd6f1a8411961552ddd43e470bf931d5cfffe6d3c5c370a01ae8a7f05a71b3e915f41b10e7be80087582b691c617b654a99ee2b928b9dccff5f892239247f7d7d170e1a96a250afd29e0e4a847f07cef99de5c0c61948c3b7ba14e0416c0461ab521fd47f3bd9b9d39de43bb4a01c1f830d5ed39ad429c585ef735316f05428aebf04bc5b269a2708fdc7ee00da8174929ad994880b9389c29dd15728aa34d48c77f58c9f13a779fda43ab55f35d00c6db42d3165ddc8175281800661737676c5a9a38486c80bb0115e523c2dffc29b278e9cd3a60792058bbdd279041fd9c88e19128d896e1ddff48893c4fa3bba49333acec81f00e6eadcbba80434cd6bac3f5824ae97427ee8fc9c6ead2219c0c9360d1cec399d8245fccb2370895f9a3a2d8214fdee55ce64efb0ccf22d0cac88b86564f70d6a7a52ab00358ee3e5d7dba882a7c641daa06bd02e2ad758eaf287c626f66af8e9486f9ccc5425570b3b80e115b850dd5c9ec351d80f1b0c852fdba56cde7dfdadcc579605881c134cdc3e0bf7de47313aa7b0b4851f5d470a1d67fbc9b9a62e36e23edca3829d1c77a00ddb18e72a3d60dd2a3a94330314e8fc00ea8fbd5d989cc50917258fce3b20910f3c199b3c6c81592a1cb581bbc46a339cef80d1b32b6d466b8d48e3389e7ea5d4f8ac501ad5fc44a2168878316987a05cfed8e4f9808e462d3e0142307d346bdec44adb07eecd6410ac16d24268e60522f25829a87eda2ce38e59ae84d0b16d3b3d7c21a00d3b46619538a8e91085fb9072214f6adee3270dfea962b65188d1610e71fa9ab317147642b443fca48abe26c8304a08e92e7a87adfd5fb58f1b01de5eb7df37746a3e663cd0b0c4d4fa189870df72f4ad04669071dc5704b217c3b12ae71ddce9d5be43afb17ea47d9eb216c7fa2370c2def7a7103da75871c6878a8f09d450588ed6b4cceafe070c1436a99bb0d9ad43863484e45f84846f294a97630a643c897256a8970b61346e5740141c9afd26009656df09800898ac1882e24be44d2ce9b5944f594526e4032fe3386fc240e8167986174fe7dfa0ebae6c2cc4e455740d27f843c168c691765d40c982f17c40e5b6d4b6a23c2d43c5ef6cdacca5ecb0707a8a3e31e095dc84934c84c9da5fd7b79f30c22f67a1acf8fa4e89a984bed8d8ecb31b86827e5cf21bc214abdd4a199baa01f131eac878ba0036ed7eecded14b580767240caa71df5fd437eb7ba408c4f6a02b2160414a146f24362a85dd515a7b6946413ede74016ea07c268fee2b4764386953e530528a456a5aa97fc0655b733ac7c53b050033745e4db17564cd3990ee63811100551247a517bf5401a709d249866ce37a81099ef4e004317851da55c9ecae2f1774814a854c1bead22e60b8470b6428dd5fa2c9808eac059a7b63cbf470f2ebe2436bb33dbe5156fc8e48f3a3c0ab82faf499e7af56bc8231fe10c2211f69513701c2075c7ce31e2de8c23ed0f17c23e7f1ae097c5c6bae59081dc6d617771519344b2a68353119e535c3fc41475aa7a91b34a9573d529e7e3f571f19f12cc8c2eb916dea965f76e538d6ffcabe08042d216ebf332945a8954dab783b95c0d2917b233c8b11a40d2bb1441b683563ca4951c0100f966779f0ac44717957ffa3f5300ce2dfaefe211a91426bea7b1d97d1e4ed487c328ae378a983d60ad8c514e0942b3542bd0580acd93777f71b4441e5e54f2ae015f73248beab7062cb62b3f83ca8cd402fd7221e6237889979ae1cd3950333615d463f6ba50d585f57490b715f162a540f888065f2fa3a80b15bf0f2fe67925cc97f2b0430048d78881030075a1de48f025110cebb60676ac82aca959559022b6907d0443e8f291dea7174cc940a30ebc840a8db32cdb2163f6cae092c542e62d80781f20baf4a03913f2a4894b9a0c62c11b8127b575f62eb69e36a3938d2377d87dbb7caffbbb66cfa3557f300cb8a0fcf325915b835b66d7656af161e7fb144ebf3e4d34074ed879d0577325c1ea9b92b1642c999079d0fea6e00f74bdf077b7c484aa64b545d1c55d6008bf51435fb2f59b4c3f18b4d2ee57f96bfe40f7d2e28b99961cfd793287b859bfa5473610aabd493933a14b6b3fa4127f99b494976bfb54d55c66fe1ed5eee7f5dea7d9e1acd0694b728382024925e1bb4d364680574fd5d9f83d8ae11d26c4605460cba1c2d70d20e125e13d57b8ab110e912d48343d97299012a5418f7323f16efde5e3753ea0ea4f6d62472035ec46f6d9abf87cddb143f0eb223092b5ef164ef81dcb43ef4004aff530abf242a2ed27c58f782ae53a6234d886ecc3c90e52c40955f1a9bb5c48a09c0ad2290e22705fc8d17e5ae284a76dc9e4d3d829f9aea4086a4f26ed139a8df91cc382f4610abeba35bfc47994599e8a308b9d8bd49a255366556f2517111a60602652083076f4b283d8b93b4a7604c2d110df186eac9fc7f11213b446add8d380d06f2b4e76c1a6419c8749c70e814b37ca667ff7134ec6ae83797da568fb1b0eb0f8530c35c9656a0190e45a0288d2310f54982e246fa16117d9621c685078ae3e253c84195302612b14e663f8d7e8519769963b759ee3932aba5524baa11aa93f235cac7425a413b9466bf9f0c0d563d7d8d84bdea89b19a480823de0e798f738f0a2e4d59073c5b4bef332414d877eb2aef2b843cc6fb6b58937d1f169ab8508986d2363e3e6c0e66faefe443a317bb2ea75d763136e845588e796b0828e2cdb9eb8bcbef18b35eac7460dcd8f2d322fb6277daca5cb1cf7db45a14ace94b8e629d32f682748ca3ed32ba2c70dd5c630caa7886183ad5280cbdecda6f95f29a9764909d0939adb3fd251027ab426abfaa0c69f7337ab41d34deb76609efa1b3670478e6bd03f3e6648fe27091d41ecd40e595ccb860dc41cf72b30991a3ca41f664d042c64667444a272f93965caab36f77efc2a6089120ce85d2096992354913c7c16d529327aff260e2a8120a0397f2d0a528b1bfe86c089b0b66b7443d7adfcba949814ef1c71f3565c361e7179155eb40238355c14878ccb1414672ec5d56b5a04c6d4f9b8eaf3206062030fec147cbc5f9161c8c9352410994eb29d799be8d6bbcd3cbe6600333a2b869ba5bfbf908dcf0ab70e5678da084bbdc3c0d925725815a472344347dc16a8d52255807caf3825f3717d3a74fa2f73426317a7ef3eec17e729552bad624f853b6fde3301d26ff8aed8feea022ce5ec8f74d0ea2def02d15d2e6c6b064ce24414ebcf85b8c145e1b3bf3694ad8c600f426a7e673edc3ecf507d0ae57d5842a2355cec4c8437d5f9a3f3567887f9e81fd10ce69a1a6246f4bdd0a2259955b06ba2e2d1eeba10338f659cd8b6f47ccb77269c2f5031d239401cf0850016a4e3b23f3ea5532b452bde033a7606f5d30fbeadaecdb09f51e3cd553a9787296ef0c3ecfcb9c62e6ca7d0a2a96823724017db027cad4e107129308436758210a11e0059231575527433b563695662e783711a121f93ddb0617462607e7cc3156c0c499844417288172a9ce11429eacd7ead071280a75d19e9d29b08da3163a922f874ae74dfca916515502b56adabb494f90007ca9cb9d1ba8e2ee9390ee8b1483ab27bbda700a1556cae77284a64464bee2c13a8a3b5af8cf0ad09fc897568d92f271c1830ae31e5659f53fdd08ab05c25e89c948595c3ce41a68c3ecf964ad9fb63d4f8b8e03be101ba2c6911757385cb100a9dfd075e029e9f5fa4da3ffef2a4d5946788035e8a2e05c729b5a2f741d57dcd7be3c5b9794a584369aebaa867cc4923785903a81e4d0d2ddf4da370868e875d0f504a02aa827cfad524674a816a98fba2b62c7c1bc3b44b83bc350cc05889759dfbc2710c08ccca5285c8563ddfa7388499a83c6464ad98bc930450e08021b1c60917dee31cf070dacc13ddeede0f0a216dbcdad64864fdd1a46788b9bb47274ced7ab26820e38ce9bdaedfeec0809cad8a5c495e8999e5f89086c3b994f7763c97cc72f96a1121ac6b91405cf4c34e68292065e7b2e41e8636fe6f984c718b34c020ec1efd4dc8a8297ded00e161587ac7876833c6f07e8b28d2c32fc58ad7a5e2e6cf3db25ee899d417c255c9e0fbd923b6c8a4e3525e963988cb5e02e63f12cfc6e09d5a7f82d10e33fa39e40adab9c867fd8f72ee4b9ae135b391879e5609127465ee120bddd004e7f920f131692efd0b5a3539e818d28c19e416f891342af3e8ffb65be0a5d183d2daf07397c81af026089deb0b0640597b9c65fc8d56053438f91f31bae7", 0x1000}], 0x1, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xbef3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x50}}, {{&(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000003200)="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", 0x1000}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000300)="b0131f2554378a926d22ebe498aa16296b6b45886b46", 0x16}, {&(0x7f00000003c0)="b9b2d6808da91666e6fc711cf0679b958a0e8c3247ce0a6452b86e2eb1ed570c4fc61edf9f7b862f7879f6f58395bed3c055ae1bb0a2dfba04d21b2577d652d7aa1a7f5bbc56343dbad827122b346ab7e0ab5df7c65f578fe7e62ccd4dfda63ea1c0bfc5df4b00015df480", 0x6b}, {&(0x7f0000000440)="48086a2d10cd18eea645af3d5eb42c96875231b6bbf1fad47be845ce4b3875e49815630a1ac9f050a8ce62362c78b098cc84c1070c", 0x35}, {&(0x7f0000000480)="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", 0xfd}], 0x4}}], 0x3, 0x8040011) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x118}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000021c0)={&(0x7f0000002140)=""/103, 0x202000, 0x800, 0x3, 0x1}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000080)={{0x2, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) syz_usb_control_io$hid(r2, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES32=r0, @ANYRES32=r1], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001900)={0x84, &(0x7f0000001440)={0x20, 0x16, 0x8, "f7e13eb33832d5da"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.283753487s ago: executing program 4 (id=393): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x2042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0x6, 0x4, 0x0, 0x7, 0x8, 0x652, 0x7, 0x8000009657, 0x1, 0x6, 0x0, 0x10, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x10000000000001, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x80003, 0xf64d}) bind$unix(r2, &(0x7f0000000c40)=@abs={0x1}, 0x6e) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1}, 0x6e) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000500)={{&(0x7f0000000240)=[{0xffffffff, 0x9, 0x85f3, {0x0, 0x8000000000008}, 0x7, 0x5, 0xb4}, {0x8, 0x7, 0x4, {0x1, 0x1001}, 0x6, 0x7, 0x46}, {0x2, 0x5, 0x4, {0x4, 0xffff}, 0x8, 0x7, 0x4}, {0x6, 0x4e, 0xfffffffffffffffa, {0x59f, 0x3}, 0x80, 0x0, 0x1}], 0x4, 0x40, 0x7fff, 0x4}, {&(0x7f0000000340)=[{0x100000001, 0x6}, {0xb, 0x5}, {0xd4cf, 0x4}, {0x8000000000000000, 0x7}, {0x5, 0x3}], 0x5, 0x10, 0x80, 0x134fd47a}, {&(0x7f00000001c0)=[0x101], 0x1, 0x8, 0x0, 0x5}, {&(0x7f0000000640)=[{0x6, 0x1fc00, 0x6, 0x3ff, 0x8}, {0x9, 0x21, 0x4, 0x9, 0x1}, {0x0, 0xffffffffffffff00, 0x3, 0x1, 0x9}, {0x0, 0x68c8000000000, 0xffff, 0x8, 0x4}, {0x1, 0x7, 0x882, 0x4, 0x3}], 0x5, 0x28, 0x101, 0x400}, {&(0x7f00000004c0)=[0x3], 0x1, 0x8, 0x4, 0xb}}) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200002000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r5, &(0x7f0000000600)={0x20, 0xfffffffffffffff5, r6, {0x40, 0x0, 0x7, 0x3}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xfffffffc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$FUSE_NOTIFY_DELETE(r11, &(0x7f00000003c0)={0x3e, 0x6, 0x0, {0x1, 0x3, 0x15, 0x0, '/dev/bus/usb/00#/00#\x00'}}, 0x3e) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000000c0)={[0x805, 0x3, 0x81, 0x4, 0x80, 0x0, 0x3, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x7, 0x3, 0x1, 0x8], 0xeeee0000, 0xdf940}) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000080)) 13.166878324s ago: executing program 4 (id=395): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000180)={&(0x7f0000000140)=""/23, 0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 13.166440814s ago: executing program 4 (id=396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000080)="a7", 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r1, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x284402, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000140)={&(0x7f0000000100)=[{0x100000000, 0x8, 0x8, 0x80000000, 0x2}], 0x1, 0x28, 0x81, 0x100000001}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) 13.055642939s ago: executing program 4 (id=399): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x2, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x2000, 0xf6, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7ffdffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x4, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0xeb8, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x1, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0xd, 0x3, 0x0, 0x20f90d26, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4be6, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x400, 0x0, 0x9, 0x0, 0x6, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0xfffffffe]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000073, 0x0, 0x4}]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) close(0x3) 13.02762092s ago: executing program 33 (id=399): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x2, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x2000, 0xf6, 0x0, 0x0, 0x3, 0x5, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7ffdffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x4, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0xeb8, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x1, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0xd, 0x3, 0x0, 0x20f90d26, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4be6, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x400, 0x0, 0x9, 0x0, 0x6, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0xfffffffe]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000073, 0x0, 0x4}]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) close(0x3) 12.23386174s ago: executing program 0 (id=404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0xe0fc4000) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000080)=0x22c8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000002ec0)) getdents(r3, &(0x7f0000000140)=""/140, 0x8c) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000000)=0x8000, 0x2) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0x0) r10 = eventfd(0x2) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000080)={0x1, r10}) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000880)={0x1, r9}) ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f0000000140)={{0x2, 0x100000, 0x3, 0x8, 0x82, 0xe3, 0x81, 0xfe, 0x40, 0xb, 0x0, 0xb}, {0xd000, 0xeeef0000, 0x10, 0x3, 0x5, 0x7, 0x4a, 0x6, 0x0, 0x4, 0xfa, 0xfc}, {0xfec6b002, 0x8000000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x45, 0x4, 0x92, 0x7f}, {0x10000, 0x8080000, 0xa, 0x7, 0x7f, 0x17, 0x2, 0x0, 0x0, 0x29, 0xd, 0x1}, {0x40000, 0xdddd0000, 0x8, 0x9, 0x5, 0x2, 0x3, 0xf4, 0x2, 0x7d, 0x0, 0x8}, {0xdddd0000, 0x1000, 0xe, 0x8, 0x3, 0x94, 0x5, 0x7f, 0x81, 0xf, 0x3, 0xa}, {0x10000, 0xeeef0000, 0xb, 0x0, 0xcd, 0x2, 0x5, 0x26, 0x8, 0x6, 0xfb, 0x6}, {0xdddd0000, 0x2000, 0xd, 0xe, 0x12, 0x3e, 0x3, 0x0, 0x7f, 0xff, 0x0, 0x8}, {0x2000, 0x5}, {0x80a0000, 0xff81}, 0xd001002f, 0x0, 0x4, 0x61, 0x1, 0xa800, 0x8000900, 0x1, [0xa6, 0x4, 0xa, 0xfffffffffffffffd]}) 12.146084814s ago: executing program 0 (id=405): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000180)={&(0x7f0000000140)=""/23, 0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 12.116145605s ago: executing program 0 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000008800"/88], 0x58) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000140)=ANY=[@ANYBLOB='nr_inodes=54']) 11.878085367s ago: executing program 0 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r3, 0x401, 0xd2, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001b80), r2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001e00), r2) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="11032cbd70088b19303e05"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0xd00, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x8000) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x40000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) 11.877274136s ago: executing program 34 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r3, 0x401, 0xd2, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001b80), r2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001e00), r2) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="11032cbd70088b19303e05"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0xd00, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x8000) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x40000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) 6.31715321s ago: executing program 6 (id=459): r0 = socket$inet6(0xa, 0x1, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) (async) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x1) fsmount(0xffffffffffffffff, 0x1, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x200, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x7f}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d1050120000701020301090212000100001a000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000100)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r4, &(0x7f0000000080)={0x14, &(0x7f0000000240)={0x0, 0xb, 0x85, {0x85, 0xb, "abdbf77d3795b5f83a17ce1fbb5b931b7402ae01aa386d65dfabbe8c3664b5c1f47dcb5106ba2238fc0023d3c08b1134364293f6b53923534f9a6f762fb6b3bfb5baa40d308080337ad11273de6f442c9af097351fe3d28fd20475fc86425ce822ba533748efeb59b9230a6e22bb9f41e7ee6b4e7ad7527137dba7c6da7f794297a5e8"}}, &(0x7f0000000040)={0x0, 0x3, 0x5, @string={0x5, 0x3, "9c8810"}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000140)={0x40, 0x15, 0x2b, "d853d32db6b5d08f5d43b341163bc7856fb302f246f7f2e56b703c576e0f5571edb0ec124f67c9cf02f15f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2f}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x81, 0x3, "df5ce1"}, &(0x7f00000003c0)={0x20, 0x82, 0x2, 'P]'}, &(0x7f0000000400)={0x20, 0x83, 0x1, 'e'}, &(0x7f0000000540)={0x20, 0x84, 0x2, "bb0d"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "879b03"}}) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') write$eventfd(r6, &(0x7f0000003300)=0x10000, 0x8) r7 = socket(0x28, 0x5, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000003dc0)) (async) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x4e24, 0x1, 0x2, 0x0, 0x20, 0x3b}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x100}, {}, 0x0, 0x0, 0x1, 0x1, 0x2}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x1, 0x1, 0x4, 0x2, 0x0, 0xe}}, 0xe8) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 5.70353556s ago: executing program 3 (id=466): r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="032021322a000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x401, 0xa08, 0xfffffffc, 0xb, 0x441, 0x5, 0x7fff, 0xfa97, 0x200, 0xd, 0x1fe, 0x10}}, 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e4, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040)=0x8, 0x4) read(r3, &(0x7f0000000200)=""/9, 0x9) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r9, 0x4068aea3, &(0x7f0000000340)) close(r3) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000001c0), 0x12) r12 = openat$cgroup_freezer_state(r10, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r12, &(0x7f00000000c0)='THAWED\x00', 0x7) r13 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0) vmsplice(r13, &(0x7f00000049c0)=[{&(0x7f0000004980)="83be22bbc8", 0x5}], 0x1, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) 5.602065725s ago: executing program 6 (id=467): r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r1, 0x1, 0x9, &(0x7f0000000040), 0x29) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x401, 0xa08, 0xfffffffc, 0xb, 0x441, 0x5, 0x7fff, 0xfa97, 0x200, 0xd, 0x1fe, 0x10}}, 0x0, 0x0, 0x0, 0x0}) rt_sigpending(&(0x7f0000000040), 0x8) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.678097159s ago: executing program 3 (id=470): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x40901, 0x88) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x453, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x10}}, 0x4) (async) write$FUSE_DIRENT(r0, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYBLOB="e20200986dbeddf09a4fce6c7a11a7b11b7832045b89933a2fd83baf344bcba308294c0fe765aa613242b7eb6d4a17c6f0686e7e2b45a369736fad4f2eecf3afbc91f57c08972f9447b9fa67e7af02b31594a9ac10c5c21c7a3b959d0980f22077335adfb9b6b7ab3efc56a8d2bbac8dbb80c1cedbc820326e19bafec359164a66103c78e82b2fd2f5e08b371531f1cd00e2d47a58b51a88981ac2e55879788600000085f35f6c8f313f1fe6ce4de2aeb5f99959dfab71543b9e389a528827f5c8b740d770e0a068d05c0e23d2b6e4ef6d80cee9def6b28cfc339893a673774939d5562926985bbe5572012362b808f46e0c5416eefef031e220c95d002494e10d1cdbf66b0602123465cc735751a42b21746f73824449bea31d834f02663a191271a6531266a1d093c0f6cdfba9b54174c1c09e96c601724c4ef502134023dc5e5792d1d8b9a4a4264937d37c889be6d26a87d6d08ea09b9e018001e21c5fb3216aa142"], 0xfffffffffffffd41) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) pwritev2(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000380)="6a16b1b248e77c488c18535d99cf0334598155e87ba248b4e43b0902eae84dd2369287552bf1a9f2e3a2085a353d0b5772b01bcde59209323f24eb14628b6bc73b5b2d09a8bbaa69d29d8add505bf14acd7f83ea884c3d6e24901054234b29d3e7d2485a15260d2b04768ed6e34b6e9b5f3f0bdd47cf10cb166187bd36492208ca9f180b7533aa975da1e3754de762c0f030be2c2dc40de27f6bc01d584d925c10c2cbbe0d16bb229c32a8c5ea1167668d7e92f5d9560f8cc0", 0xb9}, {&(0x7f0000000440)="0ef1796891e0c093d088890713fa5aebc3504bbef57bea77b0608108a19fc0b7927ea0b169fc262b5c516649d5b73d098af118df82103600e121b9ab16ca5160bafbf372ab85706a9977b61d4811c6212ce59a8ad32415740c5e31e259c8903b89c8a1f915e5b96a1a6c6f4896b8b661b70571e6edf977dfcfa3ce5a565927fcbaa2cd3c979297ea1bc841e8deb17826b29b26bd4f6250f6c1e9921a4a72055b395e7fc401b16ff06af8aae2e00fac9596b7d325de0b903428fe0404de9173c26f77f1e212a979e13470f6a827d4b7f9bf59abdb11be0e25608c22a8878e", 0xde}, {&(0x7f0000000200)="aae88755d23edb07233013e4929f25eacba4e4013be43f2e8198006b5bd6c5493a13cea1a690039c2c69762d906e99d5dbed231dd35582546e1e4f088646a9", 0x3f}, {&(0x7f0000000540)="8ce2d2d9410981383aac46c609ee65fb294d50cf90b23322f4ea70563e898cd4353f3532a0a223cacf948c6ac4afdce96abfcfa7a9c5b49700bba3e09a6554aa812d91da0e0e65fe1d8c7cb062cc756f82a504ad6dc6e34f060e6ce8c8c1e1cfd6def184", 0x64}, {&(0x7f00000005c0)="0d0bef365154147df4bef10f0624b0fce5e97343153d8ece5590d4011499dd3d321f329dd09e2b3c93d845569aea92b3ad8f1eea11977ee4890ab86561bc25d2f1e8a6e7eca8007acf64922e765f743ea335cc12e919852a21e7363ec8b7e10af5f446126bd46031f5b607d8bdc727459254a4f4e7c371149f8cb74a95f9653bad9d77fa32ba10b7d5730dac84d8d2acf87fd7b44ea4e2f8e4b7c336dfcab5fe067cf1ecfc9390438655bca1fe06061764b8a66d631e5681c20bec180fdd", 0xbe}, {&(0x7f0000000680)="be279236404ff0f261b3d12a0bf7b2b08baa6c6b78b529447b4a806278314fbbabfa158ea3ebb1139ffd17088a6f906ea0bd4c3343e16d26d97ecb2f09bf2c2d24be4b7673b9d9c051e614f26512816a24d541970b4f07ef9f43627aa09b66192efa39644222285928b5e97521f80f1f8be7c3d95967cd36a8beffc1b45701fb4447d44cc99cf0ca760430453060f32c4841cee3a64bcdb766f62a199127b62782e645389cb5abe8704a873489a0732540674c6da433dff5f76876c927bfd2277363518a7d7a45397d98477ebef86a408c2feabda1310299e81c878eb849c8541f548eae0dfe8ed3f576d25b3f56d7a68e0a75f13b3e79cadb28fb7c062a372a494b45934eeafb65c447d1573d5e3f6ec119fd58807b63be940844d5c7386028de1b19054054a24c614e9f02b6e7509ec43141bf6f694f3df671d759120ca8cb1ae6835621a8dd9773294d5be23de1211795148affff8d0eff8618b59589dd50feb03f0546e83971af6feb0b40543367d4d1dad4c996cdaa87ba8ff88486f62cac079826a5ced64fdbac6b6d8898a70709b1309c0daa6bc6a96888210cef6dfe1c7e9322f8233f8ca976fd4ec98e0d9f9ac5fb83c66b0a3cbc725f2012c7d39258dd37eb98e1c6b83b4e02605bda6c61455d75e80962034ff1e2f904a390ea53e6731b93bd1c01662c1793e602f7edfe21313da8333820750a343e893c4a4ccceda0764a516c342fd1b4e5c2a44bbd8cce3d3209046289871c0edccbbd790cdce6bb4bb8683750d6cc418c1ca87330e0ff9269bee838395910982d6ab8b4edcc90b12dd550b2f0a4f99770de602a706171884aa2aca26be8838b392a025092a049aacc55daf0f2efc2d1b124ac473968fb6b1cb8ba6f2db4bc30d1633c8f10de61ea5f7ebf7ba96ca89ec31a6714f496eaf93bdb0812f5b0cda6dc752cb5c6ccc65527a356e76bbdadbd5bee338d5a91d45d159f72ff13dfd00bf09dea30a73b99d42a3ea5efc433f1a6e8801821e75e7a1bb6905266176e763b0fb7b85dd6b0a81aa93f84f92d7a5421282a6497bc3295b557c2de8bd4675d5730250eb81e6fe56769d95edf2190c09169c82ab0708c33390e1b7d30622b97487d0c81767330f020c8b083499c071f648c9bc428b9980cd179edea6bd139f254cf456671c850348e4177bd760c2ed0e3f36dc1905b7bd706a26913c97dccccf41476089754baadb71b998ca7082f2f55e3778941be53ba46024cd03daf86f706a6795d0d6f178414705c0d5dbc8f035c33884a8c2ed510a3a9cfe80eb8a0de7ff8d6260fdf0f7d6d4f5c84e5aa69da1b02beb20ed7de61dae026a3e4f56b44c672f07711de584214625b87ab71c34ebb1631f21e977c0d74a8f4d4729a4bee819e6c070f4e936613425c5f29b5f31be1a898505f65e061d8b6b7eaf0c0d6e3dc43351ad296d8b128d84fe61e177dde5aa5fab31b57b834e1ea3045681cde031fb27b90fd43c86a6a24a7fc43e89d799aa9d9e7eed7b98d6608d11287998eea1969302bae7ba00c2765360aebd1fe50863ad13c536fe981723775b0ddec16620e6d30b80e5c491c4d50f3d548f94f80b1b7b8c2c62423f7dfc01ffb162e253e0c21a1f0961ea50f06ff6b8421147bc784224fec8dee6faaeed3599546b7cd2730c6ec3c3859be863e78f982d8b3b1374e5d590097715198c80ffbfff0cd2df51346050e44ae20892e2fba1695d3b83cf6ea1f38b079d9c35ecc1dcbb45f2df4201f53c002fcf9666df2686f7edf42eab19b0681fca6388da1ef4a6f55d9829af856d54d162b2b36887c0d9e55ae6e933ecb76c274636b35c6c84a4ffafde789cef8902a5a57f18c5f1f9020099c0e84eb9fcb9d775cbde421fb760d14b25ed889516136be9e80d337a58dcb3f02edb01244cdc8e8e1115663ea43c1de522e5580ab498a5ac25450ea4c9555d16eaca7ccd797e1289a90822a68cd2438739097fdbe382e35f61443c0904368981d4e8acaa7e5c9aa2f2a7688f3e9d6565a07cf97c989c0b5dd22feeb6690cfa17587b01b9e887c98b330c429a78cc2ffa480a64cc566f155511e08b3619ca3081ffd83d98ad046cd9768668c7bfff8c51ccbbee36f472da7c8feee34bbda7a8743638927a86ae0efd70d9d0f3cda77271ebec2e388c116610c24a6dcfe742f19bfb39e9cb608e324f48d0516af1ff194c0f234052f4287a1cda67f982250f5c0be4ca39f00ebaec2d764653454f303ba558a8f2358a6daeb0bc2d1267d5ba0c208ce408121a1c09c9e00598aee907d8c15e5caf3475e9f5fc0923a2eb3d062d85b3089fb7b5f65e212f7363b1b91fe71af71cb5a47679524f005fba7d265110cd5ed2a40d6a62606ee847a4c92a3cb01260767f3fbd394454b3b52dbbffdd4a854aa8d0a6906dc309e5f953561166ebcb8d8961d4b5696d9e1d07d151d7dd4bb4e24325d04872c157949fec8d25db2d22d5e09a47a7b666473a76e66f7ff200c41e44fe1325cd51b1772ecc28d512031546b945014e5a23aad5e4b1509beb32ad9560d203c885987b2a4ecb5d8fe64fd47b4c7e4a1c54d91457dbc35d1c6b5c44cfde81f2567f3017b91044bb5ed0555eeb26cc2f3c0edabbc3dd1589dc472e2fd3f3c2a29d9a280249864c070edb17a45a2c696566fb8ecc7d489d6978de62cfaa82495690ad303caf659027903cb60c0e4ff828ba6babcd39f5655cb3b9b9a7f345d6b25e4dff1e2d426f71edf7ac46bae777ca10d64c587c1bb20d95de2cdeed61aabc1c3bb7556a19f3c1f80db27d7aa2b3954f3609e85ef4ae1cbb6e8dc6860a46db42c7e316964fae6e241b5484ce522f09633bc2329bc098e0c3bf5d020b728b1894425958ee92f624fce567b13117b196af211b33d155e52525df295b8048632d8907d566a7287f3a1ccbe57aa80a3d2862eddaaa5bb574e527c0684faca8d51b5e893e5faac093734ca8cd1900ae05867520ebbff6ac5c0262f7449b978da142dd4afc5b8594d0e3214eb91a1bf23c4ec3f3baea5ca7562359f06702ee43f7d9f3a94ac79cdeb39f58821a71e2fae53d7f1aba0a9498e7b526fc489ac6384006d3a68912139d4ab49cef6f0240e57b512ffd0eab4b3fba452bea28292ab30991d62a903c6e14baab057eaf8b3b8c9610960227c0790d0530d8159375860a5a698b9d57395bb2a6573c927984d34baebd54a516f36640bcc4bf44e8b357726f897bd3aaba7a4099b31d73d1bd888ab24841e8970d1e1c5ee602377aa25a11ce41f4622b012d34bbf68c019ab6d4f21d2886f6a5f26e887a47176880c7cdcdea85ab34357f4a3842aac044e34e2046f08cc1b4d068c6912013755d6cdb6dfec13b43c6d262eeb2c53114661c9b44dc9eefacf0e5d23046e56cde63ec5e7aedf5f4d45c6ee5391804d60999c4d25f5c9e142edccd92a3502bcffab4d6da4074ed3bacbf32731ae95436957c5b23c192678c05be524cff291716fbbb1f3306039818fb580f58218746b920338e72459428608d54e70d74fb7e2379683e4a1d74e336cdd64ed7260934956d8e1191c58e3314c5375a912ec10f6a00e63a6ccaaa0dfd0b53c33445d5c29acc6b8b93aadf3c705fb82c26c63c4e2f914a52cf1f3336ce74093e012711de46f3b4a4e5451da70d87fe5a8a05db41675509d820b11bdd6ff07a0d3c321ce6ae526bed4f29ecd75dc17d76d14fd329165a1d56feb0bb6f94cf2b1dcefbccb61d08dd0eadf31f95606c6f0ab3c8d3e7fb004db1acd3a7fa17f772578d0aaf810238b3ee9468b81668d2bf06ca9aae0d2ca671d9718b2477ec9d6d2c685346c37868b7cdd78855fb525c987f291f76ebb73dea07e2b172e534c70209e7e1c01c4855b4c52b3532525c1ca6425bff77baa0b987466cb63d6e2c09d82c73ec388ad6b593da113502a2524187d0d3601dce5b81a628e7ca058506bb5e496e2e79759c496fe88b52460b2dfa09ff0e73f02aee74e484b656a46112aaefe48a3b80d7439e30d58e4bb553dcd0abc9b71e2c42a66c873a3affaf87329aef37a63cbc227e09de9ebb6c5fd92215076d738ceee1a5f34b2f44c1997643216c27e111d996468a3bdaef7972f3b17d66382bdb4ab2b844838f68cfb16189d2976037e874ca640c9af4969ef0c0710e9d74c61584f6987ab97bac62533dc1ad182e4102ed58cd7189b009b88bb149916dc5f309736a48d5d5932bd649814f293efb5debe4a8002d5a755cbf40628225bce44a3ed73ceaac421340192b2726b87b9b7b74045dc43a7e6995b944519cf8d77adfc407f8858b8c6e2a96224e5f0183fafbccc45453d7ecd9ea7a21819ac51dab38974580715758a2ee9efa6ef675f9522095caa94b21f366da5a8f14fe7781fd6985b9b450bbcc8ae2f33eec11a31f82ffb042b1b0347e28ffb922b45c69f58056773c162364343b59557a5cd485d84ba3594f79ae018eeeca13fe19d60b5d92fe1d6ff93790ecfafa12a03167baab675f3da991a67cf968c48676cee9882d11760329ec2f7dd4cba5a26c60b0eb1bd9a6d30c2359045808a59949a0ff3f13f96e243bf3b2ead87870b518107064af3cc1bfbf906315d483964b6ba9edae33e2b421c3dfa84ddef748f4b96859f48d49eee9cfd9659e8ad67bf82f9409d5cf4636197130f43613eff4ca3130eefa253fce169780613d4953f6708174aae780ad1a62b88b824defcf9b5d5f66589cdf058d08a39dd6261c83d810e1467bacb85551a8406b52d278602d17b8ab2ec693f5d992108069e495edcfe5a5813d9983f2e30d8eae43665d65f2f53e397fbab353becffcd85f934ccf9daf609846de74e6cf93743dee929645357e7510b4c5ffe7ce8ef4a38768666b46af668d02138452857b805ffe3da72468640da959d8bfc34e2225a7f5fe1c8037f57b9e75c8588f6685b4a21694239cca4f0f9cc25b67050b37ca728deeb5b7e1e3a8c99dd69cdb081c6277d4e6a54d4357ace57c751e6bcb38fc37dc4332758649c53a76f779435f63e058442f1a3748cf25f13121f4105913624ea28de61da8707b7ac25cb018394180e05646d0752a3ff1d0add9e2de990f0ab8a8dcb33c8edbbfd18c0571193454358e3a18396c9cf348080ef73823c965f604a5d14c0e29716955a3f63173c9e19a960bf652b073e233f492b1947fbfb751e286304037d02486c90e8d55fbfaf4506e2fb8463b5e880e670e4030957c8a3ccf6fe1f9609fc493738836b3696d7843456f53f3596e759b883021967412c83d30847c5696ed8b285a134f59163a8a38590c3a3965e5a24250145e03fbe8a60f62b3a572fdb0c858d5982ffe65127b30f2136ad9afda92251084494dec18a1ae18f4de5f69c3ba16966da986847ef5251bb5b10ed827f2aa862582c110265b87395cac27cfc082601520451b5244850715298b0666d2c090ebdf718981d7f8d1f4063ada66c085e9ef7ed1bca7006cdeb2f687d40c21383419d6194f5002f43dab2cc4fea554bc8751ddde3d7e4d4a96fa4ab9c130c85aa2585fd9360f9a61720bd3555a4920f566dedc136ebee27832e42065ffdb953f8aef65dd82e2f49e8236844c3c1e5c3fde8a03c695824dbcf59f91d8522678586fc23a2c3c9cfb8df8ad39f531b34f0406c921b4148971a1668096d1d2499c1bc49804d6a307e6275297fc58f9c715463a992e9934c38f5ce3fdf559eab87c35d90d9b9807bcf4171eb86a79d6105f412f3734089bc3679901ac46ac02b7ddd163706f2d6cd4a6a4ad2b19c23136dd9381104e7e1227a5db0", 0x1000}, {&(0x7f0000001680)="048f20ed01f3270974a269a1f078503ef42e85a7b9a2ec27c5c919e4a70b6eaab881dbe6d7b66649d4d87e00ca4bb0628fd6a45f662bb014f6caec3e35c81da36fc37748aadc883d1ee8681af99498830d769b133c564b51ff17f511b51c842b3ca748922d604a8cef1f7bdfd20dbc0e3928eb7550106f4e6e6c7473a2ccc5ebda8c911a447ed714bea6ee833c19b70edd67b97e1ae13c87b90068e961404a38ca5a59572f8997ac633d440d393ecb0e719b26e22e4c3156ac29dfc369572503294485f23ad48d95f2ea15dcc2c43dffeba7a7d0fa951345", 0xd8}], 0x7, 0x7fffffff, 0x0, 0x18) 3.677783279s ago: executing program 3 (id=471): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0xe1742, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x4101c0, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000200)={0xa, 0x1f, 0x11, 0x9, 0xb, 0x3, 0x1, 0x78, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x20000000000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000080)=0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000005, 0x4000010, r0, 0xfee1f000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xaae3df4edb5f2945}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x290, 0x30, 0x100, 0x70bd2c, 0x25dfdbff, {0xe}, [@generic="d670f0572f4218ce4534d09c9887b0818055a6a62245a763b2f58a86b5893e288f6624eae71d01e563dd553e86f3c3afcddbb54d7c8e055f8f0ef7b2ae600ded9c909863f65d07ed76725f39f0efba8216e82fcfead05c25ce5551a2b064e19f7c8f011dc36666ec135e10db8a2599f58594eb88ec43b6a7ad9ebf9797a9f16815a99f4494834ce9e5a144e1f01fdf8182e60902cb35548029ea539f6b36c6e3eed33e7559699c8cc9366a5d841448d7d52b5f08370dfe9dab667c38361b19", @generic="f75d62112e3aa602cb86b8382c833f3f904ba0d589d87cb4e9e1076f4dc5ac742cc9aa2916db83a868806d9ada5f02236d1af06303645331f7f610e3ef1d65296812d5c260ab0871b62d79376a199522989b84e02b1c81", @typed={0x7, 0x6, 0x0, 0x0, @str='\x0f(\x00'}, @generic="850f853c9f2b1e6835903a2e8fa656f8440688c0b13e1c0d036c96fecbfe13a0c9b86e1f9f3c067ec3bf390d0612469c13bcd7e1c1fddbf5", @generic="1c1db0f572a71b0082879cc05196882f28dbf842d18453f0341f377dc72fe502da40bbbc96d6b3019185beca94f5960c706f104f450cb5a4876a0072e709b6c25ba8d97047871443f75b", @generic="c420307d0ae464b8566c0cdfd0aa375f8fd65f85ee63cc529d076c8a1268735620051b07cd763b310fa2a18aa8a6f91efa96c5560abfea36f074af03b53b5c9e3843f2dd0a6fc34ff4f2229807eacc117381920b3effaab908f23946dbf5607af2d3255e1b18a9530ff45f217edb64efc602331265c9b0a8970a7b39fb4d3f90b0d68a5e41d04b3c3f5b3fd874da70af764476860bd29f35113443e8fd948bcf7fc91156d43cef6acf0cd03d64d40da3164a70bb8e5bb8ecbe59643b93b78862aaf3bb72ab84d5df5ac41ce5e665f1fed7894cdff6b7ae8f4e"]}, 0x290}, 0x1, 0x0, 0x0, 0x800}, 0x61) 3.6775435s ago: executing program 3 (id=472): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000180)={&(0x7f0000000140)=""/23, 0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3.6703031s ago: executing program 3 (id=473): syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000103512048240000102030109026900030116738ab6a0293ecbff20ff090400000001012000092401030ade3aa50336c931c7c993000a0900040904010000010220000904010101010220000905010900020608000825018133070100090402000001022000090402010101022000090582094004"], 0x0) 3.624432222s ago: executing program 3 (id=474): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f00000c5000/0x3000)=nil, &(0x7f000020d000/0x1000)=nil, 0x3000, 0x1}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) read(r0, 0x0, 0x0) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000100)={0x8000000, 0x100000}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000000)={0x34, r7, 0x1, 0x70bd2a, 0x25dfdbfa, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x34}}, 0x4) process_vm_writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000140)=""/127, 0x7f}], 0x2, &(0x7f0000000000)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x60, 0x0) 3.581035644s ago: executing program 35 (id=474): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f00000c5000/0x3000)=nil, &(0x7f000020d000/0x1000)=nil, 0x3000, 0x1}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) read(r0, 0x0, 0x0) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000100)={0x8000000, 0x100000}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000000)={0x34, r7, 0x1, 0x70bd2a, 0x25dfdbfa, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x34}}, 0x4) process_vm_writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000140)=""/127, 0x7f}], 0x2, &(0x7f0000000000)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x60, 0x0) 3.346112176s ago: executing program 6 (id=478): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) sendmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x18, 0x4040010}}], 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) lseek(r3, 0x0, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000007800), 0x802, 0x0) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x4}}, 0x24, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)=0x5) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000040)) 3.05035947s ago: executing program 7 (id=482): readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/4096, 0x1000) 3.020936281s ago: executing program 7 (id=481): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000180)={&(0x7f0000000140)=""/23, 0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3.019661172s ago: executing program 7 (id=484): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0xe100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x25000, 0x9000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x80a0000, 0x10000}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x10000}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x40, 0xb, 0xb5, {0xb5, 0xb, "f6433f8471b86444689ed0d491c7e493e43cfe20795a8f5d1c79a332a741d17579646713c42b1a7995d9557a76d300a5ebef847be58549678e08272a86ddd2b4249b1f469a2facc5ab18f8ab9e0630afdc83ea9c3a557004941eecd51c540ac5f729d7f990b238782e5a4b9d7991b8fa180332c159eaf83aedbf6dffe0c8d0a936ad108ac701a2dc0f6a3af872d8d6b0c377502debe0ff0289581c2a1b06ecd3fe23ed174307ba002592ade2182f26cc967222"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, &(0x7f0000000140)={0x0, 0x22, 0x12, {[@local=@item_012={0x0, 0x2, 0x7}, @local=@item_012={0x2, 0x2, 0x9, "31e3"}, @main=@item_012={0x2, 0x0, 0xc, "b477"}, @local=@item_012={0x1, 0x2, 0x8, '7'}, @local=@item_4={0x3, 0x2, 0x3, "c99e640b"}, @local=@item_012={0x2, 0x2, 0xe, "0890"}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8000, 0x16, 0x1, {0x22, 0x6c1}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x40, 0x1e, 0xa9, "0d71a909c00b078fccd113bceeabaad035a3ddfdd22a3d48cf768af7b1a6ba83e4780a6c995328c227cb718c5d32d5d5d88e47da670849bd92e97865ac471668134de614014cbd8f409498b39bd02ebd8294386c68fce542a988a9ccacfddbf39ae4d0447da7dfcab476c1a63899017c2d59e7a77b20a1a6fae52e8a41a7a41b36f13c6a392c1f63dac974e62ffffbf4e97bdee8834d333b9474d79371b3cfe0d5866a82d9e6ed5d83"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x27}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x1, 0x65, "80e19667e033dcff6db87c832289aaf9994cb6c9fa46c2718b4fce52ef8172fd147394cdff6d9079d3f827322877ad7ff9a817f815c0a462f13815b5ffcc8abefcb84258e45f1b8d3c30affe2afbef28284d1fa528602e68ec49457dbff3113ab28cc23d71"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x2}}) (async) r3 = syz_usb_connect$uac1(0x6, 0xb5, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x9, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x401, 0x6, 0x2, 0x5, 0x5, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x9, 0x7, "2faf9bced5cda8848d"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x2, 0x4, "", ' '}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x7f, 0x4, {0x7, 0x25, 0x1, 0x4, 0xc, 0x6645}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x40, 0x8, 0x3, 0x6}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xc, 0x1, 0xa, 0x8, "b9"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x10, 0x4, 0x6, 0x2, "ef"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x0, 0x33, {0x7, 0x25, 0x1, 0x4, 0xa5, 0xad}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0x81, 0x82, 0x1, 0x8, 0x10}, 0x11, &(0x7f0000000540)={0x5, 0xf, 0x11, 0x1, [@generic={0xc, 0x10, 0xa, "fa0c7617997f340ea8"}]}, 0x1, [{0x2e, &(0x7f0000000580)=@string={0x2e, 0x3, "36385234b59e6b74af4ee6f4680405a7511ef3e29ce463a92d8b8e69ba9ded02354fbbde6bd92b7ef57121f1"}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000700)={0x14, &(0x7f0000000600)={0x40, 0xc, 0x57, {0x57, 0x11, "2e4c503fcbd3953c196614178d6e74811627a1f06e23f57396f612342c5a07e11a0f8324725447b541ec18e66ba5e38d0cd2984c47001e6eb177832490393161f9261249a2244300fe28b4344a5405cb6f92b9aea6"}}, &(0x7f0000000680)={0x0, 0x3, 0x48, @string={0x48, 0x3, "b08673385e3af1ad3ded438efecd067306a3838190356225d3c7ee84c22f39d662ca743d4f1c5fb6e8cf988fbb7f8bc8e38edf6709ced01a780bfbcbc4f8014ef09ac8cb6f60"}}}, &(0x7f0000000940)={0x44, &(0x7f0000000740)={0x0, 0xe, 0x10, "5b599b77a12065971600bfbe9adaf870"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000800)={0x20, 0x81, 0x1, '+'}, &(0x7f0000000840)={0x20, 0x82, 0x2, "258e"}, &(0x7f0000000880)={0x20, 0x83, 0x1, "bb"}, &(0x7f00000008c0)={0x20, 0x84, 0x3, "dac15c"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "90b9ab"}}) 2.910202617s ago: executing program 7 (id=487): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={0x168, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0xbc, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x88, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x168}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0xee3d, 0x100}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f0000000040)=0x7, 0x7, 0x4, 0x0, 0x0, 0x0) 2.872088309s ago: executing program 36 (id=487): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={0x168, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0xbc, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x88, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x168}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0xee3d, 0x100}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f0000000040)=0x7, 0x7, 0x4, 0x0, 0x0, 0x0) 2.379442303s ago: executing program 8 (id=488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="66baf80cb80aad3c8cef66bafc0c66ed3e26470f01cf640f3564450faa8fe970018accec00003e0f01df420f35420f219a430f015f043e674b0fc75a00", 0x3d}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.150159154s ago: executing program 8 (id=489): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000180029020000000800000200020000000800fc000000000004000880"], 0x20}}, 0x40) landlock_restrict_self(r0, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) 2.128975586s ago: executing program 8 (id=490): syz_usb_connect$midi(0x5, 0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="120150020000004044060f8040000102030109300209050c1a000210f616052501012400"/50], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) 2.105658567s ago: executing program 2 (id=491): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) clock_nanosleep(0x1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') fstat(r2, &(0x7f0000000d40)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_require}]}) chdir(&(0x7f0000000000)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000001c0)="450f01c9b9800000c00f3235000100000f30b9d5080000b800000080ba000000000f30410f2312b9800000c00f3235000800000f3066baf80cb8d0d34c84ef66bafc0cecf14a0fc7ae113e0000c4037905814b34000000440f20c03506000000440f22c0", 0x64}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x0, 0x2}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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"], 0x4ec}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000100)=0xb000) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a00000002100010027bd7000fefffffffc020000000000000000000000000000e00000010000000000000000000000004e210000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0240000000000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.069737718s ago: executing program 6 (id=492): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000180)={&(0x7f0000000140)=""/23, 0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2.063211328s ago: executing program 6 (id=493): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) renameat2(r2, &(0x7f00000001c0)='./file1/file2\x00', r2, &(0x7f0000000140)='./file1\x00', 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat(r3, &(0x7f0000000040)='./file1/file2\x00', 0x20200, 0x145) 2.006160241s ago: executing program 2 (id=494): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x622, 0xfffd, 0x1}}], 0x30}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0x80000019, 0xffffff01, 0x4, 0x7fff, 0x200, 0xfffffff9, 0x14c2}, {0x0, 0x401, 0x1, 0x6dc3, 0x895d, 0x400, 0xfffffffb}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.969897263s ago: executing program 2 (id=495): syz_usb_connect$uac1(0x5, 0x8a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x8, 0x0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6a, 0x1b}, [@mixer_unit={0x5, 0x24, 0x4, 0x1, 0xfc}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x401, 0x1, 0x1, 0x8, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x4, 0x81, {0x7, 0x25, 0x1, 0x8, 0x4, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0xff, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x26, 0xff, {0x7, 0x25, 0x1, 0xc, 0x8, 0x5}}}}}}}}]}}, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0x4, 0x3, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x1, 0x7}}, 0xe8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, r1, &(0x7f0000000000)) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0), 0x0) 1.614095811s ago: executing program 5 (id=497): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000), 0x0) r3 = fcntl$getown(r0, 0x9) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f0000000200)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x37}, &(0x7f00000000c0)=""/159, 0x9f, &(0x7f0000000180)=""/49, &(0x7f00000001c0)=[r3, r4], 0x2, {r1}}, 0x58) write$binfmt_misc(r1, &(0x7f00000002c0), 0x15) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 1.43838656s ago: executing program 2 (id=498): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x9, 0x3, 0xd, 0x10000}, 0x10) 903.140716ms ago: executing program 2 (id=499): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x2}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x184, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in=@rand_addr=0x64010101, 0x100, 0x0, 0x0, 0x6, 0xa}, 0x2}, [@migrate={0x134, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x17}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@rand_addr=0x64010101, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x184}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x25, 0x2f, {0x2f, 0x8, "b4acb06de93f80c17183862c6b51d17995f9bf99497a31d5587035f46ade457c086f8500e9db067302a9120caf"}}, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x20, 0x1, 0x8d, {0x8d, 0x7, "8c305bfcb0e8b669c870149672e3356b8c4b01a514f69dd0dffadf805fad673f9d42241a669ecc4eb1afe46ffa554e8ae6c60b5dddf5fb474fcd8c101460feb00efa61a59b5998da851784b6349801a2c69a25ca3330ab0d0dcfe9efe43d8e0d4c0fbe6aef4172b3ed38d0cf7cec3df748babed9886af8faac97ffef31328bc94ebfce323f3c2f2333297b"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="008195eb640004030a38"]}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x0, 0x12, 0xef, "0f0105992a054657b353f25034932fe442247ceef6d7e50393f4faec50b33d3fd4badba834542c25b2aa2d9b7250faabe5a667ab52b1f573a148f2084f944d875dd5f4fe74258a819f80dc1ee16d04f6076fe03efdd9511c9b0a3992e2205dfa407582c3e031005d73639a3aac7986f49b39748a59d885c24eb23736f0e95fb7e0df0175841c6882c552ad1e0b948c4ed07f56f905357cfb466ca7c9400a8149b2d96fecca85d6ef6a822e0d8bf9e7ec78694743e8a352d437903595d0ea5afd9d522480a1d4441a08776796082dfcabe29628c13dede0bec6f6bb393423550d37fdd67b3205f22c8f79376dfe3600"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x5e90}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "a9951332518585b78c01aedb3e027ee5d533f57f35382095c930328137476704ecb4b3f0201b172992c122e58c0b72"}}) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x0, 0x1, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "188fc584"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x9, "749e821c"}, @local=@item_4={0x3, 0x2, 0x0, "8b921659"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) mknod$loop(0x0, 0x1c, 0x1) 756.128792ms ago: executing program 5 (id=500): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000002900)=0x659c, 0x4) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) r3 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="14002d"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, r4, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x69}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x49}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) (async) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_connect$midi(0x4, 0x89, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x1, 0x1, 0x5, 0x20, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0x23, [@ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_out_jack={0x7, 0x24, 0x3, 0x1, 0x0, 0x0, [], 0x1}, @ms_header={0x7, 0x24, 0x1, 0xc539, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x0, 0x6, 0x1, [{0x0, 0x55}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xf7, 0x6, 0x6, {0xa, 0x25, 0x1, 0x6, "ce97a9e97205"}}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x1f, 0x4, 0x80, {0x8, 0x25, 0x1, 0x4, "d721f8cc"}}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x8, 0xcb, 0x8, {0x13, 0x25, 0x1, 0xf, "34d4b4ad16ec723ac2823efb4e5c43"}}}]}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x3, 0x40, 0x9, 0xff, 0x82}, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x1, 0x4}]}, 0x9, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x45, &(0x7f0000000380)=@string={0x45, 0x3, "b906402af766ee23bdc096eb23a9fd45df4dfaa13ccc8cef788426dd500a0c6c74f2ca33d3065dd96187aadfc400660112bdd4ee3f8c923ba1976dbf2008905cdc1258"}}, {0x47, &(0x7f0000000400)=@string={0x47, 0x3, "dd28378b5a3ca21db18efd8abba25ef9da0c76d5a8e8cc5dc468cd61eb555ffeb9e130ebbc2b2e292dd5b5728eec186f16478231ff6e17e3fd90a35496c4b8210f991c741b"}}, {0x0, 0x0}, {0x53, &(0x7f0000000480)=@string={0x53, 0x3, "df8c34d86d5ac7a65028472734d18f1c4dbd9a5b3b97efaff36f6cda82d42c68d160ad771c84a9bf691e5b1aaa73ec4c4bf33904d8be3318026d97bb76125926646fcfa93e5e128623a64a50ddeb4e902b"}}, {0x37, &(0x7f0000000300)=@string={0x37, 0x3, "e5f0a3ff90ca285a0218b6970633465c658423f22be43a6ec1cce5778976a0afeb3923f31d2f1174953bc32a2a5ffcfe6e13e9dbd2"}}, {0x2c, &(0x7f0000000500)=@string={0x2c, 0x3, "ea1366f56219fb6abf80a528426149122f0db83479e64f4683f8a1157ec2f1e0fc512bb7348bb3ca377f"}}, {0x67, &(0x7f0000000540)=@string={0x67, 0x3, "b5fd1dbdb0b62eb7f66ad20e99d9d2e70b9e6a97e04f50bc3a160ab0045a875bd8f0abdd3840e3ca7c6e696a28069ea279c034248ad99e812886cc12dc8c4a4ca52dcfba77fa68d705811f3dfa80e64ff4b88fb27653cfe851fafdda3fa86264dceae46784"}}]}) (async) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="35e670de4e239beedaa09e29d814cd8f6678f8dc817f44c88f607887d247", 0x1e}], 0x1}}], 0x1, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)={0x2c, 0x26, 0x603, 0x70bd28, 0x25dfdbfe, "", [@nested={0x1c, 0xce, 0x0, 0x1, [@typed={0xc, 0xe9, 0x0, 0x0, @str='cmdline\x00'}, @typed={0x8, 0xbf, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0xe}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x4000000}, 0x40) syz_usb_control_io$hid(r8, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 755.900883ms ago: executing program 5 (id=501): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async, rerun: 64) r1 = getpgrp(0xffffffffffffffff) (rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x8293, 0x4) (async, rerun: 32) setpgid(0xffffffffffffffff, r1) (rerun: 32) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f00000004c0)={0xa, "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"}) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) 710.310925ms ago: executing program 6 (id=502): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000180)={&(0x7f0000000140)=""/23, 0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 675.019547ms ago: executing program 37 (id=502): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000180)={&(0x7f0000000140)=""/23, 0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 672.774967ms ago: executing program 5 (id=504): pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4090) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="052ca33e9c85c4cde9ab5f"], 0x74}}, 0x4049000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002dbd7000ffdbdf253500000008000300", @ANYRES32=r7, @ANYBLOB="0c009900000000009a6b7765140055002996b18bffc19eb24169a1466da8c3e040a53b5a1951d600"], 0x44}, 0x1, 0x0, 0x0, 0x4041}, 0x4000) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4884}, 0x44014) (async) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) 602.13047ms ago: executing program 5 (id=505): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munlockall() mlock2(&(0x7f0000783000/0x4000)=nil, 0x4000, 0x0) r2 = inotify_init() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000000)={0x79}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000071, 0x0, 0xff00000000000000}]}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f00000003c0), 0x1) close_range(r2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 556.030843ms ago: executing program 5 (id=506): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x6) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000200ffffffff", 0x58}], 0x1) unshare(0x20000400) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x5) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r7, 0xe14, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xd756ce34f72d97b7) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e26, 0x9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x23, @local, 0x23}, 0x1c) 319.979774ms ago: executing program 2 (id=507): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050403020602020000000700100002000d24090202020000ffff"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000500)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x2002, 0x1ff, 0x2}}, @wrmsr={0x65, 0x20, {0x2de, 0x3}}, @wrmsr={0x65, 0x20, {0x356, 0x1000}}, @cpuid={0x64, 0x18, {0x7, 0x6}}, @wr_crn={0x67, 0x20, {0x0, 0x4}}, @out_dx={0x6a, 0x28, {0xd396, 0x0, 0x2}}, @wrmsr={0x65, 0x20, {0xb32, 0x6}}, @nested_load_code={0x12e, 0x76, {0x2, "c4233921848e0a1f465a000f092e66440fe513c422bddea52469158a66baf80cb8b84beb8def66bafc0cb0ecee66ba210066edc4c191c4e10045d0cac401f1575202c7442400053a0000c744240261290000c7442406000000000f011c24"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x61, 0x1, 0x4, 0x3}}, @wr_drn={0x68, 0x20, {0x1, 0x7}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x9f, 0x5, 0x2, 0x9ba}}, @code={0xa, 0x59, {"c481fd2bab070000003e67420f0966baf80cb8c15d6a8eef66bafc0cec66baf80cb854e9f480ef66bafc0c66b8005066ef400f01df0f01f8420f07f30f09b96b0200000f320f01c8"}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x67c, 0xf0, 0x3, 0x4}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro32=0x440e, 0x7, 0x1, 0x7ff}}, @in_dx={0x69, 0x20, {0x47c1, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xa6, 0xd, 0x6}}, @code={0xa, 0x57, {"c461fe2c744c0d66bad004b000ee0f1ba20000010066b805000f00d066ba200066b8000066ef65460fc7ad7bc1b0ce440f20c0350f000000440f22c00f35c4427d307fee3132"}}, @in_dx={0x69, 0x20, {0x87d9}}, @wr_drn={0x68, 0x20, {0x7, 0x9}}], 0x3ce}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0xb89, 0x0, 0x4}, {0xa88, 0x0, 0xa}]}) syz_usb_connect(0x5, 0x9b0, &(0x7f0000004dc0)=ANY=[@ANYBLOB="1201500208ffc9086b14597164530102030109029e09040604600a0904fc0e07ff5d01000905080300040298f209050310080007020009050a000002000308f1054b2aa0a96470a96ca3c3bfde99ca34a1c93b27678ef261e8bdef19edc458269a250029add930b7d833c96b7883a520b60bb8da30428f087935475beeba9f91f7e3bab21c59983bf176f0ea9fe4ce1c05a816cab0a7ccbd0681fed37c5563c31919907a9b494f2dce0cb922b5ab71a20416f3d9a41a8242fa83c27d177f6e6bc308bf57acddb436b4455d107c6f1bada153c1de2e58798c58295004ed63d95c19d4ebc82061d7d2de943b0ef727996947c12b6d0aa438bdbbf29f290d66470ffd4e1906d353a9af65f52463f8fa4d02c54d6bb2208234e78ead2bd4b52a7fcf954c74eb728d457eb6a928c0436f8bd7090500100002040a0424223a976ffb7ce6c1f0ae841b3d2c821d7b05ab059cd5bec51ae72d09a42c28573ccc320905050210000c0c0407250100ff3dd309050000ff030b04085f236b357a11d640e10fa7c4b8ccdb9f60ff776bf33cb0a9f82c19d61cfedf1da1c98e4e9fda7393fb12577e5abf3c428eda0026580a63f928aab018b878fa94547b0dc68c0095e90a49f70bde06a5779544aa00ec649c450b49d683faa6380725010c01b70009050b10ff030efc090904b70508030a027f0724010903ff3b0f24020101010007feec4df56394bb0a240202d209050001f80a240201090103fd99c50724010304050009240201820206040109215a00010122540709050ef7200001405309050e0300040809060c2434a8535bedbc56a9f0820c0a343ab6b4857b4d97620609050b10000202060319319927b24cdc6f724e43d2bfb851e1ecd911d7761c3b25ba1f106ce2f21c8262c55416ca4baa27614f2592921e65d332a049319a88a26b09050a00000401ff020725010002004009050000200003060809050e0c10000cff0a0725010c0b0500aa0db57e44c211cce40c83b9974145a07b003227223ea10f460fc7918271eae236eee2aeb3537b429c73ee9e1b33ea89b5c47b127ce3806c4fafd6868491338ce83222da81c9d3e14cc05cfa4278a16b5aa22184ddb2eb125ecc05b0a4d0f84e33bc255db210ab701051dc23061e331e4dd84d3c8243e6a96bd1c8dbc07d3a824d0e93e086dd4762d8c21fb8c199f66dff321e625be873cfc4e6729b30775fd45cfc761b99392ef526db09050a02100030400409050f000002010704072501080b45000725010cfd020009044f050aff9bacba0924060000d7cab83b05240000020d240f010400000080000600ac05241500000b240201060103014355810a240202210000000b260f2402010901020497b720c2a43c2b0924020106047e07370c2402020a0007000815bca20724010ffc050009050200400004d707600c8920f6ab877831da98ce6d813b491bc818ac48fbfe649b0841d8a86acf56c2f50e82a9c4be2935dbf1150a10fff9caa684677262b144e9fcd559bf89f3c782ea3f6c9f26b0be1a48dfa1050f6a15f0099616fa701673d3045d2d75d99a5f0905020c2000010504fe082610ab43da62d4ed381a6a5b0f9ee23593104863c40eae4ee5cf7e5451994d4a99d446ca4409f5c616ad89413d2cf196d4a0d7160cef45e9e63c28dd5143356e9c3d9070ee1c6b3d8c6e3f18ec3658e320588f2b9e1d4af4d89800885e0262ae29908817f5564b919c6d5ed4519a421e7a614497b9e1d24a3232e7e390d8110173d8d78d0c5c2fde7acadfe7fad214a2457a0c200362c012fca6f1a63ea4ce509259fd2132d5d7626d7844573cfafecd7c2e423351716a6e140c33947ca024bb22573f2f9c94f2ca62205c2b5d1baa7888e4e12bc5f2fd7e313c8633d96eb30b92f85e2df6e2d2f8710f2369509a032fd78a922b404212969503e63709050c0300024302059224c3430e9bcc662a8c3ab283aa3d32ac1a7c30fa59020a07cb154954f7e100295cd230d5782e0e81acd8c4a8f535bc56f8a6d1536d3b4286332b4df79994e81571f19d8fac7c4a26d216b263c047a8da999276510ac93f068c73a07def02d93a824431c12572cc4df9c4aac0ec78c03c238beb0de74605ef01d066133dfadc92a9fed5ce9e5a893724f39e5b6fcc065d3009058010400009050609050d10af03050703090509004000047608ee0a5d5ac3e6f82082295e99837d1512f585a632cc29faf1b9e8352c62fb5ae69cfbe4e975b4a56eb0f0af236fdadcb7385460c2a63cdfdd3d00ac303b33cffed454390f1f2be5deebbdc84be16968bf5e40fd59f7c4c0d66d0e01cee3731db087aa8b8cb2cf60a924da4b076cf722484154050ec97f6b2b6ee903c310826761e7515c66dda760185a4cff323c47e4f0bfa26899fadd9dd66ecf27b98b9ad31c2fe387c25da8c12f2b42cfbaa0195a37ffbdb53406a5c9747455685e1fd10deca5f2dd9a9c92e36cec4f041fdb794ce9467c546fbc1db28871de58b7741ef319b950af2998a0619123e5331b742a072501000608000905800010000408000725010c05c0ff09050a030004080e020725010c0504005f127e4f1e3822f6bb07cf723a742b5b1e26a15ac4dc38a62eff5a0326e452d28141763f23552e6b9baf41a49df88470e94710571c0eb35f8379b485968f86666795dc8a548b7d0beb7a2d83ea194d8ca24d37dd778c615bef1f1239f482d50905000cff0306400109050310ff03210880072501000801000904dd090d1a25d50b0a2401030034000201020a240403033501167c9c0b24050606eae2757629af0c24070606000709cbc0bd2009240503014cf1acc009050b10000407000509050e0c5000fb0d017430eecd685bfb2c2c10606f227645749daa3238bf45631f358590c11f41d83d5365913b049ca0038fda52c4b69161504e86f32aae85ec321048b4b51b598a885b468a23b167c84af8624647e2e4824d365f3acb98e7999dc0059dbb5f65d910822aa16a98d27e7876c940af7661ff2f348d4eca0725010804060009050b03ff037f06fb072501040100000725010801001009050c0238040c00800725010453030009050b10100009010207250108280d0009050d0c20007f0d0107250104030c000725010402000009050010400009047e0725010009000009050b022002e90901090505043004c4090594118314e0eebaad9d582224758cb46d66dd96448b3eac516c6359f695ea0953dc8986d9cb20aae8eb48118ef50bdf614fb526057ea888aa3b047dc6c6740ca56cb0a1d95b039b342dad5bc92a769f4416503dc99a21c5fdaea2124eb100281f9a05685cbde74cc8cc66fda1603d191c187bf8fef6fad8b5badb42573b0763e11b13a2257763ab86f63de19ce307128d0c72f7b00725010c030bf209050300080007040109050a00200002010909050100080000fe400905080320000b09030c0c47c0aaeaf3d0efa18612821c66230c4c629c2604f4"], &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x2, 0xe, 0x90, 0x20, 0x3}, 0x113, &(0x7f00000000c0)={0x5, 0xf, 0x113, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc8, 0x10, 0x5, 0xebe0, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x2, 0x8001}, @generic={0xf9, 0x10, 0x4, "0db2c1db7ecfc685d6e4cdbd868ff00698b84736a5bdeb4c7f99fc342a7f9a95d8912390905bf3b6f7c33cae4ce9bfe4c1a0d50dd35fddd93a1fea12842e7ac4ce95ac4ace70c3536ea5ddb7a7470a91d694f37d03305952bb9df9a73266e23bd775af68db3bd5683d597a51990556e9de20bc64b2bbe69df825159042a4d0351c3d2e69e996982498e70455e9846ac677f9f35c76e6e79fe1721beafa9aa9931fdebf937193e42bebaba8b59c29fa3581b8b978b606dd12519de588cac938053aab4edc3ba1a011d55624e5a3eff07f2e98fd0576b0d82a3a14f6c9119580d1fbb5dc1cb483448ff6ef1689c1417c2dd810a94c6c75"}]}, 0x2, [{0xcf, &(0x7f0000000200)=@string={0xcf, 0x3, "13472ebf819ce431638a9b3a551bcf2207b4c66b3c0b54211998ebdf01cee2c3b85f45abe1db0f833e089e066021bf7497d50691d2ba2d0797a2e9ff28ef738c9937e5477ee5c36d99d7a8b32cc40f024ef87dbce2063e4c7cd53b77938c4ee319e2fedbc07b1b44e9e7400697d180118110ed999aa1ccbaa185cd235a9e5b6b16bff598ddf15123b9c05e411e552227d932ef725c8d8f5bd54371b8ae551bdf88aefbbf4b6c9a623fe4c66e18966098d7dc468596b2e87a9d1311a64c489e373f5b349800f25b013860f0d1e2"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}]}) clock_gettime(0x0, &(0x7f0000004d40)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000004cc0)=[{{&(0x7f0000000900)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000980)=""/204, 0xcc}, {&(0x7f0000000b80)=""/210, 0xd2}, {&(0x7f00000037c0)=""/250, 0xfa}], 0x3}, 0xe}, {{&(0x7f0000000a80)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000000c80)=""/165, 0xa5}, {&(0x7f00000038c0)=""/108, 0x6c}, {&(0x7f0000000b00)=""/31, 0x1f}, {&(0x7f0000003940)=""/96, 0x60}, {&(0x7f00000039c0)=""/16, 0x10}, {&(0x7f0000003a00)=""/15, 0xf}, {&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000004a40)=""/83, 0x53}, {&(0x7f0000004ac0)=""/30, 0x1e}, {&(0x7f0000004b00)=""/79, 0x4f}], 0xa, &(0x7f0000004c40)=""/111, 0x6f}, 0x8}], 0x2, 0x2000, &(0x7f0000004d80)={r3, r4+10000000}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000b40)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) syz_usb_connect$midi(0x2, 0xf3, &(0x7f0000000dc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x1, 0x1, 0x40, 0x90, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0x5, [@midi_out_jack={0xb, 0x24, 0x3, 0x1, 0x7f, 0x2, [{0x0, 0x2}, {0x7f, 0x10}], 0x80}, @midi_out_jack={0xd, 0x24, 0x3, 0x0, 0xf1, 0x3, [{0x3, 0x9}, {0x7f, 0x8}, {0x1, 0x7}], 0x7f}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x2, 0x7f, 0x7f, {0x13, 0x25, 0x1, 0xf, "e904cc65ea56b0742e5c5a10a755c0"}}}, {{0x9, 0x5, 0x7, 0x3, 0x26eb5e08c30a0c97, 0x4, 0x2, 0x0, {0x8, 0x25, 0x1, 0x4, "e00e4ec0"}}}, {{0x9, 0x5, 0x8, 0x11, 0x10, 0x81, 0xed, 0x1, {0x10, 0x25, 0x1, 0xc, "10add30f10dbe696002d53d6"}}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x7, 0x1, 0x4, {0x6, 0x25, 0x1, 0x2, '1e'}}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x9, 0x9, 0x7, {0x11, 0x25, 0x1, 0xd, "fa32241defdbaf32f929c80c7e"}}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x2, 0x85, 0x0, {0x10, 0x25, 0x1, 0xc, "8c1021f15d93bc5690a31fed"}}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x9, 0x1, 0xc4, {0xb, 0x25, 0x1, 0x7, "24df92bb43b9e0"}}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x6, 0x2, 0x4, {0x12, 0x25, 0x1, 0xe, "1c2bd59cadb77b8eafaa86fdb39e"}}}]}}}}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x110, 0x2, 0xa, 0x8, 0x40, 0x40}, 0x54, &(0x7f0000000f00)={0x5, 0xf, 0x54, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x3, 0x9, 0x7, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x85, 0xa}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0xe3, 0x2}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x2, 0xf000, 0x6, [0xff0180, 0xff3f00, 0xc000]}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x8178, 0xf00, 0x2, [0xc0c0, 0xff3f30, 0x18]}]}, 0x7, [{0x8d, &(0x7f0000000f80)=@string={0x8d, 0x3, "590a02598e80d261594031b6b3503e4a566e1133b35aae8c204cc4f938590140989a70dd2588277b91f2e193fc35bfe6f7f74af4dcbdb50741448eee7fab3eb30b5d413ca59ad32eb44db3230687b28309165a73d4209e766e647672f59011ecfc1debc269073588261a5a054fe40a72fa073b805a84d1d502429c0f28329a0c8dae6b822eba3546ffa67e"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x3036}}, {0xe3, &(0x7f0000001080)=@string={0xe3, 0x3, "231f997f4ce2b2ce432f1c6892961c491aff3e8c1e20065b7a633e220e04d62ad7bdb9d4587316173606f5bf2f3511de032ef5942ff0bd7edd0b3e0b9f57697d07cbb686ca6044732c91ce73afbcb19d854a2ae4ec7e1ab61590cb5f72a04b3971ab577618fe8c97c4a6e67a60fbc7cc41d7a5aed206acffb552a02536e20757204c8be8e571c7036187ace63fe1e12090f8a0bbeaf7d207388aef39dae6d300d2a760f923d44cf193b2a457fa543dd4d7f39857e969dd15cd8e6cfdd192ac85929eca2cbea478ac9a6df005e8266d70cbde75308e70e6eed1c0305b7dd0a75674"}}, {0x9e, &(0x7f0000001180)=@string={0x9e, 0x3, "816a0088f7842d49ae7da98a332b7244aee8e2356e5562794685fbb6fc1d41765b872550b64fded32998591f43d31f84c7a791d58387b6b27effbff92460d303284f2b11b5e210bdfd45cc179a988f40d97f53c255becebcaed18fdce45170d74b18dbe34c1c690de489e93341506ada07eee6552ecb209d1f05e4277f5cb5df063006fd46bfd5418d9b61803e645acab81fdcd037af9c55c724fe29"}}, {0xaa, &(0x7f0000001240)=@string={0xaa, 0x3, "abcbe02a274f49198492ace4c70f68c3a89fdb0da08b5d5ba78993f1424f33c21d2f3dc8338a89e694fc978e7e522ed6a580148405b13a85f4882731e2ae587b10c8273cf91d1e56a5bdeca00ac4581555d223956c96db08006d009d5c2886bbdbca8e75389dc25f96d51f538169ee45bd0f9a5c25387afdd184313cb634889f21bd03d4e4c3c6efb97a8cc7e8195f611ef12d853e75f92d2ee73d2ab6cd26c0470116a6598af94e"}}, {0xb7, &(0x7f0000001300)=@string={0xb7, 0x3, "ed826eaa7de546fbe1b63c2f0696c84514e56eb1cd807cd5fa67710bc676b526b49bf47083e5bd9b09a36307a983b28d321da94b1d03bdc1613de63a0522b39e7cbc3a8094441f55c4ab6b64581b5496d770e1ef26d18f67e4ad33ca52f4bd06f0c86345b70aebc97eb9c720504833ae2753dbef3a6e4ebc5c3dfae0f2b478dec169ead8adfb9c3ad4d5c35840530ea77cdec59a4c668ee5007906c7cb2ed503e95a573062694d73db257577f149d4857c8b5b76dc"}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x14}}]}) ppoll(&(0x7f0000000040)=[{r5, 0x2}], 0x1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r5, &(0x7f0000000380)={0x18, 0xfffffffffffffffe, r6, {0x7}}, 0x18) 38.117918ms ago: executing program 9 (id=508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000003c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff9f, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000006c000100"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4040090) 37.662748ms ago: executing program 9 (id=509): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000140)={0x10, 0x0, "3d9f59ade3581573fcca88eccbd129de"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, &(0x7f00000002c0)}) 37.270168ms ago: executing program 9 (id=510): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x7, 'bridge_slave_0\x00', {0x7}, 0xfffc}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={0x8}) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000000000007000000860a00000003070419099404"], 0x38}, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x7, 'bridge_slave_0\x00', {0x7}, 0xfffc}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) (async) dup(r1) (async) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={0x8}) (async) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="38000000000000000000000007000000860a00000003070419099404"], 0x38}, 0x800) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) 36.028858ms ago: executing program 9 (id=511): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xe, 0x5, 0xfffffffffffffff6, 0x8000009654, 0x1, 0x7ffffffb, 0x0, 0x10, 0xb, 0x80000000000000, 0x200cc0, 0x1, 0x5, 0x94d6, 0x0, 0xfffffffffffffffc, 0x809, 0x0, 0xfffffffffffffffa, 0x6, 0x2000000000004}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x21, 0x0) chroot(&(0x7f0000000200)='./file0\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000240)=0x5) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 33.748818ms ago: executing program 9 (id=512): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xff, 0x124d, 0x8000000000000000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x81, r2}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000300)='./file2\x00', &(0x7f0000000840), 0x804002, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x20) removexattr(&(0x7f0000000280)='./file1\x00', 0xfffffffffffffffc) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$9p(r6, &(0x7f0000000400)="d056c97c30f8174da4c66652af1fab3b9bd7d84e085b80da38ac586bcfb9e5113e059b5069a4e18f3353854f5947bdb9a25f7d5a8f73a82fbe7a3c4ac41739045288da84db777c45222eef47fcd34503024839aeff6baedefd4574eb5c8f325f9e81301ba8525bbcab8aadd31d65d939ac34d6f38d7b04cc0cc66968d77efe32eb87", 0x82) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 0s ago: executing program 9 (id=513): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x700, 0x8, 0x8001, 0xb4, {{0x2a, 0x4, 0x1, 0x15, 0xa8, 0x65, 0x0, 0x4, 0x4, 0x0, @local, @multicast1, {[@ssrr={0x89, 0xf, 0xee, [@private=0xa010101, @rand_addr=0x64010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x71, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x6}, {@private=0xa010102, 0x8780}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xff}, {@loopback, 0x8}]}, @end, @ssrr={0x89, 0x1f, 0x6a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @generic={0x44, 0x2}, @cipso={0x86, 0x14, 0x1, [{0x7, 0xe, "3f5e1dea3b6e0902dfdd86a1"}]}, @ssrr={0x89, 0x7, 0x7a, [@multicast2]}, @ssrr={0x89, 0xb, 0x12, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)={0x16, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x19}, @jumbo={0xc2, 0x4, 0x3}, @ra]}, 0x20) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r0, 0x0, 0x0, 0x40000341, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, 0x0) kernel console output (not intermixed with test programs): ][ T325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.768300][ T325] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 49.782709][ T325] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 49.791885][ T325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.799889][ T325] usb 1-1: Product: syz [ 49.804170][ T325] usb 1-1: Manufacturer: syz [ 49.808887][ T325] usb 1-1: SerialNumber: syz [ 49.814273][ T325] usb 1-1: config 0 descriptor?? [ 49.820531][ T325] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 49.954693][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 49.975903][ T10] usb 4-1: device descriptor read/8, error -71 [ 49.984720][ T471] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 50.021730][ T891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.023179][ T325] usb 1-1: USB disconnect, device number 12 [ 50.030975][ T891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.055192][ T895] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.090671][ T900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.100133][ T900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.105794][ T10] usb 4-1: device descriptor read/8, error -71 [ 50.135967][ T471] usb 2-1: unable to get BOS descriptor or descriptor too short [ 50.144105][ T471] usb 2-1: not running at top speed; connect to a high speed hub [ 50.152768][ T471] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 50.164433][ T471] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 4 [ 50.178384][ T471] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 50.189246][ T471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.198132][ T471] usb 2-1: Product: Đż [ 50.202661][ T471] usb 2-1: Manufacturer: ⎽薭鳓暌ęľęş¬ă’涔ďŁë°§ă…¬ăˇĽâ‹Şâ–ľë®â¬«ăśžę ľë‰Śä˝ˇëśă‘ŽäŁ¶ĺ·şî±˛ă§°ě±˘ŕ§Ąă‰¬ëĽî“„ă‹äˇ¬âľŞć§ë…Żă­¶ę®¬ćµç©µëˇżď§żě„µäŁä‘ąä•ă´ë»»ă·¤č–˛ĺą’읣áľá›®ë•ę…ˇäŠĄŕŻµëµë­ŹŐŽçťěšŹĺ˘¤ďąłęŁo裑ꅾâŁčš®íźŞă»Łę­šé”¨ĺ…맓鲚✖⻨泜ꧨᙉಶ٨ćźâ’łç¬˛î”›ě“¬çśĄď»€ë‹şëź‹î‡‰ăˇ»ç¤şä„‹ě›¨ä—î’áĽäŠ…鿱ᢼᜇ딫Ⰲ [ 50.235986][ T471] usb 2-1: SerialNumber: ŕ°Ś [ 50.364667][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 50.385679][ T10] usb 4-1: device descriptor read/8, error -71 [ 50.444264][ T471] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 50.444683][ T368] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 50.469590][ T471] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 50.480446][ T471] usb 2-1: USB disconnect, device number 16 [ 50.485354][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.515833][ T10] usb 4-1: device descriptor read/8, error -71 [ 50.604723][ T368] usb 1-1: Using ep0 maxpacket: 16 [ 50.611109][ T368] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.624124][ T368] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 50.625411][ T10] usb usb4-port1: unable to enumerate USB device [ 50.638004][ T368] usb 1-1: New USB device found, idVendor=0553, idProduct=0029, bcdDevice= 0.00 [ 50.645943][ T910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.654796][ T368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.664403][ T910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.675804][ T368] usb 1-1: config 0 descriptor?? [ 50.683699][ T910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.692426][ T910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.886957][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 50.886973][ T36] audit: type=1400 audit(1774257876.909:267): avc: denied { write } for pid=906 comm="syz.0.184" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.987671][ T913] kvm: MWAIT instruction emulated as NOP! [ 51.038412][ T913] pim6reg1: entered promiscuous mode [ 51.043988][ T913] pim6reg1: entered allmulticast mode [ 51.051773][ T36] audit: type=1400 audit(1774257877.069:268): avc: denied { remount } for pid=912 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.230614][ T36] audit: type=1400 audit(1774257877.249:269): avc: denied { map } for pid=917 comm="syz.2.188" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.305795][ T923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.314876][ T923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.325568][ T36] audit: type=1400 audit(1774257877.319:270): avc: denied { map } for pid=922 comm="syz.2.189" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.454670][ T10] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 51.481238][ T368] usb 1-1: string descriptor 0 read error: -71 [ 51.501721][ T368] usb 1-1: USB disconnect, device number 13 [ 51.545264][ T36] audit: type=1400 audit(1774257877.569:271): avc: denied { create } for pid=935 comm="syz.3.194" name="#11" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.565930][ T36] audit: type=1400 audit(1774257877.569:272): avc: denied { link } for pid=935 comm="syz.3.194" name="#11" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.590954][ T937] rust_binder: 934 RLIMIT_NICE not set [ 51.591826][ T36] audit: type=1400 audit(1774257877.569:273): avc: denied { rename } for pid=935 comm="syz.3.194" name="#12" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.622312][ T36] audit: type=1400 audit(1774257877.609:274): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.642820][ T36] audit: type=1400 audit(1774257877.609:275): avc: denied { call } for pid=933 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 51.663530][ T36] audit: type=1400 audit(1774257877.629:276): avc: denied { lock } for pid=938 comm="syz.3.195" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.667531][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 51.700846][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.711349][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 51.720889][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.731031][ T10] usb 2-1: config 0 descriptor?? [ 51.891587][ T947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.900554][ T947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.984704][ T368] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 52.017922][ T975] overlayfs: missing 'lowerdir' [ 52.036862][ T977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.046118][ T977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.055182][ T977] Invalid argument reading file caps for ./file0 [ 52.080636][ T977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.089244][ T977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.134688][ T368] usb 1-1: Using ep0 maxpacket: 32 [ 52.141785][ T368] usb 1-1: unable to get BOS descriptor or descriptor too short [ 52.150887][ T368] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 52.159301][ T368] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 52.170031][ T368] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 52.179232][ T368] usb 1-1: config 128 has no interface number 0 [ 52.185534][ T368] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 52.197237][ T368] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 52.207697][ T368] usb 1-1: config 128 interface 127 has no altsetting 0 [ 52.216411][ T368] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 52.225620][ T368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.233768][ T368] usb 1-1: Product: syz [ 52.237996][ T368] usb 1-1: Manufacturer: Ń„ [ 52.242519][ T368] usb 1-1: SerialNumber: syz [ 52.254671][ T325] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 52.348234][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 52.354824][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 52.366727][ T10] usb 2-1: USB disconnect, device number 17 [ 52.811472][ T988] netlink: 148 bytes leftover after parsing attributes in process `syz.2.211'. [ 52.874877][ T999] /dev/md0: Can't lookup blockdev [ 52.894249][ T1002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.761078][ T1028] fuse: Bad value for 'group_id' [ 53.766512][ T1022] fuse: Invalid rootmode [ 53.771127][ T1028] fuse: Bad value for 'group_id' [ 53.806216][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.812649][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.819436][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.825985][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.832474][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.839183][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.845761][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.851707][ T1036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.852780][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.861629][ T1036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.867962][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.883736][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.890606][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.897241][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.903755][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.910473][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.917080][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.924059][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.930627][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.937503][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.944839][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.951187][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.957585][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.964404][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.970786][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.977500][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.983894][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.990571][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 53.996954][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 54.003528][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 54.009986][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 54.016478][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 54.022741][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 54.029356][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 54.036416][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 54.060132][ T1038] input: syz0 as /devices/virtual/input/input9 [ 54.072906][ T1038] tipc: Started in network mode [ 54.078530][ T1038] tipc: Node identity 9a2feda4b7f5, cluster identity 4711 [ 54.087653][ T1038] tipc: Enabled bearer , priority 0 [ 54.098913][ T1037] tipc: Disabling bearer [ 54.384698][ T471] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 54.409779][ T1043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.419892][ T1043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.429491][ T1043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.438401][ T1043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.534661][ T471] usb 2-1: Invalid ep0 maxpacket: 32 [ 54.551550][ T368] usb 1-1: USB disconnect, device number 14 [ 54.559984][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.664693][ T471] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 54.815724][ T471] usb 2-1: Invalid ep0 maxpacket: 32 [ 54.821294][ T471] usb usb2-port1: attempt power cycle [ 54.960185][ T1050] fuse: Unknown parameter 'roothode' [ 55.008913][ T1057] netlink: 'syz.3.233': attribute type 4 has an invalid length. [ 55.016686][ T1057] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.233'. [ 55.027492][ T1057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 55.064712][ T1063] rust_binder: 241: no such ref 1 [ 55.071124][ T1063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:241 [ 55.164750][ T471] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 55.195097][ T471] usb 2-1: Invalid ep0 maxpacket: 32 [ 55.208522][ T1107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.217121][ T1107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.226666][ T1107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.235269][ T1107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.324705][ T471] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 55.345113][ T471] usb 2-1: Invalid ep0 maxpacket: 32 [ 55.350704][ T471] usb usb2-port1: unable to enumerate USB device [ 55.394573][ T1111] random: crng reseeded on system resumption [ 55.694728][ T368] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 55.704707][ T325] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 55.764593][ T1117] netlink: 'syz.2.245': attribute type 15 has an invalid length. [ 55.772518][ T1117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.245'. [ 55.782138][ T1117] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 55.790037][ T1117] netlink: 'syz.2.245': attribute type 2 has an invalid length. [ 55.809357][ T1120] loop5: detected capacity change from 0 to 7 [ 55.846358][ T368] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.854850][ T368] usb 1-1: not running at top speed; connect to a high speed hub [ 55.856184][ T325] usb 4-1: unable to get BOS descriptor or descriptor too short [ 55.871678][ T325] usb 4-1: config index 0 descriptor too short (expected 52242, got 18) [ 55.871924][ T368] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 138, changing to 4 [ 55.880136][ T325] usb 4-1: config 247 has too many interfaces: 118, using maximum allowed: 32 [ 55.896087][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 55.905719][ T325] usb 4-1: config 247 has an invalid descriptor of length 89, skipping remainder of the config [ 55.911507][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 55.922419][ T325] usb 4-1: config 247 has 0 interfaces, different from the descriptor's value: 118 [ 55.932818][ T368] usb 1-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 55.940439][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 55.959261][ T368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.959288][ T368] usb 1-1: Product: syz [ 55.959303][ T368] usb 1-1: Manufacturer: syz [ 55.967305][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 55.972019][ T368] usb 1-1: SerialNumber: syz [ 55.978656][ T325] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=22.1a [ 55.998905][ T325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.014724][ T325] usb 4-1: Product: syz [ 56.018944][ T325] usb 4-1: Manufacturer: syz [ 56.023539][ T325] usb 4-1: SerialNumber: syz [ 56.099196][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 56.099213][ T36] audit: type=1400 audit(1774257882.119:310): avc: denied { nlmsg_write } for pid=1123 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 56.099607][ T1125] overlayfs: missing 'workdir' [ 56.114553][ T36] audit: type=1400 audit(1774257882.119:311): avc: denied { nlmsg_read } for pid=1123 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 56.191740][ T36] audit: type=1400 audit(1774257882.209:312): avc: denied { ioctl } for pid=1114 comm="syz.0.244" path="socket:[7515]" dev="sockfs" ino=7515 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.210076][ T368] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 56.225507][ T368] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 56.243523][ T368] usb 1-1: USB disconnect, device number 15 [ 56.265763][ T1129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.275442][ T1129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.796224][ T36] audit: type=1400 audit(1774257882.819:313): avc: denied { setopt } for pid=1131 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.802380][ T1132] overlayfs: failed to resolve './file1/file0': -2 [ 56.845253][ T1136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.854275][ T1136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.074779][ T368] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 57.193095][ T36] audit: type=1400 audit(1774257883.209:314): avc: denied { mounton } for pid=1139 comm="syz.1.254" path="/62/file0" dev="cgroup" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 57.194873][ T1140] option changes via remount are deprecated (pid=1139 comm=syz.1.254) [ 57.220432][ T36] audit: type=1400 audit(1774257883.209:315): avc: denied { remount } for pid=1139 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.256902][ T368] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 57.273966][ T368] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 57.288335][ T368] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 57.298903][ T368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.367044][ T45] kernel read not supported for file [fscontext] (pid: 45 comm: kworker/1:1) [ 57.380887][ T36] audit: type=1400 audit(1774257883.399:316): avc: denied { validate_trans } for pid=1153 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 57.428131][ T1164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 57.440878][ T1166] FAULT_INJECTION: forcing a failure. [ 57.440878][ T1166] name failslab, interval 1, probability 0, space 0, times 1 [ 57.453834][ T1166] CPU: 1 UID: 0 PID: 1166 Comm: syz.1.264 Not tainted syzkaller #0 1899ccadb87a2390231fcfce9a7a94d2fcd39aaf [ 57.453866][ T1166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 57.453878][ T1166] Call Trace: [ 57.453887][ T1166] [ 57.453894][ T1166] __dump_stack+0x21/0x30 [ 57.453921][ T1166] dump_stack_lvl+0x140/0x1c0 [ 57.453944][ T1166] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.453966][ T1166] ? __vfs_getxattr+0x421/0x450 [ 57.453989][ T1166] dump_stack+0x19/0x20 [ 57.454009][ T1166] should_fail_ex+0x3d7/0x530 [ 57.454031][ T1166] ? ovl_alloc_entry+0x42/0x110 [ 57.454051][ T1166] should_failslab+0xac/0x100 [ 57.454069][ T1166] __kmalloc_noprof+0x69/0x500 [ 57.454094][ T1166] ? ovl_alloc_entry+0x42/0x110 [ 57.454111][ T1166] ovl_alloc_entry+0x42/0x110 [ 57.454128][ T1166] ? ovl_lookup+0x11fc/0x1d60 [ 57.454143][ T1166] ovl_lookup+0x14a6/0x1d60 [ 57.454162][ T1166] ? __cfi_ovl_lookup+0x10/0x10 [ 57.454179][ T1166] ? __cfi_d_alloc_parallel+0x10/0x10 [ 57.454202][ T1166] ? __kasan_check_write+0x18/0x20 [ 57.454224][ T1166] ? rwsem_read_trylock+0x274/0x5b0 [ 57.454249][ T1166] ? downgrade_write+0x460/0x460 [ 57.454273][ T1166] ? unwind_get_return_address+0x51/0x90 [ 57.454296][ T1166] __lookup_slow+0x2e5/0x420 [ 57.454316][ T1166] ? lookup_one_len+0x300/0x300 [ 57.454333][ T1166] ? down_read+0x7f/0xe0 [ 57.454354][ T1166] lookup_slow+0x57/0x80 [ 57.454372][ T1166] walk_component+0x302/0x440 [ 57.454398][ T1166] path_lookupat+0x180/0x4a0 [ 57.454416][ T1166] filename_lookup+0x228/0x580 [ 57.454434][ T1166] ? __cfi_filename_lookup+0x10/0x10 [ 57.454455][ T1166] ? __check_object_size+0x527/0x830 [ 57.454479][ T1166] ? __cfi___check_object_size+0x10/0x10 [ 57.454504][ T1166] ? kasan_save_alloc_info+0x40/0x50 [ 57.454529][ T1166] vfs_statx+0x106/0x210 [ 57.454547][ T1166] ? vfs_fstatat+0x1d0/0x1d0 [ 57.454563][ T1166] ? __kasan_check_write+0x18/0x20 [ 57.454600][ T1166] vfs_fstatat+0xe5/0x1d0 [ 57.454615][ T1166] __se_sys_newfstatat+0x127/0x3c0 [ 57.454632][ T1166] ? __x64_sys_newfstatat+0xc0/0xc0 [ 57.454648][ T1166] ? vfs_write+0x9a4/0xf90 [ 57.454670][ T1166] ? __cfi_vfs_write+0x10/0x10 [ 57.454691][ T1166] ? __kasan_check_write+0x18/0x20 [ 57.454712][ T1166] ? mutex_unlock+0x90/0x240 [ 57.454730][ T1166] ? __cfi_ksys_write+0x10/0x10 [ 57.454754][ T1166] __x64_sys_newfstatat+0x9f/0xc0 [ 57.454773][ T1166] x64_sys_call+0x1821/0x2ee0 [ 57.454797][ T1166] do_syscall_64+0x57/0xf0 [ 57.454820][ T1166] ? clear_bhb_loop+0x50/0xa0 [ 57.454844][ T1166] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.454868][ T1166] RIP: 0033:0x7f738df9c799 [ 57.454886][ T1166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.454903][ T1166] RSP: 002b:00007f738eed2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 57.454926][ T1166] RAX: ffffffffffffffda RBX: 00007f738e215fa0 RCX: 00007f738df9c799 [ 57.454941][ T1166] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 57.454956][ T1166] RBP: 00007f738eed2090 R08: 0000000000000000 R09: 0000000000000000 [ 57.454969][ T1166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.454982][ T1166] R13: 00007f738e216038 R14: 00007f738e215fa0 R15: 00007fff851e0ca8 [ 57.454999][ T1166] [ 57.476852][ T1168] input: syz1 as /devices/virtual/input/input11 [ 57.852088][ T1175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.861587][ T1175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.919953][ T1134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.930442][ T1134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.024884][ T325] usb 4-1: USB disconnect, device number 22 [ 58.043435][ T67] hid (null): unknown global tag 0xc [ 58.051212][ T67] hid (null): report_id 41794 is invalid [ 58.057535][ T67] hid (null): unknown global tag 0xc [ 58.062922][ T67] hid (null): invalid report_count 52070 [ 58.069580][ T67] hid (null): unknown global tag 0xc [ 58.076117][ T67] hid-generic 0003:0007:00FF.0006: unknown main item tag 0x0 [ 58.084771][ T67] hid-generic 0003:0007:00FF.0006: unknown main item tag 0xd [ 58.093515][ T67] hid-generic 0003:0007:00FF.0006: unknown global tag 0xc [ 58.101336][ T67] hid-generic 0003:0007:00FF.0006: item 0 0 1 12 parsing failed [ 58.109996][ T67] hid-generic 0003:0007:00FF.0006: probe with driver hid-generic failed with error -22 [ 58.128447][ T368] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 58.160146][ T368] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input10 [ 58.178304][ T36] audit: type=1400 audit(1774257884.189:317): avc: denied { create } for pid=1183 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 58.202220][ T368] usb 1-1: USB disconnect, device number 16 [ 58.220869][ T1190] netlink: 'syz.3.273': attribute type 3 has an invalid length. [ 58.337935][ T1223] FAULT_INJECTION: forcing a failure. [ 58.337935][ T1223] name failslab, interval 1, probability 0, space 0, times 0 [ 58.352535][ T1223] CPU: 0 UID: 0 PID: 1223 Comm: syz.3.276 Not tainted syzkaller #0 1899ccadb87a2390231fcfce9a7a94d2fcd39aaf [ 58.352568][ T1223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 58.352579][ T1223] Call Trace: [ 58.352585][ T1223] [ 58.352593][ T1223] __dump_stack+0x21/0x30 [ 58.352640][ T1223] dump_stack_lvl+0x140/0x1c0 [ 58.352661][ T1223] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.352682][ T1223] ? __vfs_getxattr+0x421/0x450 [ 58.352704][ T1223] dump_stack+0x19/0x20 [ 58.352724][ T1223] should_fail_ex+0x3d7/0x530 [ 58.352744][ T1223] ? ovl_alloc_entry+0x42/0x110 [ 58.352763][ T1223] should_failslab+0xac/0x100 [ 58.352780][ T1223] __kmalloc_noprof+0x69/0x500 [ 58.352803][ T1223] ? ovl_alloc_entry+0x42/0x110 [ 58.352821][ T1223] ovl_alloc_entry+0x42/0x110 [ 58.352838][ T1223] ? ovl_lookup+0x11fc/0x1d60 [ 58.352855][ T1223] ovl_lookup+0x14a6/0x1d60 [ 58.352875][ T1223] ? __cfi_ovl_lookup+0x10/0x10 [ 58.352893][ T1223] ? __cfi_d_alloc_parallel+0x10/0x10 [ 58.352915][ T1223] ? __kasan_check_write+0x18/0x20 [ 58.352935][ T1223] ? rwsem_read_trylock+0x274/0x5b0 [ 58.352960][ T1223] ? downgrade_write+0x460/0x460 [ 58.352981][ T1223] ? unwind_get_return_address+0x51/0x90 [ 58.353002][ T1223] __lookup_slow+0x2e5/0x420 [ 58.353020][ T1223] ? lookup_one_len+0x300/0x300 [ 58.353037][ T1223] ? down_read+0x7f/0xe0 [ 58.353058][ T1223] lookup_slow+0x57/0x80 [ 58.353076][ T1223] walk_component+0x302/0x440 [ 58.353101][ T1223] path_lookupat+0x180/0x4a0 [ 58.353118][ T1223] filename_lookup+0x228/0x580 [ 58.353135][ T1223] ? __cfi_filename_lookup+0x10/0x10 [ 58.353155][ T1223] ? __check_object_size+0x527/0x830 [ 58.353176][ T1223] ? __cfi___check_object_size+0x10/0x10 [ 58.353197][ T1223] ? kasan_save_alloc_info+0x40/0x50 [ 58.353218][ T1223] vfs_statx+0x106/0x210 [ 58.353232][ T1223] ? vfs_fstatat+0x1d0/0x1d0 [ 58.353244][ T1223] ? __kasan_check_write+0x18/0x20 [ 58.353258][ T1223] vfs_fstatat+0xe5/0x1d0 [ 58.353267][ T1223] __se_sys_newfstatat+0x127/0x3c0 [ 58.353278][ T1223] ? __x64_sys_newfstatat+0xc0/0xc0 [ 58.353288][ T1223] ? vfs_write+0x9a4/0xf90 [ 58.353303][ T1223] ? __cfi_vfs_write+0x10/0x10 [ 58.353317][ T1223] ? __kasan_check_write+0x18/0x20 [ 58.353330][ T1223] ? mutex_unlock+0x90/0x240 [ 58.353344][ T1223] ? __cfi_ksys_write+0x10/0x10 [ 58.353358][ T1223] __x64_sys_newfstatat+0x9f/0xc0 [ 58.353369][ T1223] x64_sys_call+0x1821/0x2ee0 [ 58.353384][ T1223] do_syscall_64+0x57/0xf0 [ 58.353398][ T1223] ? clear_bhb_loop+0x50/0xa0 [ 58.353412][ T1223] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.353425][ T1223] RIP: 0033:0x7f5c3f99c799 [ 58.353436][ T1223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.353446][ T1223] RSP: 002b:00007f5c40784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 58.353459][ T1223] RAX: ffffffffffffffda RBX: 00007f5c3fc15fa0 RCX: 00007f5c3f99c799 [ 58.353468][ T1223] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 58.353476][ T1223] RBP: 00007f5c40784090 R08: 0000000000000000 R09: 0000000000000000 [ 58.353483][ T1223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.353490][ T1223] R13: 00007f5c3fc16038 R14: 00007f5c3fc15fa0 R15: 00007ffedb25ce98 [ 58.353499][ T1223] [ 58.759075][ T1231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.767807][ T1231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.774722][ T309] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 58.783985][ T36] audit: type=1400 audit(1774257884.799:318): avc: denied { getopt } for pid=1230 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.825793][ T1235] netlink: 'syz.1.281': attribute type 16 has an invalid length. [ 58.876505][ T1239] netlink: 104 bytes leftover after parsing attributes in process `syz.1.283'. [ 58.898714][ T1239] Invalid argument reading file caps for ./file0 [ 58.954766][ T309] usb 1-1: Using ep0 maxpacket: 32 [ 58.965636][ T309] usb 1-1: unable to get BOS descriptor or descriptor too short [ 58.975010][ T309] usb 1-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 58.985445][ T309] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.005723][ T309] usb 1-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 59.023840][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.032324][ T309] usb 1-1: Product: syz [ 59.036951][ T309] usb 1-1: Manufacturer: syz [ 59.041656][ T309] usb 1-1: SerialNumber: syz [ 59.132117][ T1253] FAULT_INJECTION: forcing a failure. [ 59.132117][ T1253] name failslab, interval 1, probability 0, space 0, times 0 [ 59.144991][ T1253] CPU: 1 UID: 0 PID: 1253 Comm: syz.3.288 Not tainted syzkaller #0 1899ccadb87a2390231fcfce9a7a94d2fcd39aaf [ 59.145028][ T1253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.145041][ T1253] Call Trace: [ 59.145047][ T1253] [ 59.145055][ T1253] __dump_stack+0x21/0x30 [ 59.145084][ T1253] dump_stack_lvl+0x140/0x1c0 [ 59.145108][ T1253] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.145132][ T1253] ? __kasan_check_write+0x18/0x20 [ 59.145157][ T1253] dump_stack+0x19/0x20 [ 59.145179][ T1253] should_fail_ex+0x3d7/0x530 [ 59.145202][ T1253] should_failslab+0xac/0x100 [ 59.145220][ T1253] ? __cfi_ovl_inode_test+0x10/0x10 [ 59.145238][ T1253] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 59.145265][ T1253] ? __cfi_ovl_inode_test+0x10/0x10 [ 59.145282][ T1253] ? ovl_alloc_inode+0x3b/0x130 [ 59.145299][ T1253] ? __cfi_ilookup5+0x10/0x10 [ 59.145319][ T1253] ? __cfi_ovl_inode_test+0x10/0x10 [ 59.145336][ T1253] ? __cfi_ovl_alloc_inode+0x10/0x10 [ 59.145362][ T1253] ovl_alloc_inode+0x3b/0x130 [ 59.145379][ T1253] ? __cfi_ovl_inode_test+0x10/0x10 [ 59.145396][ T1253] ? __cfi_ovl_alloc_inode+0x10/0x10 [ 59.145413][ T1253] alloc_inode+0x7a/0x270 [ 59.145431][ T1253] ? __cfi_ovl_inode_set+0x10/0x10 [ 59.145449][ T1253] ? __cfi_ovl_inode_test+0x10/0x10 [ 59.145467][ T1253] iget5_locked+0x53/0xb0 [ 59.145486][ T1253] ? __cfi_ovl_inode_set+0x10/0x10 [ 59.145504][ T1253] ovl_get_inode+0x62c/0x10a0 [ 59.145525][ T1253] ? __cfi_ovl_get_inode+0x10/0x10 [ 59.145542][ T1253] ? ovl_stack_cpy+0x34/0xd0 [ 59.145563][ T1253] ovl_lookup+0x1958/0x1d60 [ 59.145586][ T1253] ? __cfi_ovl_lookup+0x10/0x10 [ 59.145604][ T1253] ? __cfi_d_alloc_parallel+0x10/0x10 [ 59.145629][ T1253] ? rwsem_read_trylock+0x274/0x5b0 [ 59.145656][ T1253] ? downgrade_write+0x460/0x460 [ 59.145678][ T1253] ? unwind_get_return_address+0x51/0x90 [ 59.145701][ T1253] __lookup_slow+0x2e5/0x420 [ 59.145720][ T1253] ? lookup_one_len+0x300/0x300 [ 59.145737][ T1253] ? down_read+0x7f/0xe0 [ 59.145758][ T1253] lookup_slow+0x57/0x80 [ 59.145775][ T1253] walk_component+0x302/0x440 [ 59.145801][ T1253] path_lookupat+0x180/0x4a0 [ 59.145819][ T1253] filename_lookup+0x228/0x580 [ 59.145837][ T1253] ? __cfi_filename_lookup+0x10/0x10 [ 59.145857][ T1253] ? __check_object_size+0x527/0x830 [ 59.145883][ T1253] ? __cfi___check_object_size+0x10/0x10 [ 59.145908][ T1253] ? kasan_save_alloc_info+0x40/0x50 [ 59.145931][ T1253] vfs_statx+0x106/0x210 [ 59.145949][ T1253] ? vfs_fstatat+0x1d0/0x1d0 [ 59.145965][ T1253] ? __kasan_check_write+0x18/0x20 [ 59.145990][ T1253] vfs_fstatat+0xe5/0x1d0 [ 59.146007][ T1253] __se_sys_newfstatat+0x127/0x3c0 [ 59.146026][ T1253] ? __x64_sys_newfstatat+0xc0/0xc0 [ 59.146046][ T1253] ? vfs_write+0x9a4/0xf90 [ 59.146071][ T1253] ? __cfi_vfs_write+0x10/0x10 [ 59.146095][ T1253] ? __kasan_check_write+0x18/0x20 [ 59.146119][ T1253] ? mutex_unlock+0x90/0x240 [ 59.146139][ T1253] ? __cfi_ksys_write+0x10/0x10 [ 59.146165][ T1253] __x64_sys_newfstatat+0x9f/0xc0 [ 59.146184][ T1253] x64_sys_call+0x1821/0x2ee0 [ 59.146210][ T1253] do_syscall_64+0x57/0xf0 [ 59.146233][ T1253] ? clear_bhb_loop+0x50/0xa0 [ 59.146257][ T1253] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.146281][ T1253] RIP: 0033:0x7f5c3f99c799 [ 59.146298][ T1253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.146315][ T1253] RSP: 002b:00007f5c40784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 59.146337][ T1253] RAX: ffffffffffffffda RBX: 00007f5c3fc15fa0 RCX: 00007f5c3f99c799 [ 59.146361][ T1253] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 59.146375][ T1253] RBP: 00007f5c40784090 R08: 0000000000000000 R09: 0000000000000000 [ 59.146389][ T1253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.146401][ T1253] R13: 00007f5c3fc16038 R14: 00007f5c3fc15fa0 R15: 00007ffedb25ce98 [ 59.146417][ T1253] [ 59.146445][ T1253] overlayfs: failed to get inode (-12) [ 59.550807][ T309] usb 1-1: USB disconnect, device number 17 [ 59.582788][ T36] audit: type=1400 audit(1774257885.599:319): avc: denied { mounton } for pid=1258 comm="syz.3.290" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.674952][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 59.739506][ T1261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.748551][ T1261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.826184][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 59.834299][ T31] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 59.843657][ T31] usb 2-1: config 179 has no interface number 0 [ 59.850076][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 59.861447][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 59.873238][ T31] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 59.883679][ T31] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 59.897836][ T31] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 59.908087][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.917236][ T1246] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 60.064741][ T309] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 60.132551][ T325] usb 2-1: USB disconnect, device number 22 [ 60.216167][ T309] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.226977][ T309] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 60.237773][ T309] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 60.246925][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.255132][ T309] usb 1-1: Product: syz [ 60.259537][ T309] usb 1-1: Manufacturer: syz [ 60.264341][ T309] usb 1-1: SerialNumber: syz [ 60.271562][ T309] usb 1-1: config 0 descriptor?? [ 60.277520][ T1270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.295'. [ 60.319660][ T1278] FAULT_INJECTION: forcing a failure. [ 60.319660][ T1278] name failslab, interval 1, probability 0, space 0, times 0 [ 60.332814][ T1278] CPU: 0 UID: 0 PID: 1278 Comm: syz.2.298 Not tainted syzkaller #0 1899ccadb87a2390231fcfce9a7a94d2fcd39aaf [ 60.332851][ T1278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.332867][ T1278] Call Trace: [ 60.332876][ T1278] [ 60.332883][ T1278] __dump_stack+0x21/0x30 [ 60.332902][ T1278] dump_stack_lvl+0x140/0x1c0 [ 60.332916][ T1278] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.332930][ T1278] dump_stack+0x19/0x20 [ 60.332942][ T1278] should_fail_ex+0x3d7/0x530 [ 60.332956][ T1278] should_failslab+0xac/0x100 [ 60.332966][ T1278] __kmalloc_cache_noprof+0x41/0x470 [ 60.332981][ T1278] ? lockref_get+0x131/0x1c0 [ 60.333000][ T1278] ? inode_doinit_use_xattr+0x6a/0x550 [ 60.333016][ T1278] ? __kasan_check_write+0x18/0x20 [ 60.333030][ T1278] inode_doinit_use_xattr+0x6a/0x550 [ 60.333046][ T1278] inode_doinit_with_dentry+0x770/0xde0 [ 60.333061][ T1278] ? sb_finish_set_opts+0xa40/0xa40 [ 60.333077][ T1278] ? __kasan_slab_free+0x6a/0x80 [ 60.333086][ T1278] selinux_d_instantiate+0x2b/0x40 [ 60.333101][ T1278] security_d_instantiate+0xb8/0xf0 [ 60.333116][ T1278] d_splice_alias+0x71/0x3a0 [ 60.333130][ T1278] ovl_lookup+0x1ba0/0x1d60 [ 60.333143][ T1278] ? __cfi_ovl_lookup+0x10/0x10 [ 60.333154][ T1278] ? __cfi_d_alloc_parallel+0x10/0x10 [ 60.333168][ T1278] ? rwsem_read_trylock+0x274/0x5b0 [ 60.333182][ T1278] ? downgrade_write+0x460/0x460 [ 60.333195][ T1278] ? unwind_get_return_address+0x51/0x90 [ 60.333207][ T1278] __lookup_slow+0x2e5/0x420 [ 60.333218][ T1278] ? lookup_one_len+0x300/0x300 [ 60.333229][ T1278] ? down_read+0x7f/0xe0 [ 60.333241][ T1278] lookup_slow+0x57/0x80 [ 60.333250][ T1278] walk_component+0x302/0x440 [ 60.333264][ T1278] path_lookupat+0x180/0x4a0 [ 60.333274][ T1278] filename_lookup+0x228/0x580 [ 60.333283][ T1278] ? __cfi_filename_lookup+0x10/0x10 [ 60.333295][ T1278] ? __check_object_size+0x527/0x830 [ 60.333309][ T1278] ? __cfi___check_object_size+0x10/0x10 [ 60.333323][ T1278] ? kasan_save_alloc_info+0x40/0x50 [ 60.333336][ T1278] vfs_statx+0x106/0x210 [ 60.333345][ T1278] ? vfs_fstatat+0x1d0/0x1d0 [ 60.333354][ T1278] ? __kasan_check_write+0x18/0x20 [ 60.333368][ T1278] vfs_fstatat+0xe5/0x1d0 [ 60.333377][ T1278] __se_sys_newfstatat+0x127/0x3c0 [ 60.333388][ T1278] ? __x64_sys_newfstatat+0xc0/0xc0 [ 60.333398][ T1278] ? vfs_write+0x9a4/0xf90 [ 60.333413][ T1278] ? __cfi_vfs_write+0x10/0x10 [ 60.333426][ T1278] ? __kasan_check_write+0x18/0x20 [ 60.333439][ T1278] ? mutex_unlock+0x90/0x240 [ 60.333450][ T1278] ? __cfi_ksys_write+0x10/0x10 [ 60.333464][ T1278] __x64_sys_newfstatat+0x9f/0xc0 [ 60.333480][ T1278] x64_sys_call+0x1821/0x2ee0 [ 60.333495][ T1278] do_syscall_64+0x57/0xf0 [ 60.333508][ T1278] ? clear_bhb_loop+0x50/0xa0 [ 60.333523][ T1278] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.333537][ T1278] RIP: 0033:0x7f3bc2b9c799 [ 60.333572][ T1278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.333588][ T1278] RSP: 002b:00007f3bc39c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 60.333601][ T1278] RAX: ffffffffffffffda RBX: 00007f3bc2e15fa0 RCX: 00007f3bc2b9c799 [ 60.333613][ T1278] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 60.333621][ T1278] RBP: 00007f3bc39c6090 R08: 0000000000000000 R09: 0000000000000000 [ 60.333628][ T1278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.333634][ T1278] R13: 00007f3bc2e16038 R14: 00007f3bc2e15fa0 R15: 00007fffe8323cf8 [ 60.333644][ T1278] [ 60.514702][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 60.521142][ T67] usb 1-1: USB disconnect, device number 18 [ 60.695836][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.718747][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.728556][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.735845][ T1280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.741497][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.750763][ T1280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.759012][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.776254][ T31] usb 4-1: config 0 descriptor?? [ 61.084688][ T45] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 61.184460][ T31] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 61.192135][ T31] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 61.199766][ T31] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 61.207248][ T31] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 61.214973][ T31] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 61.222530][ T31] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 61.230032][ T31] plantronics 0003:047F:FFFF.0007: item fetching failed at offset 13/15 [ 61.238608][ T31] plantronics 0003:047F:FFFF.0007: parse failed [ 61.245081][ T31] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 61.255334][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.267714][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.277548][ T45] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 61.286827][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 61.288067][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 61.288083][ T36] audit: type=1400 audit(1774257887.309:330): avc: denied { listen } for pid=1294 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.294920][ T45] usb 2-1: SerialNumber: syz [ 61.325866][ T309] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 61.393661][ T31] usb 4-1: USB disconnect, device number 23 [ 61.464662][ T309] usb 1-1: device descriptor read/64, error -71 [ 61.542720][ T36] audit: type=1400 audit(1774257887.559:331): avc: denied { ioctl } for pid=1284 comm="syz.1.301" path="socket:[8020]" dev="sockfs" ino=8020 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.570046][ T45] usb 2-1: 0:2 : does not exist [ 61.577630][ T45] usb 2-1: USB disconnect, device number 23 [ 61.704780][ T309] usb 1-1: device descriptor read/64, error -71 [ 61.944735][ T309] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 62.085074][ T309] usb 1-1: device descriptor read/64, error -71 [ 62.086093][ T1304] FAULT_INJECTION: forcing a failure. [ 62.086093][ T1304] name failslab, interval 1, probability 0, space 0, times 0 [ 62.104067][ T1304] CPU: 1 UID: 0 PID: 1304 Comm: syz.1.309 Not tainted syzkaller #0 1899ccadb87a2390231fcfce9a7a94d2fcd39aaf [ 62.104101][ T1304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 62.104115][ T1304] Call Trace: [ 62.104120][ T1304] [ 62.104129][ T1304] __dump_stack+0x21/0x30 [ 62.104159][ T1304] dump_stack_lvl+0x140/0x1c0 [ 62.104183][ T1304] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.104208][ T1304] dump_stack+0x19/0x20 [ 62.104231][ T1304] should_fail_ex+0x3d7/0x530 [ 62.104255][ T1304] should_failslab+0xac/0x100 [ 62.104274][ T1304] __kmalloc_node_track_caller_noprof+0x68/0x4f0 [ 62.104302][ T1304] ? sidtab_sid2str_get+0x135/0x360 [ 62.104324][ T1304] ? avc_has_perm_noaudit+0x26c/0x360 [ 62.104351][ T1304] kmemdup_noprof+0x31/0x80 [ 62.104383][ T1304] sidtab_sid2str_get+0x135/0x360 [ 62.104405][ T1304] security_sid_to_context_core+0x30d/0x5d0 [ 62.104426][ T1304] security_sid_to_context_force+0x31/0x40 [ 62.104447][ T1304] selinux_inode_getsecurity+0x3ee/0x490 [ 62.104470][ T1304] ? __cfi_selinux_inode_getsecurity+0x10/0x10 [ 62.104492][ T1304] ? cap_inode_getsecurity+0xb8/0x980 [ 62.104515][ T1304] ? __cfi_selinux_inode_getxattr+0x10/0x10 [ 62.104538][ T1304] ? inode_doinit_with_dentry+0x770/0xde0 [ 62.104566][ T1304] ? selinux_d_instantiate+0x2b/0x40 [ 62.104591][ T1304] ? security_d_instantiate+0xb8/0xf0 [ 62.104619][ T1304] ? xattr_permission+0x47/0x450 [ 62.104643][ T1304] security_inode_getsecurity+0x108/0x1a0 [ 62.104665][ T1304] vfs_getxattr+0x1b8/0x2b0 [ 62.104689][ T1304] ? __cfi_vfs_getxattr+0x10/0x10 [ 62.104712][ T1304] ? __kasan_check_write+0x18/0x20 [ 62.104738][ T1304] ovl_other_xattr_get+0x109/0x160 [ 62.104771][ T1304] ? __cfi_ovl_other_xattr_get+0x10/0x10 [ 62.104798][ T1304] ? walk_component+0x302/0x440 [ 62.104822][ T1304] ? kasan_save_alloc_info+0x40/0x50 [ 62.104842][ T1304] ? __cfi_ovl_other_xattr_get+0x10/0x10 [ 62.104866][ T1304] __vfs_getxattr+0x421/0x450 [ 62.104887][ T1304] inode_doinit_use_xattr+0xb6/0x550 [ 62.104905][ T1304] inode_doinit_with_dentry+0x770/0xde0 [ 62.104921][ T1304] ? sb_finish_set_opts+0xa40/0xa40 [ 62.104936][ T1304] ? __kasan_slab_free+0x6a/0x80 [ 62.104945][ T1304] selinux_d_instantiate+0x2b/0x40 [ 62.104960][ T1304] security_d_instantiate+0xb8/0xf0 [ 62.104974][ T1304] d_splice_alias+0x71/0x3a0 [ 62.104988][ T1304] ovl_lookup+0x1ba0/0x1d60 [ 62.105002][ T1304] ? __cfi_ovl_lookup+0x10/0x10 [ 62.105012][ T1304] ? __cfi_d_alloc_parallel+0x10/0x10 [ 62.105026][ T1304] ? rwsem_read_trylock+0x274/0x5b0 [ 62.105042][ T1304] ? downgrade_write+0x460/0x460 [ 62.105055][ T1304] ? unwind_get_return_address+0x51/0x90 [ 62.105068][ T1304] __lookup_slow+0x2e5/0x420 [ 62.105078][ T1304] ? lookup_one_len+0x300/0x300 [ 62.105087][ T1304] ? down_read+0x7f/0xe0 [ 62.105099][ T1304] lookup_slow+0x57/0x80 [ 62.105108][ T1304] walk_component+0x302/0x440 [ 62.105125][ T1304] path_lookupat+0x180/0x4a0 [ 62.105134][ T1304] filename_lookup+0x228/0x580 [ 62.105144][ T1304] ? __cfi_filename_lookup+0x10/0x10 [ 62.105155][ T1304] ? __check_object_size+0x527/0x830 [ 62.105170][ T1304] ? __cfi___check_object_size+0x10/0x10 [ 62.105183][ T1304] ? kasan_save_alloc_info+0x40/0x50 [ 62.105196][ T1304] vfs_statx+0x106/0x210 [ 62.105206][ T1304] ? vfs_fstatat+0x1d0/0x1d0 [ 62.105215][ T1304] ? __kasan_check_write+0x18/0x20 [ 62.105229][ T1304] vfs_fstatat+0xe5/0x1d0 [ 62.105239][ T1304] __se_sys_newfstatat+0x127/0x3c0 [ 62.105250][ T1304] ? __x64_sys_newfstatat+0xc0/0xc0 [ 62.105260][ T1304] ? vfs_write+0x9a4/0xf90 [ 62.105274][ T1304] ? __cfi_vfs_write+0x10/0x10 [ 62.105287][ T1304] ? __kasan_check_write+0x18/0x20 [ 62.105300][ T1304] ? mutex_unlock+0x90/0x240 [ 62.105311][ T1304] ? xfd_validate_state+0x68/0x140 [ 62.105324][ T1304] ? __cfi_ksys_write+0x10/0x10 [ 62.105338][ T1304] __x64_sys_newfstatat+0x9f/0xc0 [ 62.105349][ T1304] x64_sys_call+0x1821/0x2ee0 [ 62.105369][ T1304] do_syscall_64+0x57/0xf0 [ 62.105382][ T1304] ? clear_bhb_loop+0x50/0xa0 [ 62.105396][ T1304] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.105409][ T1304] RIP: 0033:0x7f738df9c799 [ 62.105420][ T1304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.105430][ T1304] RSP: 002b:00007f738eed2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 62.105442][ T1304] RAX: ffffffffffffffda RBX: 00007f738e215fa0 RCX: 00007f738df9c799 [ 62.105451][ T1304] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 62.105459][ T1304] RBP: 00007f738eed2090 R08: 0000000000000000 R09: 0000000000000000 [ 62.105466][ T1304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.105473][ T1304] R13: 00007f738e216038 R14: 00007f738e215fa0 R15: 00007fff851e0ca8 [ 62.105482][ T1304] [ 62.600525][ T1304] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=overlay ino=502 [ 62.654733][ T31] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 62.734715][ T309] usb 1-1: device descriptor read/64, error -71 [ 62.805938][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.816317][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.826862][ T31] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 62.836207][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.844727][ T31] usb 4-1: Product: syz [ 62.848900][ T31] usb 4-1: Manufacturer: syz [ 62.853608][ T31] usb 4-1: SerialNumber: syz [ 62.858641][ T309] usb usb1-port1: attempt power cycle [ 62.865031][ T325] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 63.014679][ T325] usb 2-1: Using ep0 maxpacket: 16 [ 63.021175][ T325] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.032586][ T325] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 63.042283][ T325] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 63.052135][ T325] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 63.066010][ T325] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.076196][ T325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 63.078695][ T31] usb 4-1: 0:1 : does not exist [ 63.084713][ T325] usb 2-1: SerialNumber: syz [ 63.089243][ T31] usb 4-1: unit 0 not found! [ 63.099763][ T325] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 63.102363][ T31] usb 4-1: USB disconnect, device number 24 [ 63.108781][ T325] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 63.204823][ T309] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 63.225787][ T309] usb 1-1: device descriptor read/8, error -71 [ 63.303235][ T31] usb 2-1: USB disconnect, device number 24 [ 63.355727][ T309] usb 1-1: device descriptor read/8, error -71 [ 63.593298][ T36] audit: type=1400 audit(1774257889.609:332): avc: denied { mounton } for pid=1308 comm="syz.3.311" path="/57/file0" dev="tmpfs" ino=399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 63.595422][ T1309] fuse: Bad value for 'rootmode' [ 63.616251][ T309] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 63.629345][ T36] audit: type=1400 audit(1774257889.619:333): avc: denied { mounton } for pid=1308 comm="syz.3.311" path="/57/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 63.665676][ T309] usb 1-1: device descriptor read/8, error -71 [ 63.701530][ T36] audit: type=1400 audit(1774257889.719:334): avc: denied { relabelfrom } for pid=1313 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 63.721648][ T36] audit: type=1400 audit(1774257889.719:335): avc: denied { relabelto } for pid=1313 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 63.741398][ T36] audit: type=1400 audit(1774257889.719:336): avc: denied { mounton } for pid=1313 comm="syz.3.313" path="/proc/167/cgroup" dev="proc" ino=9235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 63.796025][ T309] usb 1-1: device descriptor read/8, error -71 [ 63.905063][ T309] usb usb1-port1: unable to enumerate USB device [ 64.094661][ T67] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 64.144669][ T36] audit: type=1400 audit(1774257890.159:337): avc: denied { mounton } for pid=1323 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 64.175076][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.182343][ T1323] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.190638][ T1323] bridge_slave_0: entered allmulticast mode [ 64.197413][ T1323] bridge_slave_0: entered promiscuous mode [ 64.204370][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.213508][ T1323] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.220942][ T1323] bridge_slave_1: entered allmulticast mode [ 64.227469][ T1323] bridge_slave_1: entered promiscuous mode [ 64.255535][ T67] usb 4-1: device descriptor read/64, error -71 [ 64.269125][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.276362][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.284280][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.291737][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.317876][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.325948][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.335460][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.342629][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.352343][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.359429][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.385166][ T1323] veth0_vlan: entered promiscuous mode [ 64.396227][ T1323] veth1_macvtap: entered promiscuous mode [ 64.414282][ T36] audit: type=1400 audit(1774257890.429:338): avc: denied { mounton } for pid=1323 comm="syz-executor" path="/root/syzkaller.y4w8GX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.455331][ T1335] FAULT_INJECTION: forcing a failure. [ 64.455331][ T1335] name failslab, interval 1, probability 0, space 0, times 0 [ 64.468502][ T1335] CPU: 0 UID: 0 PID: 1335 Comm: syz.4.318 Not tainted syzkaller #0 1899ccadb87a2390231fcfce9a7a94d2fcd39aaf [ 64.468534][ T1335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.468544][ T1335] Call Trace: [ 64.468549][ T1335] [ 64.468555][ T1335] __dump_stack+0x21/0x30 [ 64.468582][ T1335] dump_stack_lvl+0x140/0x1c0 [ 64.468602][ T1335] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.468622][ T1335] dump_stack+0x19/0x20 [ 64.468635][ T1335] should_fail_ex+0x3d7/0x530 [ 64.468648][ T1335] should_failslab+0xac/0x100 [ 64.468659][ T1335] __kmalloc_node_track_caller_noprof+0x68/0x4f0 [ 64.468675][ T1335] ? security_context_to_sid_core+0xde/0x5c0 [ 64.468687][ T1335] ? vfs_getxattr+0x2a0/0x2b0 [ 64.468700][ T1335] kmemdup_nul+0x5a/0x1a0 [ 64.468714][ T1335] security_context_to_sid_core+0xde/0x5c0 [ 64.468724][ T1335] ? revert_creds+0xbb/0x150 [ 64.468735][ T1335] ? ovl_other_xattr_get+0x114/0x160 [ 64.468750][ T1335] ? security_context_to_sid+0x60/0x60 [ 64.468761][ T1335] ? kasan_save_alloc_info+0x40/0x50 [ 64.468774][ T1335] ? __cfi_ovl_other_xattr_get+0x10/0x10 [ 64.468789][ T1335] ? __vfs_getxattr+0x421/0x450 [ 64.468802][ T1335] security_context_to_sid_default+0x3f/0x50 [ 64.468813][ T1335] inode_doinit_use_xattr+0x1a7/0x550 [ 64.468829][ T1335] inode_doinit_with_dentry+0x770/0xde0 [ 64.468847][ T1335] ? sb_finish_set_opts+0xa40/0xa40 [ 64.468870][ T1335] ? __kasan_slab_free+0x6a/0x80 [ 64.468886][ T1335] selinux_d_instantiate+0x2b/0x40 [ 64.468910][ T1335] security_d_instantiate+0xb8/0xf0 [ 64.468925][ T1335] d_splice_alias+0x71/0x3a0 [ 64.468939][ T1335] ovl_lookup+0x1ba0/0x1d60 [ 64.468953][ T1335] ? __cfi_ovl_lookup+0x10/0x10 [ 64.468963][ T1335] ? __cfi_d_alloc_parallel+0x10/0x10 [ 64.468977][ T1335] ? rwsem_read_trylock+0x274/0x5b0 [ 64.468992][ T1335] ? downgrade_write+0x460/0x460 [ 64.469004][ T1335] ? unwind_get_return_address+0x51/0x90 [ 64.469017][ T1335] __lookup_slow+0x2e5/0x420 [ 64.469027][ T1335] ? lookup_one_len+0x300/0x300 [ 64.469037][ T1335] ? down_read+0x7f/0xe0 [ 64.469048][ T1335] lookup_slow+0x57/0x80 [ 64.469058][ T1335] walk_component+0x302/0x440 [ 64.469071][ T1335] path_lookupat+0x180/0x4a0 [ 64.469098][ T1335] filename_lookup+0x228/0x580 [ 64.469108][ T1335] ? __cfi_filename_lookup+0x10/0x10 [ 64.469119][ T1335] ? __check_object_size+0x527/0x830 [ 64.469133][ T1335] ? __cfi___check_object_size+0x10/0x10 [ 64.469147][ T1335] ? kasan_save_alloc_info+0x40/0x50 [ 64.469160][ T1335] vfs_statx+0x106/0x210 [ 64.469170][ T1335] ? vfs_fstatat+0x1d0/0x1d0 [ 64.469179][ T1335] ? __kasan_check_write+0x18/0x20 [ 64.469193][ T1335] vfs_fstatat+0xe5/0x1d0 [ 64.469202][ T1335] __se_sys_newfstatat+0x127/0x3c0 [ 64.469212][ T1335] ? __x64_sys_newfstatat+0xc0/0xc0 [ 64.469222][ T1335] ? vfs_write+0x9a4/0xf90 [ 64.469236][ T1335] ? __cfi_vfs_write+0x10/0x10 [ 64.469250][ T1335] ? __kasan_check_write+0x18/0x20 [ 64.469264][ T1335] ? mutex_unlock+0x90/0x240 [ 64.469275][ T1335] ? __cfi_ksys_write+0x10/0x10 [ 64.469289][ T1335] __x64_sys_newfstatat+0x9f/0xc0 [ 64.469299][ T1335] x64_sys_call+0x1821/0x2ee0 [ 64.469314][ T1335] do_syscall_64+0x57/0xf0 [ 64.469327][ T1335] ? clear_bhb_loop+0x50/0xa0 [ 64.469341][ T1335] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.469355][ T1335] RIP: 0033:0x7f04aeb9c799 [ 64.469365][ T1335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.469375][ T1335] RSP: 002b:00007f04af9c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 64.469387][ T1335] RAX: ffffffffffffffda RBX: 00007f04aee15fa0 RCX: 00007f04aeb9c799 [ 64.469396][ T1335] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 64.469403][ T1335] RBP: 00007f04af9c2090 R08: 0000000000000000 R09: 0000000000000000 [ 64.469411][ T1335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.469417][ T1335] R13: 00007f04aee16038 R14: 00007f04aee15fa0 R15: 00007ffdcb3ebdf8 [ 64.469426][ T1335] [ 64.469432][ T1335] SELinux: inode_doinit_use_xattr: context_to_sid(root:object_r:user_tmpfs_t) returned 12 for dev=overlay ino=18 [ 64.888498][ T325] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 64.896227][ T67] usb 4-1: device descriptor read/64, error -71 [ 64.910872][ T1337] netlink: 'syz.4.322': attribute type 4 has an invalid length. [ 65.008234][ T1342] syz.4.324 uses obsolete (PF_INET,SOCK_PACKET) [ 65.045757][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.057421][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.069060][ T325] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 65.079927][ T325] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 65.088527][ T325] usb 1-1: Manufacturer: syz [ 65.094018][ T325] usb 1-1: config 0 descriptor?? [ 65.134746][ T67] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 65.264694][ T67] usb 4-1: device descriptor read/64, error -71 [ 65.304716][ T309] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.455180][ T309] usb 5-1: Using ep0 maxpacket: 32 [ 65.461978][ T309] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.475041][ T309] usb 5-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice= 0.40 [ 65.484572][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.493738][ T309] usb 5-1: Product: syz [ 65.498002][ T309] usb 5-1: Manufacturer: syz [ 65.502671][ T309] usb 5-1: SerialNumber: syz [ 65.514750][ T67] usb 4-1: device descriptor read/64, error -71 [ 65.624760][ T67] usb usb4-port1: attempt power cycle [ 65.704502][ T1322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.713948][ T1322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.716707][ T309] usb 5-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 65.731183][ T309] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 65.744095][ T309] usb 5-1: USB disconnect, device number 2 [ 65.755472][ T501] udevd[501]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.927096][ T325] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0008/input/input12 [ 65.938855][ T325] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0008/input/input13 [ 65.950640][ T325] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0008/input/input14 [ 65.963448][ T325] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0008/input/input15 [ 65.974932][ T67] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 65.983765][ T325] uclogic 0003:256C:006D.0008: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 65.996874][ T67] usb 4-1: device descriptor read/8, error -71 [ 66.129232][ T325] usb 1-1: USB disconnect, device number 23 [ 66.155841][ T67] usb 4-1: device descriptor read/8, error -71 [ 66.394710][ T67] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 66.416047][ T67] usb 4-1: device descriptor read/8, error -71 [ 66.514686][ T45] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 66.555892][ T67] usb 4-1: device descriptor read/8, error -71 [ 66.642621][ T36] audit: type=1400 audit(1774257892.659:339): avc: denied { map } for pid=1353 comm="syz.0.329" path="socket:[10406]" dev="sockfs" ino=10406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.666171][ T36] audit: type=1400 audit(1774257892.659:340): avc: denied { read } for pid=1353 comm="syz.0.329" path="socket:[10406]" dev="sockfs" ino=10406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.675012][ T67] usb usb4-port1: unable to enumerate USB device [ 66.691211][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.706440][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.726295][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 66.728208][ T1358] FAULT_INJECTION: forcing a failure. [ 66.728208][ T1358] name failslab, interval 1, probability 0, space 0, times 0 [ 66.735913][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 66.748700][ T1358] CPU: 0 UID: 0 PID: 1358 Comm: syz.0.331 Not tainted syzkaller #0 1899ccadb87a2390231fcfce9a7a94d2fcd39aaf [ 66.748732][ T1358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.748746][ T1358] Call Trace: [ 66.748752][ T1358] [ 66.748759][ T1358] __dump_stack+0x21/0x30 [ 66.748787][ T1358] dump_stack_lvl+0x140/0x1c0 [ 66.748809][ T1358] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.748833][ T1358] dump_stack+0x19/0x20 [ 66.748853][ T1358] should_fail_ex+0x3d7/0x530 [ 66.748876][ T1358] should_failslab+0xac/0x100 [ 66.748894][ T1358] __kmalloc_node_track_caller_noprof+0x68/0x4f0 [ 66.748929][ T1358] ? kmemdup_nul+0x98/0x1a0 [ 66.748950][ T1358] ? security_context_to_sid_core+0x153/0x5c0 [ 66.748970][ T1358] ? __asan_memcpy+0x5a/0x80 [ 66.748994][ T1358] kstrdup+0x4d/0x130 [ 66.749013][ T1358] ? security_context_to_sid_core+0x13e/0x5c0 [ 66.749031][ T1358] security_context_to_sid_core+0x153/0x5c0 [ 66.749049][ T1358] ? revert_creds+0xbb/0x150 [ 66.749068][ T1358] ? ovl_other_xattr_get+0x114/0x160 [ 66.749094][ T1358] ? security_context_to_sid+0x60/0x60 [ 66.749113][ T1358] ? kasan_save_alloc_info+0x40/0x50 [ 66.749135][ T1358] ? __cfi_ovl_other_xattr_get+0x10/0x10 [ 66.749159][ T1358] ? __vfs_getxattr+0x421/0x450 [ 66.749183][ T1358] security_context_to_sid_default+0x3f/0x50 [ 66.749202][ T1358] inode_doinit_use_xattr+0x1a7/0x550 [ 66.749229][ T1358] inode_doinit_with_dentry+0x770/0xde0 [ 66.749255][ T1358] ? sb_finish_set_opts+0xa40/0xa40 [ 66.749280][ T1358] ? __kasan_slab_free+0x6a/0x80 [ 66.749297][ T1358] selinux_d_instantiate+0x2b/0x40 [ 66.749322][ T1358] security_d_instantiate+0xb8/0xf0 [ 66.749348][ T1358] d_splice_alias+0x71/0x3a0 [ 66.749372][ T1358] ovl_lookup+0x1ba0/0x1d60 [ 66.749394][ T1358] ? __cfi_ovl_lookup+0x10/0x10 [ 66.749416][ T1358] ? __cfi_d_alloc_parallel+0x10/0x10 [ 66.749440][ T1358] ? rwsem_read_trylock+0x274/0x5b0 [ 66.749464][ T1358] ? downgrade_write+0x460/0x460 [ 66.749486][ T1358] ? unwind_get_return_address+0x51/0x90 [ 66.749511][ T1358] __lookup_slow+0x2e5/0x420 [ 66.749529][ T1358] ? lookup_one_len+0x300/0x300 [ 66.749545][ T1358] ? down_read+0x7f/0xe0 [ 66.749565][ T1358] lookup_slow+0x57/0x80 [ 66.749581][ T1358] walk_component+0x302/0x440 [ 66.749605][ T1358] path_lookupat+0x180/0x4a0 [ 66.749622][ T1358] filename_lookup+0x228/0x580 [ 66.749639][ T1358] ? __cfi_filename_lookup+0x10/0x10 [ 66.749658][ T1358] ? __check_object_size+0x527/0x830 [ 66.749682][ T1358] ? __cfi___check_object_size+0x10/0x10 [ 66.749706][ T1358] ? kasan_save_alloc_info+0x40/0x50 [ 66.749728][ T1358] vfs_statx+0x106/0x210 [ 66.749745][ T1358] ? vfs_fstatat+0x1d0/0x1d0 [ 66.749761][ T1358] ? __kasan_check_write+0x18/0x20 [ 66.749785][ T1358] vfs_fstatat+0xe5/0x1d0 [ 66.749801][ T1358] __se_sys_newfstatat+0x127/0x3c0 [ 66.749820][ T1358] ? __x64_sys_newfstatat+0xc0/0xc0 [ 66.749839][ T1358] ? vfs_write+0x9a4/0xf90 [ 66.749861][ T1358] ? __cfi_vfs_write+0x10/0x10 [ 66.749884][ T1358] ? __kasan_check_write+0x18/0x20 [ 66.749913][ T1358] ? mutex_unlock+0x90/0x240 [ 66.749932][ T1358] ? __cfi_ksys_write+0x10/0x10 [ 66.749957][ T1358] __x64_sys_newfstatat+0x9f/0xc0 [ 66.749975][ T1358] x64_sys_call+0x1821/0x2ee0 [ 66.750000][ T1358] do_syscall_64+0x57/0xf0 [ 66.750022][ T1358] ? clear_bhb_loop+0x50/0xa0 [ 66.750045][ T1358] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.750067][ T1358] RIP: 0033:0x7fbfed19c799 [ 66.750084][ T1358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.750100][ T1358] RSP: 002b:00007fbfedfca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 66.750121][ T1358] RAX: ffffffffffffffda RBX: 00007fbfed415fa0 RCX: 00007fbfed19c799 [ 66.750136][ T1358] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 66.750149][ T1358] RBP: 00007fbfedfca090 R08: 0000000000000000 R09: 0000000000000000 [ 66.750160][ T1358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.750172][ T1358] R13: 00007fbfed416038 R14: 00007fbfed415fa0 R15: 00007fff7c14ad58 [ 66.750189][ T1358] [ 66.750562][ T1358] SELinux: inode_doinit_use_xattr: context_to_sid(root:object_r:user_tmpfs_t) returned 12 for dev=overlay ino=421 [ 66.756753][ T45] usb 5-1: SerialNumber: syz [ 67.182491][ T45] usb 5-1: 0:2 : does not exist [ 67.328852][ T1364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.338528][ T1364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.424695][ T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 67.595545][ T31] usb 1-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 67.604722][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.605872][ T325] usb 5-1: USB disconnect, device number 3 [ 67.636155][ T31] usb 1-1: config 0 descriptor?? [ 67.648029][ T31] usb-storage 1-1:0.0: USB Mass Storage device detected [ 67.667665][ T31] usb-storage 1-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 67.667665][ T31] Please send a copy of this message to and [ 67.844892][ T325] usb 1-1: USB disconnect, device number 24 [ 68.104734][ T31] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 68.134669][ T36] audit: type=1400 audit(1774257894.149:341): avc: denied { bind } for pid=1379 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.207880][ T1384] FAULT_INJECTION: forcing a failure. [ 68.207880][ T1384] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.221322][ T1384] CPU: 1 UID: 0 PID: 1384 Comm: syz.4.340 Not tainted syzkaller #0 1899ccadb87a2390231fcfce9a7a94d2fcd39aaf [ 68.221355][ T1384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.221367][ T1384] Call Trace: [ 68.221372][ T1384] [ 68.221380][ T1384] __dump_stack+0x21/0x30 [ 68.221407][ T1384] dump_stack_lvl+0x140/0x1c0 [ 68.221433][ T1384] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.221457][ T1384] ? __kasan_slab_free+0x6a/0x80 [ 68.221515][ T1384] dump_stack+0x19/0x20 [ 68.221535][ T1384] should_fail_ex+0x3d7/0x530 [ 68.221556][ T1384] should_fail+0xf/0x20 [ 68.221574][ T1384] should_fail_usercopy+0x1e/0x30 [ 68.221595][ T1384] _copy_to_user+0x24/0xa0 [ 68.221618][ T1384] __se_sys_newfstatat+0x329/0x3c0 [ 68.221635][ T1384] ? __x64_sys_newfstatat+0xc0/0xc0 [ 68.221652][ T1384] ? vfs_write+0x9a4/0xf90 [ 68.221674][ T1384] ? __kasan_check_write+0x18/0x20 [ 68.221696][ T1384] ? mutex_unlock+0x90/0x240 [ 68.221714][ T1384] ? __cfi_ksys_write+0x10/0x10 [ 68.221736][ T1384] __x64_sys_newfstatat+0x9f/0xc0 [ 68.221752][ T1384] x64_sys_call+0x1821/0x2ee0 [ 68.221775][ T1384] do_syscall_64+0x57/0xf0 [ 68.221797][ T1384] ? clear_bhb_loop+0x50/0xa0 [ 68.221819][ T1384] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.221840][ T1384] RIP: 0033:0x7f04aeb9c799 [ 68.221854][ T1384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.221869][ T1384] RSP: 002b:00007f04af9c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 68.221888][ T1384] RAX: ffffffffffffffda RBX: 00007f04aee15fa0 RCX: 00007f04aeb9c799 [ 68.221901][ T1384] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 68.221913][ T1384] RBP: 00007f04af9c2090 R08: 0000000000000000 R09: 0000000000000000 [ 68.221925][ T1384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.221936][ T1384] R13: 00007f04aee16038 R14: 00007f04aee15fa0 R15: 00007ffdcb3ebdf8 [ 68.221957][ T1384] [ 68.445018][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 68.451803][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 68.460486][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.472461][ T31] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 68.481825][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.490244][ T31] usb 4-1: Product: syz [ 68.494804][ T31] usb 4-1: Manufacturer: syz [ 68.499394][ T31] usb 4-1: SerialNumber: syz [ 68.559564][ T1390] syz.0.343: attempt to access beyond end of device [ 68.559564][ T1390] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 68.572947][ T1390] EXT4-fs (loop0): unable to read superblock [ 68.647187][ T1395] Bluetooth: hci0: sending frame failed (-49) [ 68.654484][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 68.674823][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.695804][ T1394] fuse: Unknown parameter 'al^ow_other' [ 68.706577][ T1378] veth0: entered promiscuous mode [ 68.712764][ T1378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.722332][ T1378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.733707][ T1377] veth0: left promiscuous mode [ 68.741219][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 68.751817][ T31] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 68.764709][ T31] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 68.776025][ T31] usb 4-1: USB disconnect, device number 29 [ 68.785793][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.814866][ T368] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 68.826365][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.837376][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.847456][ T45] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 68.856817][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.865741][ T45] usb 5-1: config 0 descriptor?? [ 68.965879][ T368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.977810][ T368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.988375][ T368] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 68.997651][ T368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.006267][ T368] usb 1-1: config 0 descriptor?? [ 69.275801][ T45] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 69.285396][ T45] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 69.296836][ T45] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 69.305739][ T45] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 69.313440][ T45] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 69.326411][ T45] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 69.414483][ T368] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 69.422565][ T368] cp2112 0003:10C4:EA90.000A: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 69.452589][ T1411] FAULT_INJECTION: forcing a failure. [ 69.452589][ T1411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.467484][ T1411] CPU: 0 UID: 0 PID: 1411 Comm: syz.3.349 Not tainted syzkaller #0 1899ccadb87a2390231fcfce9a7a94d2fcd39aaf [ 69.467514][ T1411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.467526][ T1411] Call Trace: [ 69.467531][ T1411] [ 69.467539][ T1411] __dump_stack+0x21/0x30 [ 69.467565][ T1411] dump_stack_lvl+0x140/0x1c0 [ 69.467585][ T1411] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.467608][ T1411] ? check_stack_object+0x12b/0x150 [ 69.467632][ T1411] dump_stack+0x19/0x20 [ 69.467652][ T1411] should_fail_ex+0x3d7/0x530 [ 69.467672][ T1411] should_fail+0xf/0x20 [ 69.467690][ T1411] should_fail_usercopy+0x1e/0x30 [ 69.467710][ T1411] _copy_to_user+0x24/0xa0 [ 69.467733][ T1411] simple_read_from_buffer+0xed/0x160 [ 69.467754][ T1411] proc_fail_nth_read+0x1aa/0x220 [ 69.467774][ T1411] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 69.467793][ T1411] ? bpf_lsm_file_permission+0xd/0x20 [ 69.467810][ T1411] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 69.467830][ T1411] vfs_read+0x289/0xcb0 [ 69.467852][ T1411] ? __cfi_vfs_read+0x10/0x10 [ 69.467872][ T1411] ? __kasan_check_write+0x18/0x20 [ 69.467894][ T1411] ? mutex_lock+0x97/0x1d0 [ 69.467910][ T1411] ? __cfi_mutex_lock+0x10/0x10 [ 69.467925][ T1411] ? __fget_files+0x2c5/0x340 [ 69.467942][ T1411] ksys_read+0x145/0x260 [ 69.467962][ T1411] ? xfd_validate_state+0x68/0x140 [ 69.467983][ T1411] ? __cfi_ksys_read+0x10/0x10 [ 69.468004][ T1411] ? __kasan_check_read+0x15/0x20 [ 69.468026][ T1411] __x64_sys_read+0x7f/0x90 [ 69.468048][ T1411] x64_sys_call+0x2638/0x2ee0 [ 69.468078][ T1411] do_syscall_64+0x57/0xf0 [ 69.468107][ T1411] ? clear_bhb_loop+0x50/0xa0 [ 69.468129][ T1411] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.468152][ T1411] RIP: 0033:0x7f5c3f95cfce [ 69.468167][ T1411] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 69.468182][ T1411] RSP: 002b:00007f5c40783fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.468201][ T1411] RAX: ffffffffffffffda RBX: 00007f5c407846c0 RCX: 00007f5c3f95cfce [ 69.468215][ T1411] RDX: 000000000000000f RSI: 00007f5c407840a0 RDI: 0000000000000004 [ 69.468227][ T1411] RBP: 00007f5c40784090 R08: 0000000000000000 R09: 0000000000000000 [ 69.468238][ T1411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.468249][ T1411] R13: 00007f5c3fc16038 R14: 00007f5c3fc15fa0 R15: 00007ffedb25ce98 [ 69.468264][ T1411] [ 69.736394][ T368] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 69.745808][ T45] playstation 0003:054C:0DF2.0009: Invalid reportID received, expected 9 got 202 [ 69.755440][ T45] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -22 [ 69.765877][ T45] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 69.775647][ T45] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 69.783934][ T45] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -22 [ 69.794794][ T31] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 69.935437][ T368] cp2112 0003:10C4:EA90.000A: error requesting SMBus config [ 69.943897][ T368] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -71 [ 69.954096][ T368] usb 1-1: USB disconnect, device number 25 [ 69.960064][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 69.967452][ T31] usb 4-1: no configurations [ 69.972081][ T31] usb 4-1: can't read configurations, error -22 [ 70.104757][ T31] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 70.255195][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 70.260783][ T31] usb 4-1: no configurations [ 70.265814][ T31] usb 4-1: can't read configurations, error -22 [ 70.272192][ T31] usb usb4-port1: attempt power cycle [ 70.460869][ T1422] kvm: kvm [1421]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 70.470419][ T1422] kvm: kvm [1421]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 70.614734][ T31] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 70.635281][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 70.640818][ T31] usb 4-1: no configurations [ 70.645519][ T31] usb 4-1: can't read configurations, error -22 [ 70.774726][ T31] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 70.795057][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 70.800874][ T31] usb 4-1: no configurations [ 70.805672][ T31] usb 4-1: can't read configurations, error -22 [ 70.812210][ T31] usb usb4-port1: unable to enumerate USB device [ 70.874903][ T1432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.883562][ T1432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.893145][ T1434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.901903][ T1434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.392003][ T36] audit: type=1400 audit(1774257897.409:342): avc: denied { create } for pid=1435 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 71.421168][ T36] audit: type=1326 audit(1774257897.439:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1437 comm="syz.2.359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bc2b9c799 code=0x0 [ 71.448358][ T471] usb 5-1: USB disconnect, device number 4 [ 71.467171][ T36] audit: type=1400 audit(1774257897.489:344): avc: denied { create } for pid=1439 comm="syz.4.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 71.487227][ T36] audit: type=1400 audit(1774257897.489:345): avc: denied { append } for pid=1439 comm="syz.4.360" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.512074][ T36] audit: type=1400 audit(1774257897.489:346): avc: denied { write } for pid=1439 comm="syz.4.360" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.536562][ T36] audit: type=1400 audit(1774257897.559:347): avc: denied { watch } for pid=1437 comm="syz.2.359" path="/112" dev="tmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.834714][ T471] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 71.984707][ T471] usb 5-1: Using ep0 maxpacket: 16 [ 71.990927][ T471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.002322][ T471] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.012109][ T471] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 72.021605][ T471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.030153][ T471] usb 5-1: config 0 descriptor?? [ 72.324710][ T309] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 72.438677][ T471] kye 0003:0458:5016.000B: control desc unexpectedly large [ 72.446919][ T471] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.000B/input/input16 [ 72.464714][ T471] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.000B/input/input17 [ 72.480559][ T471] kye 0003:0458:5016.000B: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 72.494734][ T309] usb 1-1: Using ep0 maxpacket: 8 [ 72.501491][ T309] usb 1-1: unable to get BOS descriptor or descriptor too short [ 72.510232][ T309] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1 [ 72.520472][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 72.541593][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 72.553284][ T309] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 72.563276][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 72.573061][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 72.584706][ T309] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 72.593786][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.602572][ T309] usb 1-1: Product: syz [ 72.607383][ T309] usb 1-1: Manufacturer: syz [ 72.612014][ T309] usb 1-1: SerialNumber: syz [ 72.617348][ T309] usb 1-1: config 0 descriptor?? [ 72.622717][ T1457] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 72.629976][ T1457] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 72.641894][ T471] usb 5-1: USB disconnect, device number 5 [ 72.651091][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.841785][ T1457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.850334][ T1457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.858953][ T471] usb 1-1: USB disconnect, device number 26 [ 72.934700][ T45] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 73.082658][ T36] audit: type=1400 audit(1774257899.099:348): avc: denied { create } for pid=1475 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 73.106279][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 73.114415][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 73.122267][ T36] audit: type=1400 audit(1774257899.139:349): avc: denied { connect } for pid=1477 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.143275][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.156830][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.168922][ T45] usb 4-1: string descriptor 0 read error: -22 [ 73.170211][ T1482] overlayfs: failed to resolve './file1/file0': -2 [ 73.175282][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.190937][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.204381][ T45] usb 4-1: 0:2 : does not exist [ 73.323703][ T1488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.333113][ T1488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.464946][ T1491] netlink: 'syz.0.376': attribute type 11 has an invalid length. [ 73.473058][ T1491] netlink: 44 bytes leftover after parsing attributes in process `syz.0.376'. [ 73.744741][ T309] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 73.906010][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.923860][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.940085][ T309] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 73.950236][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.959789][ T309] usb 1-1: config 0 descriptor?? [ 73.979608][ T36] audit: type=1400 audit(1774257899.989:350): avc: denied { map } for pid=1497 comm="syz.2.379" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 74.013619][ T1462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.016057][ T36] audit: type=1400 audit(1774257899.999:351): avc: denied { write } for pid=1497 comm="syz.2.379" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 74.035054][ T1462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.110721][ T1502] random: crng reseeded on system resumption [ 74.132892][ T36] audit: type=1400 audit(1774257900.129:352): avc: denied { append } for pid=1501 comm="syz.2.381" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 74.178956][ T309] usbhid 1-1:0.0: can't add hid device: -71 [ 74.186828][ T309] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 74.213575][ T1506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 74.219282][ T309] usb 1-1: USB disconnect, device number 27 [ 74.233940][ T36] audit: type=1400 audit(1774257900.249:353): avc: denied { create } for pid=1507 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.503838][ T45] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 74.516008][ T45] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 74.526232][ T45] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 74.554759][ T45] usb 4-1: USB disconnect, device number 34 [ 74.614700][ T309] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 74.683822][ T1519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.692449][ T1519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.744660][ T309] usb 1-1: device descriptor read/64, error -71 [ 74.994698][ T309] usb 1-1: device descriptor read/64, error -71 [ 75.020419][ T36] audit: type=1400 audit(1774257901.039:354): avc: denied { setattr } for pid=1520 comm="syz.3.386" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 75.238062][ T1525] netlink: 'syz.2.388': attribute type 17 has an invalid length. [ 75.246358][ T309] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 75.255844][ T1525] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 75.274665][ T471] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 75.283846][ T1528] binder: Unknown parameter 'subj_type' [ 75.290118][ T1528] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 75.394657][ T309] usb 1-1: device descriptor read/64, error -71 [ 75.424667][ T471] usb 4-1: device descriptor read/64, error -71 [ 75.644677][ T309] usb 1-1: device descriptor read/64, error -71 [ 75.664667][ T471] usb 4-1: device descriptor read/64, error -71 [ 75.754812][ T309] usb usb1-port1: attempt power cycle [ 75.914674][ T471] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 76.044658][ T471] usb 4-1: device descriptor read/64, error -71 [ 76.094676][ T309] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 76.115644][ T309] usb 1-1: device descriptor read/8, error -71 [ 76.143420][ T1533] random: crng reseeded on system resumption [ 76.166798][ T36] audit: type=1400 audit(1774257902.189:355): avc: denied { accept } for pid=1532 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 76.245629][ T309] usb 1-1: device descriptor read/8, error -71 [ 76.263076][ T36] audit: type=1400 audit(1774257902.279:356): avc: denied { write } for pid=1539 comm="syz.4.393" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 76.265025][ T1540] netlink: 57 bytes leftover after parsing attributes in process `syz.4.393'. [ 76.298427][ T471] usb 4-1: device descriptor read/64, error -71 [ 76.332241][ T36] audit: type=1400 audit(1774257902.349:357): avc: denied { compute_member } for pid=1541 comm="syz.2.394" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 76.424934][ T471] usb usb4-port1: attempt power cycle [ 76.450047][ T1546] netlink: 168 bytes leftover after parsing attributes in process `syz.2.397'. [ 76.466438][ T1148] bridge_slave_1: left allmulticast mode [ 76.478299][ T1148] bridge_slave_1: left promiscuous mode [ 76.486121][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.494240][ T1148] bridge_slave_0: left allmulticast mode [ 76.500946][ T1548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.510443][ T309] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 76.519236][ T1148] bridge_slave_0: left promiscuous mode [ 76.525267][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.533044][ T1548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.555247][ T309] usb 1-1: device descriptor read/8, error -71 [ 76.626693][ T1550] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.634656][ T1550] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.641746][ T1550] bridge_slave_0: entered allmulticast mode [ 76.648458][ T1550] bridge_slave_0: entered promiscuous mode [ 76.655679][ T1550] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.662974][ T1550] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.671077][ T1550] bridge_slave_1: entered allmulticast mode [ 76.677749][ T1550] bridge_slave_1: entered promiscuous mode [ 76.685741][ T309] usb 1-1: device descriptor read/8, error -71 [ 76.692076][ T1148] veth1_macvtap: left promiscuous mode [ 76.697759][ T1148] veth0_vlan: left promiscuous mode [ 76.770325][ T1550] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.774808][ T471] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 76.777613][ T1550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.792674][ T1550] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.799898][ T1550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.811126][ T309] usb usb1-port1: unable to enumerate USB device [ 76.818715][ T471] usb 4-1: device descriptor read/8, error -71 [ 76.829387][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.837272][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.847170][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.854512][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.863653][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.871157][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.896596][ T1550] veth0_vlan: entered promiscuous mode [ 76.907446][ T1550] veth1_macvtap: entered promiscuous mode [ 76.956204][ T471] usb 4-1: device descriptor read/8, error -71 [ 77.147178][ T1563] overlayfs: missing 'lowerdir' [ 77.204830][ T471] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 77.245912][ T1566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.256651][ T1566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.266786][ T471] usb 4-1: device descriptor read/8, error -71 [ 77.395809][ T471] usb 4-1: device descriptor read/8, error -71 [ 77.506855][ T12] bridge_slave_1: left allmulticast mode [ 77.513381][ T12] bridge_slave_1: left promiscuous mode [ 77.515230][ T471] usb usb4-port1: unable to enumerate USB device [ 77.520495][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.544937][ T12] bridge_slave_0: left allmulticast mode [ 77.551583][ T12] bridge_slave_0: left promiscuous mode [ 77.558530][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.668310][ T12] veth1_macvtap: left promiscuous mode [ 77.674126][ T12] veth0_vlan: left promiscuous mode [ 77.759427][ T1575] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.767264][ T1575] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.774513][ T1575] bridge_slave_0: entered allmulticast mode [ 77.782237][ T1575] bridge_slave_0: entered promiscuous mode [ 77.792041][ T1575] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.799870][ T1575] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.808846][ T1575] bridge_slave_1: entered allmulticast mode [ 77.828379][ T1575] bridge_slave_1: entered promiscuous mode [ 77.901365][ T1575] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.909402][ T1575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.917958][ T1575] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.926624][ T1575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.962153][ T1584] netlink: 5 bytes leftover after parsing attributes in process `syz.2.411'. [ 77.988497][ T1588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 78.001312][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.010271][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.011399][ T1588] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1588 comm=syz.2.412 [ 78.036096][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.043563][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.056384][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.063506][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.088684][ T1597] overlayfs: overlapping lowerdir path [ 78.109027][ T1575] veth0_vlan: entered promiscuous mode [ 78.122234][ T1575] veth1_macvtap: entered promiscuous mode [ 78.158978][ T1601] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 78.220015][ T1604] tipc: Started in network mode [ 78.225150][ T1604] tipc: Node identity ac14140f, cluster identity 4711 [ 78.232856][ T1604] tipc: New replicast peer: 255.255.255.255 [ 78.240011][ T1604] tipc: Enabled bearer , priority 10 [ 78.254762][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 78.421764][ T368] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 78.424685][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 78.435336][ T368] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.456879][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 78.471239][ T10] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 78.479631][ T10] usb 6-1: config 0 has no interface number 0 [ 78.486780][ T10] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 78.510581][ T10] usb 6-1: config 0 interface 88 has no altsetting 0 [ 78.523590][ T10] usb 6-1: string descriptor 0 read error: -22 [ 78.531075][ T10] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 78.531245][ T1616] netlink: 68 bytes leftover after parsing attributes in process `syz.2.419'. [ 78.540714][ T10] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 78.570854][ T10] usb 6-1: config 0 descriptor?? [ 78.587568][ T10] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input18 [ 78.679801][ T1630] overlayfs: overlapping lowerdir path [ 78.765165][ T1645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.774544][ T1645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.802772][ T325] usb 6-1: USB disconnect, device number 2 [ 78.809287][ C0] usb_acecad 6-1:0.88: can't resubmit intr, dummy_hcd.5-1/input0, status -19 [ 78.944761][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 78.994743][ T471] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 79.104734][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 79.110150][ T325] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 79.120989][ T10] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 79.131263][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.140277][ T10] usb 7-1: Product: syz [ 79.144492][ T10] usb 7-1: Manufacturer: syz [ 79.149558][ T10] usb 7-1: SerialNumber: syz [ 79.154888][ T471] usb 4-1: Using ep0 maxpacket: 32 [ 79.160370][ T10] usb 7-1: config 0 descriptor?? [ 79.167188][ T10] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 79.175078][ T471] usb 4-1: unable to get BOS descriptor or descriptor too short [ 79.185120][ T10] usb 7-1: Detected FT2232H [ 79.193403][ T471] usb 4-1: config 8 has an invalid interface number: 68 but max is 0 [ 79.202440][ T471] usb 4-1: config 8 has no interface number 0 [ 79.209067][ T471] usb 4-1: config 8 interface 68 has no altsetting 0 [ 79.219611][ T471] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=46.37 [ 79.231016][ T471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.240153][ T471] usb 4-1: Product: syz [ 79.244990][ T325] usb 6-1: device descriptor read/64, error -71 [ 79.252252][ T471] usb 4-1: Manufacturer: syz [ 79.257705][ T471] usb 4-1: SerialNumber: syz [ 79.307626][ T1650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.316764][ T1650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.364707][ T368] tipc: Node number set to 2886997007 [ 79.371301][ T1632] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 79.379629][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 79.465596][ T1640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.477681][ T1640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.485942][ T325] usb 6-1: device descriptor read/64, error -71 [ 79.495424][ T471] ums-freecom 4-1:8.68: USB Mass Storage device detected [ 79.503070][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 79.511300][ T10] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 79.521098][ T10] usb 7-1: USB disconnect, device number 2 [ 79.534697][ T471] usb 4-1: USB disconnect, device number 39 [ 79.541162][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 79.552071][ T10] ftdi_sio 7-1:0.0: device disconnected [ 79.744727][ T325] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 79.853092][ T1659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.861830][ T1659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.874782][ T325] usb 6-1: device descriptor read/64, error -71 [ 79.999970][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 79.999988][ T36] audit: type=1400 audit(1774257906.017:445): avc: denied { mounton } for pid=1660 comm="syz.3.433" path="/79/file0" dev="tmpfs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.003262][ T1661] overlayfs: overlapping lowerdir path [ 80.124759][ T325] usb 6-1: device descriptor read/64, error -71 [ 80.241929][ T325] usb usb6-port1: attempt power cycle [ 80.284694][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 80.436150][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.447552][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.458848][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 80.470655][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 80.480093][ T10] usb 4-1: Manufacturer: syz [ 80.487741][ T10] usb 4-1: config 0 descriptor?? [ 80.488441][ T1683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.502956][ T1683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.584737][ T325] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 80.594698][ T309] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 80.605730][ T325] usb 6-1: device descriptor read/8, error -71 [ 80.736229][ T10] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71 [ 80.745523][ T309] usb 7-1: Using ep0 maxpacket: 16 [ 80.746070][ T10] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 80.756266][ T309] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.758315][ T325] usb 6-1: device descriptor read/8, error -71 [ 80.771891][ T309] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.776156][ T10] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 80.786249][ T309] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 80.802304][ T10] usb 4-1: USB disconnect, device number 40 [ 80.809612][ T309] usb 7-1: config 0 interface 0 has no altsetting 0 [ 80.823184][ T309] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 80.832793][ T309] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.842014][ T309] usb 7-1: config 0 descriptor?? [ 81.034847][ T325] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 81.102555][ T1695] overlayfs: failed to resolve './file1/file0': -2 [ 81.110079][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 81.129764][ T1699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.139968][ T1699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.244886][ T10] usb 4-1: device descriptor read/64, error -71 [ 81.251547][ T1681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.260246][ T1681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.271649][ T309] hid (null): unknown global tag 0xc [ 81.278187][ T309] hid (null): unknown global tag 0xc [ 81.284273][ T309] hid (null): unknown global tag 0xd [ 81.289934][ T309] hid (null): unknown global tag 0xe [ 81.454715][ T325] usb 6-1: device not accepting address 6, error -71 [ 81.461796][ T325] usb usb6-port1: unable to enumerate USB device [ 81.476113][ T309] usb 7-1: USB disconnect, device number 3 [ 81.484788][ T10] usb 4-1: device descriptor read/64, error -71 [ 81.662815][ T36] audit: type=1400 audit(1774257907.677:446): avc: denied { map } for pid=1700 comm="syz.2.446" path="socket:[12926]" dev="sockfs" ino=12926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 81.724716][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 81.750058][ T36] audit: type=1400 audit(1774257907.767:447): avc: denied { ioctl } for pid=1707 comm="syz.2.448" path="socket:[12998]" dev="sockfs" ino=12998 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.784973][ T325] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 81.863839][ T36] audit: type=1326 audit(1774257907.877:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1714 comm="syz.2.450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bc2b9c799 code=0x0 [ 81.867712][ T10] usb 4-1: device descriptor read/64, error -71 [ 81.964722][ T325] usb 6-1: Using ep0 maxpacket: 8 [ 81.966038][ T1716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.972440][ T325] usb 6-1: unable to get BOS descriptor or descriptor too short [ 81.980032][ T1716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.989926][ T325] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 82.018341][ T325] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 82.027746][ T325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.037764][ T325] usb 6-1: Product: syz [ 82.042152][ T325] usb 6-1: Manufacturer: syz [ 82.046995][ T325] usb 6-1: SerialNumber: syz [ 82.144763][ T10] usb 4-1: device descriptor read/64, error -71 [ 82.254867][ T10] usb usb4-port1: attempt power cycle [ 82.274452][ T325] usb 6-1: USB disconnect, device number 7 [ 82.594732][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 82.616137][ T10] usb 4-1: device descriptor read/8, error -71 [ 82.745981][ T10] usb 4-1: device descriptor read/8, error -71 [ 82.782509][ T1724] overlayfs: failed to resolve './file1/file0': -2 [ 82.984774][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 83.018288][ T10] usb 4-1: device descriptor read/8, error -71 [ 83.062170][ T1734] syzkaller1: entered promiscuous mode [ 83.067899][ T1734] syzkaller1: entered allmulticast mode [ 83.115984][ T1737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.116013][ T1737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.123154][ T1737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.130083][ T1737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.144469][ T1737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.144490][ T1737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.151747][ T1737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.158126][ T1737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.166904][ T1737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.174091][ T10] usb 4-1: device descriptor read/8, error -71 [ 83.305213][ T10] usb usb4-port1: unable to enumerate USB device [ 83.386284][ T1759] overlayfs: failed to resolve './file1/file0': -2 [ 83.444698][ T325] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 83.594678][ T325] usb 7-1: Using ep0 maxpacket: 32 [ 83.601654][ T325] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.613220][ T325] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 83.625149][ T325] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 83.636916][ T325] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 83.647987][ T325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.656995][ T325] usb 7-1: config 0 descriptor?? [ 83.662808][ T1747] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 83.670396][ T45] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 83.671092][ T325] hub 7-1:0.0: USB hub found [ 83.804699][ T45] usb 6-1: device descriptor read/64, error -71 [ 83.882870][ T325] hub 7-1:0.0: 2 ports detected [ 83.889679][ T325] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 83.898020][ T325] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 83.907826][ T325] usbhid 7-1:0.0: can't add hid device: -71 [ 83.914198][ T325] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 84.044729][ T45] usb 6-1: device descriptor read/64, error -71 [ 84.095310][ T325] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 84.104243][ T325] usb 7-1: device reset changed ep0 maxpacket size! [ 84.112409][ T325] usb 7-1: USB disconnect, device number 4 [ 84.154731][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 84.294711][ T45] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 84.316262][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.327724][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 211, changing to 7 [ 84.339700][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 8511, setting to 1024 [ 84.352857][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.362036][ T10] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 84.370257][ T10] usb 4-1: Product: syz [ 84.374420][ T10] usb 4-1: SerialNumber: syz [ 84.404698][ T325] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 84.424702][ T45] usb 6-1: device descriptor read/64, error -71 [ 84.556067][ T325] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.567872][ T325] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 211, changing to 7 [ 84.579000][ T325] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 8511, setting to 1024 [ 84.592297][ T325] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.601994][ T325] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 84.610062][ T325] usb 7-1: Product: syz [ 84.614294][ T325] usb 7-1: SerialNumber: syz [ 84.664731][ T45] usb 6-1: device descriptor read/64, error -71 [ 84.774938][ T45] usb usb6-port1: attempt power cycle [ 84.880088][ T1778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.888991][ T1776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.889668][ T1778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.898000][ T1776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.114746][ T45] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 85.135884][ T45] usb 6-1: device descriptor read/8, error -71 [ 85.193929][ T36] audit: type=1400 audit(1774257911.207:449): avc: denied { setopt } for pid=1769 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.265742][ T45] usb 6-1: device descriptor read/8, error -71 [ 85.305350][ T10] cdc_ncm 4-1:1.0: bind() failure [ 85.311130][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 85.318031][ T10] cdc_ncm 4-1:1.1: bind() failure [ 85.324181][ T10] usb 4-1: USB disconnect, device number 45 [ 85.424141][ T1781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.432720][ T1781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.504687][ T45] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 85.525807][ T45] usb 6-1: device descriptor read/8, error -71 [ 85.628396][ T325] cdc_ncm 7-1:1.0: bind() failure [ 85.634364][ T325] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 85.642626][ T325] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 85.651920][ T325] usb 7-1: USB disconnect, device number 5 [ 85.665921][ T45] usb 6-1: device descriptor read/8, error -71 [ 85.774866][ T45] usb usb6-port1: unable to enumerate USB device [ 85.822710][ T36] audit: type=1400 audit(1774257911.837:450): avc: denied { audit_write } for pid=1782 comm="syz.3.470" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 85.907021][ T12] bridge_slave_1: left allmulticast mode [ 85.912728][ T12] bridge_slave_1: left promiscuous mode [ 85.918661][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.926552][ T12] bridge_slave_0: left allmulticast mode [ 85.932381][ T12] bridge_slave_0: left promiscuous mode [ 85.938101][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.056195][ T1793] overlayfs: missing 'lowerdir' [ 86.080317][ T12] veth1_macvtap: left promiscuous mode [ 86.086661][ T12] veth0_vlan: left promiscuous mode [ 86.131202][ T1802] netlink: 9 bytes leftover after parsing attributes in process `syz.2.477'. [ 86.140539][ T1802] gretap0: entered promiscuous mode [ 86.177733][ T1795] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.184946][ T1795] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.192014][ T1795] bridge_slave_0: entered allmulticast mode [ 86.198464][ T1795] bridge_slave_0: entered promiscuous mode [ 86.205254][ T1795] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.211251][ T36] audit: type=1400 audit(1774257912.227:451): avc: denied { execute } for pid=1808 comm="syz.2.479" name="file0" dev="tmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.212315][ T1795] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.239029][ T36] audit: type=1400 audit(1774257912.227:452): avc: denied { execute_no_trans } for pid=1808 comm="syz.2.479" path="/164/file0" dev="tmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.265071][ T1795] bridge_slave_1: entered allmulticast mode [ 86.265495][ T1795] bridge_slave_1: entered promiscuous mode [ 86.316136][ T1795] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.323411][ T1795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.330780][ T1795] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.338180][ T1795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.358900][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.366804][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.376546][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.383899][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.406749][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.414038][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.417724][ T1813] fuse: Bad value for 'fd' [ 86.437442][ T1795] veth0_vlan: entered promiscuous mode [ 86.451031][ T1795] veth1_macvtap: entered promiscuous mode [ 86.476633][ T368] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 86.598725][ T36] audit: type=1326 audit(1774257912.617:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1823 comm="syz.2.486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bc2b9c799 code=0x0 [ 86.623291][ T13] bridge_slave_1: left allmulticast mode [ 86.629210][ T13] bridge_slave_1: left promiscuous mode [ 86.635534][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.643461][ T368] usb 7-1: not running at top speed; connect to a high speed hub [ 86.652103][ T13] bridge_slave_0: left allmulticast mode [ 86.658181][ T13] bridge_slave_0: left promiscuous mode [ 86.664048][ T368] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 86.672856][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.680081][ T368] usb 7-1: config 95 has no interface number 0 [ 86.694031][ T368] usb 7-1: config 95 interface 1 has no altsetting 0 [ 86.706774][ T368] usb 7-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 86.716260][ T368] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.724593][ T368] usb 7-1: Product: syz [ 86.729943][ T368] usb 7-1: Manufacturer: syz [ 86.734594][ T368] usb 7-1: SerialNumber: syz [ 86.802555][ T1827] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.810047][ T1827] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.817648][ T1827] bridge_slave_0: entered allmulticast mode [ 86.824906][ T1827] bridge_slave_0: entered promiscuous mode [ 86.824968][ T421] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 86.831636][ T1827] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.845645][ T1827] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.853011][ T1827] bridge_slave_1: entered allmulticast mode [ 86.859403][ T1827] bridge_slave_1: entered promiscuous mode [ 86.869649][ T13] veth1_macvtap: left promiscuous mode [ 86.875520][ T13] veth0_vlan: left promiscuous mode [ 86.967432][ T368] usb 7-1: USB disconnect, device number 6 [ 86.986476][ T421] usb 6-1: config 1 has an invalid interface number: 253 but max is 2 [ 86.989050][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.000808][ T421] usb 6-1: config 1 has no interface number 1 [ 87.001824][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.004326][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.010561][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.016460][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.046971][ T421] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.060922][ T421] usb 6-1: config 1 interface 253 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.071976][ T421] usb 6-1: config 1 interface 253 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 87.077957][ T1827] veth0_vlan: entered promiscuous mode [ 87.085171][ T421] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 87.099254][ T1827] veth1_macvtap: entered promiscuous mode [ 87.102374][ T421] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 87.121711][ T421] usb 6-1: string descriptor 0 read error: -22 [ 87.127988][ T421] usb 6-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 2.40 [ 87.137901][ T421] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 87.355228][ T421] usb 6-1: USB disconnect, device number 12 [ 87.576995][ T1847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.585719][ T1847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.704783][ T325] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 87.866424][ T325] usb 9-1: unable to get BOS descriptor or descriptor too short [ 87.880803][ T325] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 87.890668][ T325] usb 9-1: can't read configurations, error -61 [ 88.024723][ T325] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 88.106982][ T1857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.115749][ T1857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.176477][ T325] usb 9-1: unable to get BOS descriptor or descriptor too short [ 88.185518][ T325] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 88.193143][ T325] usb 9-1: can't read configurations, error -61 [ 88.200261][ T325] usb usb9-port1: attempt power cycle [ 88.554766][ T325] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 88.576519][ T325] usb 9-1: unable to get BOS descriptor or descriptor too short [ 88.585368][ T325] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 88.593296][ T325] usb 9-1: can't read configurations, error -61 [ 88.641972][ T1859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.650803][ T1859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.660772][ T1859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.670558][ T1859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.724745][ T325] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 88.737757][ T36] audit: type=1400 audit(1774257914.757:454): avc: denied { setopt } for pid=1860 comm="syz.5.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.762312][ T325] usb 9-1: unable to get BOS descriptor or descriptor too short [ 88.774087][ T325] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 88.780464][ T36] audit: type=1400 audit(1774257914.797:455): avc: denied { connect } for pid=1865 comm="syz.5.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.783499][ T325] usb 9-1: can't read configurations, error -61 [ 88.813385][ T325] usb usb9-port1: unable to enumerate USB device [ 88.822209][ T12] tipc: Subscription rejected, illegal request [ 88.925656][ T13] bridge_slave_1: left allmulticast mode [ 88.931352][ T13] bridge_slave_1: left promiscuous mode [ 88.940777][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.948402][ T13] bridge_slave_0: left allmulticast mode [ 88.954562][ T13] bridge_slave_0: left promiscuous mode [ 88.960592][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.044169][ T1877] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.051732][ T1877] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.059396][ T1877] bridge_slave_0: entered allmulticast mode [ 89.065876][ T1877] bridge_slave_0: entered promiscuous mode [ 89.072752][ T1877] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.080205][ T1877] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.087324][ T1877] bridge_slave_1: entered allmulticast mode [ 89.093670][ T1877] bridge_slave_1: entered promiscuous mode [ 89.105667][ T13] veth1_macvtap: left promiscuous mode [ 89.111310][ T13] veth0_vlan: left promiscuous mode [ 89.178627][ T1877] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.185968][ T1877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.193311][ T1877] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.200368][ T1877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.223019][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.232717][ T1886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.233070][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.249608][ T1886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.260018][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.267220][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.276746][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.283828][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.307888][ T1877] veth0_vlan: entered promiscuous mode [ 89.319291][ T1877] veth1_macvtap: entered promiscuous mode [ 89.475513][ T1892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:6 [ 89.515838][ T1901] rust_binder: 15: no such ref 1 [ 89.543282][ T1877] ------------[ cut here ]------------ [ 89.549073][ T1877] WARNING: CPU: 0 PID: 1877 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 89.558613][ T1877] Modules linked in: [ 89.562781][ T1877] CPU: 0 UID: 0 PID: 1877 Comm: syz-executor Not tainted syzkaller #0 1899ccadb87a2390231fcfce9a7a94d2fcd39aaf [ 89.574708][ T1877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.585225][ T1877] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 89.590910][ T1877] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 75 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc f1 5a 03 cc e8 f6 48 3f ff <0f> 0b e9 3e ff ff ff e8 ea 48 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 89.611757][ T1877] RSP: 0018:ffffc9000b4ef968 EFLAGS: 00010293 [ 89.618589][ T1877] RAX: ffffffff82485faa RBX: 0000000000000000 RCX: ffff888130958000 [ 89.626986][ T1877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.635850][ T1877] RBP: ffffc9000b4ef990 R08: ffff88813306c0bf R09: 1ffff1102660d817 [ 89.643936][ T1877] R10: dffffc0000000000 R11: ffffed102660d818 R12: 0000000000000000 [ 89.652060][ T1877] R13: dffffc0000000000 R14: ffff88813306c020 R15: ffff88813cc4c660 [ 89.660351][ T1877] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 89.669778][ T1877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.676428][ T1877] CR2: 00007ffc4f970e30 CR3: 00000000074a8000 CR4: 00000000003526b0 [ 89.685088][ T1877] Call Trace: [ 89.688469][ T1877] [ 89.691658][ T1877] ovl_do_remove+0x81b/0xda0 [ 89.696474][ T1877] ? ovl_set_redirect+0x780/0x780 [ 89.701887][ T1877] ? down_write+0xee/0x2b0 [ 89.706538][ T1877] ? __cfi_down_write+0x10/0x10 [ 89.711567][ T1877] ovl_rmdir+0x1e/0x30 [ 89.715682][ T1877] vfs_rmdir+0x3e0/0x560 [ 89.720059][ T1877] incfs_kill_sb+0x109/0x230 [ 89.724720][ T1877] deactivate_locked_super+0xd5/0x2a0 [ 89.730474][ T1877] deactivate_super+0xb8/0xe0 [ 89.736261][ T1877] cleanup_mnt+0x406/0x4a0 [ 89.741079][ T1877] __cleanup_mnt+0x1d/0x40 [ 89.745700][ T1877] task_work_run+0x1e8/0x260 [ 89.750757][ T1877] ? __cfi_task_work_run+0x10/0x10 [ 89.756128][ T1877] ? free_nsproxy+0x223/0x290 [ 89.761154][ T1877] do_exit+0x9e3/0x2650 [ 89.765457][ T1877] ? __cfi_do_exit+0x10/0x10 [ 89.770283][ T1877] ? __kasan_check_write+0x18/0x20 [ 89.775553][ T1877] ? _raw_spin_lock_irq+0x93/0x120 [ 89.781138][ T1877] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 89.786755][ T1877] ? __cfi_ksys_write+0x10/0x10 [ 89.791881][ T1877] ? zap_other_threads+0x334/0x370 [ 89.797504][ T1877] do_group_exit+0x229/0x2f0 [ 89.802148][ T1877] __x64_sys_exit_group+0x43/0x50 [ 89.807274][ T1877] x64_sys_call+0x2ed2/0x2ee0 [ 89.812059][ T1877] do_syscall_64+0x57/0xf0 [ 89.816539][ T1877] ? clear_bhb_loop+0x50/0xa0 [ 89.821245][ T1877] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.827365][ T1877] RIP: 0033:0x7f3e46f9c799 [ 89.833205][ T1877] Code: Unable to access opcode bytes at 0x7f3e46f9c76f. [ 89.840403][ T1877] RSP: 002b:00007ffc4f971378 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 89.849505][ T1877] RAX: ffffffffffffffda RBX: 00007f3e47032075 RCX: 00007f3e46f9c799 [ 89.858364][ T1877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 89.866746][ T1877] RBP: 0000000000000028 R08: 0000000000000000 R09: 00007f3e47032050 [ 89.875845][ T1877] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4f972630 [ 89.884276][ T1877] R13: 00007f3e47032050 R14: 0000000000015d97 R15: 00007ffc4f973700 [ 89.893175][ T1877] [ 89.896742][ T1877] ---[ end trace 0000000000000000 ]--- [ 89.903159][ T1877] ------------[ cut here ]------------ [ 89.909169][ T1877] WARNING: CPU: 1 PID: 1877 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 89.919095][ T1877] Modules linked in: [ 89.924708][ T1877] CPU: 1 UID: 0 PID: 1877 Comm: syz-executor Tainted: G W syzkaller #0 1899ccadb87a2390231fcfce9a7a94d2fcd39aaf [ 89.939031][ T1877] Tainted: [W]=WARN [ 89.943267][ T1877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.954155][ T1877] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 89.960217][ T1877] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 75 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc f1 5a 03 cc e8 f6 48 3f ff <0f> 0b e9 3e ff ff ff e8 ea 48 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 89.982312][ T1877] RSP: 0018:ffffc9000b4ef968 EFLAGS: 00010293 [ 89.990036][ T1877] RAX: ffffffff82485faa RBX: 0000000000000000 RCX: ffff888130958000 [ 89.998892][ T1877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.008569][ T1877] RBP: ffffc9000b4ef990 R08: ffff88813306c0bf R09: 1ffff1102660d817 [ 90.017610][ T1877] R10: dffffc0000000000 R11: ffffed102660d818 R12: 0000000000000000 [ 90.027050][ T1877] R13: dffffc0000000000 R14: ffff88813306c020 R15: ffff88813cc4c660 [ 90.035813][ T1877] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 90.046680][ T1877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.054575][ T1877] CR2: 00007f4e717e92f8 CR3: 000000010c3c2000 CR4: 00000000003526b0 [ 90.064009][ T1877] Call Trace: [ 90.067875][ T1877] [ 90.070994][ T1877] ovl_do_remove+0x81b/0xda0 [ 90.075731][ T1877] ? ovl_set_redirect+0x780/0x780 [ 90.080951][ T1877] ? down_write+0xee/0x2b0 [ 90.085409][ T1877] ? __cfi_down_write+0x10/0x10 [ 90.090273][ T1877] ovl_rmdir+0x1e/0x30 [ 90.096171][ T1877] vfs_rmdir+0x3e0/0x560 [ 90.100921][ T1877] incfs_kill_sb+0x1a0/0x230 [ 90.105685][ T1877] deactivate_locked_super+0xd5/0x2a0 [ 90.111351][ T1877] deactivate_super+0xb8/0xe0 [ 90.116433][ T1877] cleanup_mnt+0x406/0x4a0 [ 90.121290][ T1877] __cleanup_mnt+0x1d/0x40 [ 90.126113][ T1877] task_work_run+0x1e8/0x260 [ 90.130999][ T1877] ? __cfi_task_work_run+0x10/0x10 [ 90.137554][ T1877] ? free_nsproxy+0x223/0x290 [ 90.143984][ T1877] do_exit+0x9e3/0x2650 [ 90.148535][ T1877] ? __cfi_do_exit+0x10/0x10 [ 90.154044][ T1877] ? __kasan_check_write+0x18/0x20 [ 90.159580][ T1877] ? _raw_spin_lock_irq+0x93/0x120 [ 90.165000][ T1877] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 90.170918][ T1877] ? __cfi_ksys_write+0x10/0x10 [ 90.176377][ T1877] ? zap_other_threads+0x334/0x370 [ 90.181520][ T1877] do_group_exit+0x229/0x2f0 [ 90.186244][ T1877] __x64_sys_exit_group+0x43/0x50 [ 90.191561][ T1877] x64_sys_call+0x2ed2/0x2ee0 [ 90.196492][ T1877] do_syscall_64+0x57/0xf0 [ 90.201897][ T1877] ? clear_bhb_loop+0x50/0xa0 [ 90.207821][ T1877] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.214012][ T1877] RIP: 0033:0x7f3e46f9c799 [ 90.218618][ T1877] Code: Unable to access opcode bytes at 0x7f3e46f9c76f. [ 90.226209][ T1877] RSP: 002b:00007ffc4f971378 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 90.235192][ T1877] RAX: ffffffffffffffda RBX: 00007f3e47032075 RCX: 00007f3e46f9c799 [ 90.243557][ T1877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 90.252382][ T1877] RBP: 0000000000000028 R08: 0000000000000000 R09: 00007f3e47032050 [ 90.260974][ T1877] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4f972630 [ 90.269005][ T1877] R13: 00007f3e47032050 R14: 0000000000015d97 R15: 00007ffc4f973700 [ 90.277559][ T1877] [ 90.280675][ T1877] ---[ end trace 0000000000000000 ]--- [ 90.425280][ T13] bridge_slave_1: left allmulticast mode [ 90.431402][ T13] bridge_slave_1: left promiscuous mode [ 90.437725][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.445725][ T13] bridge_slave_0: left allmulticast mode [ 90.451909][ T13] bridge_slave_0: left promiscuous mode [ 90.457830][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.597553][ T13] veth1_macvtap: left promiscuous mode [ 90.603475][ T13] veth0_vlan: left promiscuous mode